last executing test programs: 12m0.872671979s ago: executing program 1 (id=612): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 12m0.774576261s ago: executing program 1 (id=613): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12m0.551466685s ago: executing program 1 (id=614): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0964719"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 11m59.910863658s ago: executing program 1 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) 11m59.817898879s ago: executing program 1 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unshare(0x20000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 11m59.75585938s ago: executing program 1 (id=624): pipe2(0x0, 0x80800) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 11m44.190725112s ago: executing program 32 (id=624): pipe2(0x0, 0x80800) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 10m39.772466652s ago: executing program 4 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1a) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x2, {0x1, 0x800000000000000, 0x1000004, 0x5, 0xc1, 0x3, {0x6, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x82, 0xc000, 0x8, 0x0, 0x0, 0x8, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m39.33743262s ago: executing program 4 (id=890): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), r1) sendmsg$TIPC_NL_BEARER_GET(r1, 0x0, 0x4000080) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) ioctl$SIOCSIFMTU(r3, 0x8948, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r6, 0x29, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 10m39.226588492s ago: executing program 4 (id=893): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x0, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m37.718516102s ago: executing program 4 (id=895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 10m36.728455821s ago: executing program 4 (id=898): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getrlimit(0x8, &(0x7f0000000180)) r2 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, 0x0) 10m35.7210428s ago: executing program 4 (id=903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10m20.519755505s ago: executing program 33 (id=903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9m53.602035447s ago: executing program 2 (id=1033): ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x8902, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) 9m52.724283044s ago: executing program 2 (id=1042): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{0x0}], 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r5 = dup(r4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 9m50.820302902s ago: executing program 2 (id=1047): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0964719"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 9m48.958159358s ago: executing program 2 (id=1057): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 9m47.104583493s ago: executing program 2 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m44.268833438s ago: executing program 2 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9m28.930168296s ago: executing program 34 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 13.3534981s ago: executing program 5 (id=3261): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.319415601s ago: executing program 5 (id=3262): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 13.150807294s ago: executing program 6 (id=3265): clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x52}, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x11, r7, 0x10000000000005, 0xfffffffffffffffa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13.097437945s ago: executing program 7 (id=3266): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) 12.214371762s ago: executing program 7 (id=3268): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 12.211029502s ago: executing program 0 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800b00010072656a656374000014000280080001400000000205000200e5"], 0x7c}}, 0x10) 12.210009802s ago: executing program 3 (id=3279): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x10000000000005, 0xfffffffffffffffa) 12.208978372s ago: executing program 6 (id=3280): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050481260c"], 0x7) 12.157230734s ago: executing program 0 (id=3269): timerfd_create(0x9, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) 12.157112363s ago: executing program 3 (id=3270): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000"], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000040)=0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) 12.157061423s ago: executing program 6 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001780)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x6}, @value=@ver_80211n={0x0, 0x7ffd, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x1b80, 0xa00, @val, @void, @val={0x3, 0x1, 0x34}, @void, @val={0x6, 0x2, 0xf6}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfd, 0x1, 0x7, 0x41}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0) 11.268441921s ago: executing program 3 (id=3272): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.266419191s ago: executing program 0 (id=3273): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800470d916280321a"], 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bind$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050", @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES8=r0], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2004c894) 11.238118931s ago: executing program 3 (id=3274): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.447897982s ago: executing program 6 (id=3275): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x5d) write$ppp(r0, &(0x7f0000000480)="ac020000f0", 0x5) 1.445781402s ago: executing program 7 (id=3276): syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0x3d, 0x10, 0x67b, 0x331a, 0x4a31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x0, 0xc2, 0x16, 0x2}}]}}]}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000240)=[0x2], &(0x7f0000000200), &(0x7f0000000280)=[0x7fffffff]}) 1.422019262s ago: executing program 3 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x804) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) removexattr(&(0x7f0000000240)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.421770592s ago: executing program 6 (id=3281): r0 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$qrtrtun(r6, 0x0, 0x0) dup(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x400000000010, 0x3, 0x0) 1.418407432s ago: executing program 5 (id=3290): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.367063893s ago: executing program 0 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800b00010072656a656374000014000280080001400000000205000200e5"], 0x7c}}, 0x10) 987.286661ms ago: executing program 0 (id=3283): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x11, r0, 0x10000000000005, 0xfffffffffffffffa) 922.155332ms ago: executing program 0 (id=3284): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000030c00038005000100430000000c000480050001003f0000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xad96, 0x24, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x5d) 871.920433ms ago: executing program 5 (id=3285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c3, 0x0, 0x0, 0x0, 0x7}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0xcdc4, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 427.003942ms ago: executing program 6 (id=3286): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000"], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) 426.818402ms ago: executing program 5 (id=3287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 341.209484ms ago: executing program 3 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) rt_sigqueueinfo(0xffffffffffffffff, 0x28, 0x0) 56.959669ms ago: executing program 7 (id=3289): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000832000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.36414ms ago: executing program 7 (id=3291): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 35.27668ms ago: executing program 5 (id=3292): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x5d) write$ppp(r0, &(0x7f0000000480)="ac020000f0", 0x5) 0s ago: executing program 7 (id=3293): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) setrlimit(0xc, 0x0) kernel console output (not intermixed with test programs): : device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 460.073341][T10535] loop5: detected capacity change from 0 to 1024 [ 461.359383][T10556] loop0: detected capacity change from 0 to 1024 [ 461.989060][T10564] fuse: Unknown parameter 'fd0x0000000000000003' [ 462.703607][T10578] tipc: Enabled bearer , priority 0 [ 462.734843][T10576] tipc: Resetting bearer [ 462.789902][T10579] device syzkaller0 entered promiscuous mode [ 462.792086][T10579] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 462.795467][T10575] tipc: Resetting bearer [ 462.845666][T10575] tipc: Disabling bearer [ 463.499176][T10592] loop3: detected capacity change from 0 to 32768 [ 463.513304][T10592] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 464.888445][T10610] fuse: Unknown parameter 'fd0x0000000000000003' [ 465.428880][T10622] tipc: Started in network mode [ 465.429687][T10622] tipc: Node identity 32b7ff77846a, cluster identity 4711 [ 465.430801][T10622] tipc: Enabled bearer , priority 0 [ 465.432226][T10622] device syzkaller0 entered promiscuous mode [ 465.439940][T10622] tipc: Resetting bearer [ 465.442062][T10619] tipc: Resetting bearer [ 465.707807][T10619] tipc: Disabling bearer [ 465.812441][T10631] loop6: detected capacity change from 0 to 1024 [ 466.723162][T10646] fuse: Unknown parameter 'fd0x0000000000000003' [ 467.776605][T10660] loop3: detected capacity change from 0 to 32768 [ 467.791489][T10660] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 468.351283][T10668] tipc: Enabled bearer , priority 0 [ 468.352881][T10669] device syzkaller0 entered promiscuous mode [ 468.359333][T10675] tipc: Resetting bearer [ 468.362390][T10665] tipc: Resetting bearer [ 468.455244][T10146] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.804024][T10665] tipc: Disabling bearer [ 469.843944][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.845795][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.505517][T10715] random: crng reseeded on system resumption [ 471.321172][T10723] random: crng reseeded on system resumption [ 471.635291][T10724] loop0: detected capacity change from 0 to 32768 [ 471.903930][T10724] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 472.195927][T10727] tipc: Enabled bearer , priority 0 [ 472.197488][T10727] device syzkaller0 entered promiscuous mode [ 473.322201][ T5289] tipc: Node number set to 3483777794 [ 473.346176][T10727] tipc: Resetting bearer [ 473.358427][T10726] tipc: Resetting bearer [ 473.756095][T10726] tipc: Disabling bearer [ 474.600068][T10764] tipc: Enabled bearer , priority 0 [ 474.601840][T10764] device syzkaller0 entered promiscuous mode [ 474.615946][T10764] tipc: Resetting bearer [ 474.621112][T10762] tipc: Resetting bearer [ 474.685934][T10762] tipc: Disabling bearer [ 475.667062][T10782] loop6: detected capacity change from 0 to 32768 [ 476.002245][T10782] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 479.037159][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.038703][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.295194][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 489.211642][T10821] tipc: Enabling of bearer rejected, failed to enable media [ 489.655283][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.656912][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.676507][T10851] device syzkaller0 entered promiscuous mode [ 490.131673][T10858] fuse: Bad value for 'fd' [ 491.239138][T10888] tipc: Enabled bearer , priority 0 [ 491.241021][T10888] device syzkaller0 entered promiscuous mode [ 491.251355][T10888] tipc: Resetting bearer [ 491.256188][T10887] tipc: Resetting bearer [ 491.829407][T10887] tipc: Disabling bearer [ 491.932830][T10895] tipc: Enabled bearer , priority 0 [ 491.934368][T10895] device syzkaller0 entered promiscuous mode [ 491.940798][T10895] tipc: Resetting bearer [ 491.942939][T10894] tipc: Resetting bearer [ 492.266989][T10894] tipc: Disabling bearer [ 492.489180][T10914] fuse: Bad value for 'fd' [ 492.736095][ T4330] Bluetooth: hci4: command 0x0405 tx timeout [ 494.576213][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.406450][T10939] tipc: Enabling of bearer rejected, failed to enable media [ 504.438020][T10956] tipc: Enabled bearer , priority 0 [ 504.439988][T10956] device syzkaller0 entered promiscuous mode [ 504.447242][T10956] tipc: Resetting bearer [ 504.449219][T10955] tipc: Resetting bearer [ 504.546376][T10955] tipc: Disabling bearer [ 504.955592][T10971] loop5: detected capacity change from 0 to 32768 [ 505.040757][T10971] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 505.042627][T10971] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 505.044108][T10971] BTRFS info (device loop5): enabling auto defrag [ 505.045301][T10971] BTRFS info (device loop5): doing ref verification [ 505.046459][T10971] BTRFS info (device loop5): force clearing of disk cache [ 505.047718][T10971] BTRFS info (device loop5): max_inline at 4096 [ 505.048728][T10971] BTRFS info (device loop5): disabling free space tree [ 506.209141][T10971] BTRFS info (device loop5): enabling ssd optimizations [ 506.210938][T10971] BTRFS info (device loop5): rebuilding free space tree [ 506.230485][T10971] BTRFS info (device loop5): disabling free space tree [ 506.231575][T10971] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 506.233045][T10971] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 506.241215][T10969] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 506.622117][ T6976] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 507.021142][T11010] device syzkaller0 entered promiscuous mode [ 509.955306][T11047] random: crng reseeded on system resumption [ 520.965352][T11098] random: crng reseeded on system resumption [ 521.778650][T11109] device syzkaller0 entered promiscuous mode [ 536.045222][T11194] random: crng reseeded on system resumption [ 537.579690][T11224] random: crng reseeded on system resumption [ 540.789970][T11282] random: crng reseeded on system resumption [ 541.509620][T11297] random: crng reseeded on system resumption [ 541.685083][ T5286] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 542.314989][T11305] loop3: detected capacity change from 0 to 32768 [ 542.394456][T11305] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1523 (11305) [ 542.863584][ T5286] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 542.865227][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 542.876206][ T5286] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 542.877670][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 542.878948][ T5286] usb 1-1: Product: syz [ 542.879629][ T5286] usb 1-1: Manufacturer: syz [ 542.880481][ T5286] usb 1-1: SerialNumber: syz [ 542.887289][ T5286] usb 1-1: config 0 descriptor?? [ 542.907268][T11305] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 542.909030][T11305] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 542.910514][T11305] BTRFS info (device loop3): enabling auto defrag [ 542.911610][T11305] BTRFS info (device loop3): doing ref verification [ 542.912796][T11305] BTRFS info (device loop3): force clearing of disk cache [ 542.914048][T11305] BTRFS info (device loop3): max_inline at 4096 [ 542.915159][T11305] BTRFS info (device loop3): disabling free space tree [ 543.091333][ T5286] usb 1-1: selecting invalid altsetting 0 [ 543.115616][T11309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.117171][T11309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.231426][ T5137] usb 1-1: USB disconnect, device number 7 [ 543.255284][T11305] BTRFS info (device loop3): enabling ssd optimizations [ 543.256901][T11305] BTRFS info (device loop3): rebuilding free space tree [ 543.259962][T11305] BTRFS info (device loop3): disabling free space tree [ 543.261192][T11305] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 543.262796][T11305] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 543.279792][T11304] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 543.417050][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 543.834618][T11338] tipc: Enabled bearer , priority 0 [ 543.843877][T11338] device syzkaller0 entered promiscuous mode [ 543.854245][T11170] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (11170) [ 543.875888][T11338] tipc: Resetting bearer [ 543.914888][T11337] tipc: Resetting bearer [ 543.948911][T11337] tipc: Disabling bearer [ 545.333279][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.337162][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.698676][T11374] loop7: detected capacity change from 0 to 32768 [ 545.806882][T11374] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 546.667829][T11376] tipc: Enabled bearer , priority 0 [ 546.669623][T11376] device syzkaller0 entered promiscuous mode [ 546.697794][T11376] tipc: Resetting bearer [ 546.701260][T11375] tipc: Resetting bearer [ 546.735693][T11177] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 546.786275][T11375] tipc: Disabling bearer [ 547.975785][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.978414][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.899958][T11419] tipc: Enabled bearer , priority 0 [ 548.901684][T11419] device syzkaller0 entered promiscuous mode [ 548.911436][T11419] tipc: Resetting bearer [ 548.913647][T11414] tipc: Resetting bearer [ 548.976464][T11414] tipc: Disabling bearer [ 549.402843][T11429] loop3: detected capacity change from 0 to 32768 [ 549.445934][T11429] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 549.447878][T11429] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 549.449319][T11429] BTRFS info (device loop3): enabling auto defrag [ 549.450464][T11429] BTRFS info (device loop3): doing ref verification [ 549.451756][T11429] BTRFS info (device loop3): force clearing of disk cache [ 549.453125][T11429] BTRFS info (device loop3): max_inline at 4096 [ 549.454283][T11429] BTRFS info (device loop3): disabling free space tree [ 550.596173][T11429] BTRFS info (device loop3): enabling ssd optimizations [ 550.601600][T11429] BTRFS info (device loop3): rebuilding free space tree [ 550.629580][T11429] BTRFS info (device loop3): disabling free space tree [ 550.630789][T11429] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 550.632368][T11429] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 550.643176][T11427] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 550.777605][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 551.355988][T11177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (11177) [ 552.041663][T11490] tipc: Enabled bearer , priority 0 [ 552.043482][T11490] device syzkaller0 entered promiscuous mode [ 552.470299][T11490] tipc: Resetting bearer [ 552.503612][T11489] tipc: Resetting bearer [ 552.625595][T11489] tipc: Disabling bearer [ 552.817404][T11502] loop3: detected capacity change from 0 to 32768 [ 553.932443][T11502] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 553.933096][T11503] random: crng reseeded on system resumption [ 553.934121][T11502] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 553.936564][T11502] BTRFS info (device loop3): enabling auto defrag [ 553.937554][T11502] BTRFS info (device loop3): doing ref verification [ 553.938571][T11502] BTRFS info (device loop3): force clearing of disk cache [ 553.939737][T11502] BTRFS info (device loop3): max_inline at 4096 [ 553.940640][T11502] BTRFS info (device loop3): disabling free space tree [ 554.135104][T11502] BTRFS info (device loop3): enabling ssd optimizations [ 554.137232][T11502] BTRFS info (device loop3): rebuilding free space tree [ 554.140302][T11502] BTRFS info (device loop3): disabling free space tree [ 554.141447][T11502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 554.143080][T11502] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 554.152218][T11501] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 554.291884][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 555.871225][T11562] tipc: Enabled bearer , priority 0 [ 555.873133][T11562] device syzkaller0 entered promiscuous mode [ 555.919153][T11562] tipc: Resetting bearer [ 555.922778][T11561] tipc: Resetting bearer [ 555.975630][T11561] tipc: Disabling bearer [ 556.025274][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.342856][T11570] loop7: detected capacity change from 0 to 32768 [ 556.455510][T11570] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1590 (11570) [ 556.477468][T11570] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 556.479421][T11570] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 556.480890][T11570] BTRFS info (device loop7): enabling auto defrag [ 556.481942][T11570] BTRFS info (device loop7): doing ref verification [ 556.483074][T11570] BTRFS info (device loop7): force clearing of disk cache [ 556.484471][T11570] BTRFS info (device loop7): max_inline at 4096 [ 556.485633][T11570] BTRFS info (device loop7): disabling free space tree [ 557.599146][T11570] BTRFS info (device loop7): enabling ssd optimizations [ 557.615759][T11570] BTRFS info (device loop7): rebuilding free space tree [ 557.624243][T11570] BTRFS info (device loop7): disabling free space tree [ 557.625576][T11570] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 557.627146][T11570] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 557.640922][T11569] BTRFS info (device loop7): setting compat-ro feature flag for VERITY (0x4) [ 557.826624][ T9233] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 558.530638][T11615] tipc: Enabled bearer , priority 0 [ 558.535609][T11615] device syzkaller0 entered promiscuous mode [ 558.667330][T11618] tipc: Resetting bearer [ 558.674452][T11614] tipc: Resetting bearer [ 558.725595][T11614] tipc: Disabling bearer [ 558.744275][T11622] random: crng reseeded on system resumption [ 560.464323][T11646] loop3: detected capacity change from 0 to 32768 [ 560.475900][T11646] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1608 (11646) [ 560.526753][T11646] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 560.528716][T11646] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 560.530198][T11646] BTRFS info (device loop3): enabling auto defrag [ 560.531233][T11646] BTRFS info (device loop3): doing ref verification [ 560.532420][T11646] BTRFS info (device loop3): force clearing of disk cache [ 560.533626][T11646] BTRFS info (device loop3): max_inline at 4096 [ 560.534648][T11646] BTRFS info (device loop3): disabling free space tree [ 561.678843][T11646] BTRFS info (device loop3): enabling ssd optimizations [ 561.681666][T11646] BTRFS info (device loop3): rebuilding free space tree [ 561.686748][T11646] BTRFS info (device loop3): disabling free space tree [ 561.687839][T11646] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 561.689323][T11646] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 561.724046][T11644] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 561.862804][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 561.898919][T11676] fuse: Bad value for 'group_id' [ 562.191969][T11679] tipc: Enabled bearer , priority 0 [ 562.193712][T11679] device syzkaller0 entered promiscuous mode [ 562.228729][T11177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (11177) [ 562.239371][T11679] tipc: Resetting bearer [ 562.246523][T11677] tipc: Resetting bearer [ 562.287084][T11677] tipc: Disabling bearer [ 562.812125][T11704] block device autoloading is deprecated and will be removed. [ 562.826742][T11705] random: crng reseeded on system resumption [ 562.846367][T11699] md2: error: bitmap file must be a regular file [ 563.207335][T11711] loop5: detected capacity change from 0 to 32768 [ 563.219648][T11711] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 564.367189][T11724] tipc: Enabled bearer , priority 0 [ 564.370816][T11724] device syzkaller0 entered promiscuous mode [ 564.438536][T11728] tipc: Resetting bearer [ 564.477407][T11723] tipc: Resetting bearer [ 564.585630][T11723] tipc: Disabling bearer [ 564.946092][T11739] fuse: Bad value for 'group_id' [ 565.662551][T11753] loop6: detected capacity change from 0 to 32768 [ 565.688943][T11753] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 566.763723][T11768] tipc: Enabled bearer , priority 0 [ 566.774823][T11768] device syzkaller0 entered promiscuous mode [ 566.816699][T11768] tipc: Resetting bearer [ 566.828482][T11767] tipc: Resetting bearer [ 566.874423][T11771] fuse: Bad value for 'group_id' [ 566.875956][T11767] tipc: Disabling bearer [ 568.500259][T11802] loop6: detected capacity change from 0 to 32768 [ 568.554095][T11802] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 569.472406][T11807] tipc: Enabled bearer , priority 0 [ 569.491194][T11807] device syzkaller0 entered promiscuous mode [ 569.621591][T11815] tipc: Resetting bearer [ 569.630774][T11806] tipc: Resetting bearer [ 569.681172][T11806] tipc: Disabling bearer [ 571.484097][T11857] loop5: detected capacity change from 0 to 32768 [ 571.518200][T11857] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 572.416918][T11867] tipc: Enabled bearer , priority 0 [ 572.423095][T11867] device syzkaller0 entered promiscuous mode [ 572.532858][T11867] tipc: Resetting bearer [ 572.541439][T11866] tipc: Resetting bearer [ 572.894797][T11866] tipc: Disabling bearer [ 573.769368][T11899] loop7: detected capacity change from 0 to 32768 [ 573.852313][T11899] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 574.747314][T11177] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 575.341095][T11921] tipc: Enabled bearer , priority 0 [ 575.342897][T11921] device syzkaller0 entered promiscuous mode [ 575.427253][T11921] tipc: Resetting bearer [ 575.438059][T11920] tipc: Resetting bearer [ 575.756805][T11920] tipc: Disabling bearer [ 577.300500][T11958] loop6: detected capacity change from 0 to 32768 [ 577.314641][T11958] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 577.920870][T11970] tipc: Enabled bearer , priority 0 [ 578.312215][T11970] tipc: Resetting bearer [ 578.317187][T11972] device syzkaller0 entered promiscuous mode [ 578.318508][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 578.330356][T11969] tipc: Resetting bearer [ 579.075485][T11969] tipc: Disabling bearer [ 580.062400][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.063909][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.656567][T12023] loop0: detected capacity change from 0 to 32768 [ 580.661524][T12023] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 581.101298][T12030] tipc: Enabled bearer , priority 0 [ 581.102754][T12030] device syzkaller0 entered promiscuous mode [ 581.509454][T12030] tipc: Resetting bearer [ 581.521388][T12028] tipc: Resetting bearer [ 581.586030][T12028] tipc: Disabling bearer [ 582.405153][T12058] fuse: Unknown parameter 'grou00000000000000000000' [ 584.055764][T12086] loop0: detected capacity change from 0 to 32768 [ 584.057472][T12086] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 584.128758][T12089] tipc: Enabled bearer , priority 0 [ 584.130482][T12089] device syzkaller0 entered promiscuous mode [ 584.155813][T11314] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 584.568619][T12089] tipc: Resetting bearer [ 584.597832][T12088] tipc: Resetting bearer [ 584.646365][T12088] tipc: Disabling bearer [ 584.804263][T12106] fuse: Unknown parameter 'grou00000000000000000000' [ 586.893805][T12134] loop5: detected capacity change from 0 to 32768 [ 586.942641][T12134] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 587.570283][T12143] tipc: Enabled bearer , priority 0 [ 587.573001][T12143] device syzkaller0 entered promiscuous mode [ 588.039099][T12148] tipc: Resetting bearer [ 588.049541][T12150] fuse: Unknown parameter 'grou00000000000000000000' [ 588.062462][T12138] tipc: Resetting bearer [ 588.186172][T12138] tipc: Disabling bearer [ 590.083036][T12194] fuse: Unknown parameter 'group_i00000000000000000000' [ 590.863676][T12206] tipc: Enabled bearer , priority 0 [ 590.865760][T12206] device syzkaller0 entered promiscuous mode [ 590.908092][T12203] tipc: Resetting bearer [ 591.006102][T12203] tipc: Disabling bearer [ 591.534010][T12227] fuse: Unknown parameter 'group_i00000000000000000000' [ 591.954909][T12235] tipc: Enabled bearer , priority 0 [ 591.957017][T12235] device syzkaller0 entered promiscuous mode [ 592.016937][T12238] tipc: Resetting bearer [ 592.027778][T12234] tipc: Resetting bearer [ 592.065762][T12234] tipc: Disabling bearer [ 592.209662][T12242] loop6: detected capacity change from 0 to 32768 [ 592.218465][T12242] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 592.931217][T12246] tipc: Enabled bearer , priority 0 [ 592.945472][T12246] device syzkaller0 entered promiscuous mode [ 593.629765][T12244] tipc: Resetting bearer [ 593.726021][T12244] tipc: Disabling bearer [ 593.829638][T12271] fuse: Unknown parameter 'group_i00000000000000000000' [ 595.305559][T12302] loop7: detected capacity change from 0 to 32768 [ 595.332546][T12302] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 595.800981][T12308] tipc: Enabled bearer , priority 0 [ 595.829490][T12308] device syzkaller0 entered promiscuous mode [ 595.946594][T12305] tipc: Resetting bearer [ 596.274358][T12316] fuse: Unknown parameter 'group_id00000000000000000000' [ 596.626944][T12305] tipc: Disabling bearer [ 596.642153][T12320] tipc: Enabled bearer , priority 0 [ 596.643769][T12323] device syzkaller0 entered promiscuous mode [ 596.664137][T12318] tipc: Resetting bearer [ 597.014440][T12317] tipc: Resetting bearer [ 597.085585][T12317] tipc: Disabling bearer [ 597.769301][T12356] fuse: Unknown parameter 'group_id00000000000000000000' [ 598.447197][T12366] loop0: detected capacity change from 0 to 32768 [ 598.478683][T12366] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 599.483902][T12382] tipc: Enabled bearer , priority 0 [ 599.558521][T12382] device syzkaller0 entered promiscuous mode [ 599.769425][T12383] tipc: Resetting bearer [ 599.811782][T12381] tipc: Resetting bearer [ 599.854298][T12391] fuse: Unknown parameter 'group_id00000000000000000000' [ 599.895741][T12381] tipc: Disabling bearer [ 601.783911][T12429] loop5: detected capacity change from 0 to 32768 [ 601.797268][T12429] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 602.222767][T12440] fuse: Bad value for 'user_id' [ 604.261443][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.264032][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.984768][T12485] fuse: Bad value for 'user_id' [ 605.853578][T12500] loop3: detected capacity change from 0 to 32768 [ 605.859469][T12500] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 605.861211][T12500] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 605.862507][T12500] BTRFS info (device loop3): enabling auto defrag [ 605.863506][T12500] BTRFS info (device loop3): doing ref verification [ 605.864552][T12500] BTRFS info (device loop3): force clearing of disk cache [ 605.865793][T12500] BTRFS info (device loop3): max_inline at 4096 [ 605.866717][T12500] BTRFS info (device loop3): disabling free space tree [ 606.070267][T12500] BTRFS info (device loop3): enabling ssd optimizations [ 606.230002][T12500] BTRFS info (device loop3): rebuilding free space tree [ 606.285720][T12500] BTRFS info (device loop3): disabling free space tree [ 606.287310][T12500] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 606.288948][T12500] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 606.405681][T12496] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 606.525372][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 607.962928][T12560] fuse: Bad value for 'user_id' [ 608.751678][T12577] loop5: detected capacity change from 0 to 32768 [ 608.759157][T12577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1869 (12577) [ 608.810675][T12577] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 608.812434][T12577] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 608.814007][T12577] BTRFS info (device loop5): enabling auto defrag [ 608.815068][T12577] BTRFS info (device loop5): doing ref verification [ 608.816202][T12577] BTRFS info (device loop5): force clearing of disk cache [ 608.817463][T12577] BTRFS info (device loop5): max_inline at 4096 [ 608.818531][T12577] BTRFS info (device loop5): disabling free space tree [ 609.989762][T12577] BTRFS info (device loop5): enabling ssd optimizations [ 609.991418][T12577] BTRFS info (device loop5): rebuilding free space tree [ 609.996374][T12577] BTRFS info (device loop5): disabling free space tree [ 609.997501][T12577] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 609.999046][T12577] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 610.007158][T12576] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 610.344826][ T6976] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 611.314431][T12615] fuse: Bad value for 'fd' [ 613.546921][T12652] loop3: detected capacity change from 0 to 32768 [ 613.561870][T12658] netlink: 'syz.5.1887': attribute type 1 has an invalid length. [ 613.599981][T12652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1885 (12652) [ 613.605669][T12652] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 613.607365][T12652] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 613.608636][T12652] BTRFS info (device loop3): enabling auto defrag [ 613.609618][T12652] BTRFS info (device loop3): doing ref verification [ 613.610484][T12652] BTRFS info (device loop3): force clearing of disk cache [ 613.611540][T12652] BTRFS info (device loop3): max_inline at 4096 [ 613.612458][T12652] BTRFS info (device loop3): disabling free space tree [ 613.624147][T12658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.640228][T12660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.643900][T12660] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 613.651139][T12660] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 613.711974][T12658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.719610][T12658] device batadv_slave_1 entered promiscuous mode [ 613.734249][T12658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.849449][T12652] BTRFS info (device loop3): enabling ssd optimizations [ 613.851249][T12652] BTRFS info (device loop3): rebuilding free space tree [ 613.860112][T12652] BTRFS info (device loop3): disabling free space tree [ 613.861273][T12652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 613.862895][T12652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 613.887723][T12650] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 614.241936][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 614.709992][T12692] fuse: Bad value for 'fd' [ 616.555188][T12725] loop6: detected capacity change from 0 to 32768 [ 616.714476][T12725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1901 (12725) [ 617.155894][T12725] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 617.157598][T12725] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 617.158941][T12725] BTRFS info (device loop6): enabling auto defrag [ 617.159907][T12725] BTRFS info (device loop6): doing ref verification [ 617.160951][T12725] BTRFS info (device loop6): force clearing of disk cache [ 617.162173][T12725] BTRFS info (device loop6): max_inline at 4096 [ 617.163272][T12725] BTRFS info (device loop6): disabling free space tree [ 617.571570][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.630586][T12734] fuse: Bad value for 'fd' [ 617.638695][T12736] netlink: 'syz.7.1904': attribute type 1 has an invalid length. [ 617.679030][T12736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.726941][T12744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.728269][T12744] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 617.730399][T12744] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 617.795441][T12736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.797154][T12736] device batadv_slave_1 entered promiscuous mode [ 617.804683][T12736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.806195][T12725] BTRFS info (device loop6): enabling ssd optimizations [ 617.806636][T12725] BTRFS info (device loop6): rebuilding free space tree [ 617.811606][T12725] BTRFS info (device loop6): disabling free space tree [ 617.812698][T12725] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 617.814250][T12725] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 617.833601][T12723] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 617.969354][ T8419] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 618.990213][T12778] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 618.997494][T12778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.025963][T12778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.127506][T12778] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 619.149254][T12778] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 619.338381][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.339950][T12782] device batadv_slave_1 entered promiscuous mode [ 619.359312][T12782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.037503][T12795] fuse: Bad value for 'fd' [ 621.146485][T12806] loop5: detected capacity change from 0 to 32768 [ 621.176691][T12806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1917 (12806) [ 622.120540][T12806] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 622.122250][T12806] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 622.123754][T12806] BTRFS info (device loop5): enabling auto defrag [ 622.124681][T12806] BTRFS info (device loop5): doing ref verification [ 622.125748][T12806] BTRFS info (device loop5): force clearing of disk cache [ 622.126920][T12806] BTRFS info (device loop5): max_inline at 4096 [ 622.127871][T12806] BTRFS info (device loop5): disabling free space tree [ 622.627826][T12834] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 622.644901][T12834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.744941][T12806] BTRFS info (device loop5): enabling ssd optimizations [ 622.747185][T12806] BTRFS info (device loop5): rebuilding free space tree [ 622.751990][T12806] BTRFS info (device loop5): disabling free space tree [ 622.753189][T12806] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 622.754927][T12806] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 622.766807][T12804] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 622.840907][T12834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.858961][T12834] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 622.863063][T12834] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 622.911076][ T6976] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 623.518189][T12857] fuse: Bad value for 'fd' [ 623.599867][T12861] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 623.614624][T12861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.659844][T12861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.661321][T12861] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 623.664283][T12861] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 624.985163][T12887] loop0: detected capacity change from 0 to 32768 [ 625.040074][T12887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1935 (12887) [ 625.065221][T12887] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.067119][T12887] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 625.068646][T12887] BTRFS info (device loop0): enabling auto defrag [ 625.069833][T12887] BTRFS info (device loop0): doing ref verification [ 625.070949][T12887] BTRFS info (device loop0): force clearing of disk cache [ 625.072138][T12887] BTRFS info (device loop0): max_inline at 4096 [ 625.073128][T12887] BTRFS info (device loop0): disabling free space tree [ 626.142948][T12887] BTRFS info (device loop0): enabling ssd optimizations [ 626.144997][T12887] BTRFS info (device loop0): rebuilding free space tree [ 626.150051][T12887] BTRFS info (device loop0): disabling free space tree [ 626.151325][T12887] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 626.152850][T12887] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 626.164007][T12886] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 626.578342][ T4325] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.578583][T12913] fuse: Bad value for 'fd' [ 626.671783][T12917] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 626.705031][T12917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.750402][T12917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.752692][T12917] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 626.757560][T12917] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 626.799175][T12921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.801311][T12921] device batadv_slave_1 entered promiscuous mode [ 626.812439][T12921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.306286][T12927] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 627.324190][T12927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.477852][T12927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.486738][T12927] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 627.498261][T12927] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 629.145282][T12963] fuse: Invalid rootmode [ 629.513487][T12969] loop5: detected capacity change from 0 to 32768 [ 629.552571][T12969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1949 (12969) [ 630.169815][T12969] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 630.171590][T12969] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 630.172968][T12969] BTRFS info (device loop5): enabling auto defrag [ 630.173979][T12969] BTRFS info (device loop5): doing ref verification [ 630.175096][T12969] BTRFS info (device loop5): force clearing of disk cache [ 630.176313][T12969] BTRFS info (device loop5): max_inline at 4096 [ 630.177437][T12969] BTRFS info (device loop5): disabling free space tree [ 631.621704][T13001] netlink: 'syz.6.1958': attribute type 1 has an invalid length. [ 631.638681][T13001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.901001][T12969] BTRFS info (device loop5): enabling ssd optimizations [ 631.912403][T12969] BTRFS info (device loop5): rebuilding free space tree [ 631.928453][T12969] BTRFS info (device loop5): disabling free space tree [ 631.929567][T12969] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 631.931302][T12969] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 631.943040][T12967] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 632.039839][T13001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 632.074453][T13001] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 632.078230][T13001] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 632.082183][ T6976] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 632.089747][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.103005][T13016] device batadv_slave_1 entered promiscuous mode [ 632.183365][T13016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.724024][T13031] fuse: Invalid rootmode [ 633.978404][T13063] loop0: detected capacity change from 0 to 32768 [ 634.109454][T13063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1971 (13063) [ 634.164684][T13063] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 634.166609][T13063] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 634.168131][T13063] BTRFS info (device loop0): enabling auto defrag [ 634.169334][T13063] BTRFS info (device loop0): doing ref verification [ 634.170468][T13063] BTRFS info (device loop0): force clearing of disk cache [ 634.171529][T13063] BTRFS info (device loop0): max_inline at 4096 [ 634.172694][T13063] BTRFS info (device loop0): disabling free space tree [ 635.134347][T13063] BTRFS info (device loop0): enabling ssd optimizations [ 635.136535][T13063] BTRFS info (device loop0): rebuilding free space tree [ 635.140939][T13063] BTRFS info (device loop0): disabling free space tree [ 635.142019][T13063] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 635.143532][T13063] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 635.234531][T13061] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 635.277640][T13092] fuse: Invalid rootmode [ 635.997061][ T4325] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 636.550770][T11177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (11177) [ 637.548814][T13143] loop6: detected capacity change from 0 to 32768 [ 637.563582][T13143] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 638.229254][T13146] fuse: Bad value for 'rootmode' [ 640.741758][T13187] fuse: Bad value for 'rootmode' [ 641.195397][T13197] loop6: detected capacity change from 0 to 32768 [ 641.240825][T13197] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 643.637834][T13224] fuse: Bad value for 'rootmode' [ 644.397081][T13245] loop7: detected capacity change from 0 to 32768 [ 644.406749][T13245] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 645.585486][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 645.586964][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2018'. [ 646.162165][T13256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 646.652478][T13277] fuse: Unknown parameter 'use00000000000000000000' [ 646.660432][T13279] netlink: 'syz.6.2026': attribute type 1 has an invalid length. [ 646.680885][T13279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.099621][T13279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.111536][T13279] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 647.121475][T13279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 647.138683][T13297] bond2: (slave batadv_slave_1): making interface the new active one [ 647.140629][T13297] bond2: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 647.153519][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 647.490530][T13301] loop5: detected capacity change from 0 to 32768 [ 647.510112][T13301] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 648.649558][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2037'. [ 648.651120][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2037'. [ 649.086678][T13312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 649.094341][T13323] fuse: Unknown parameter 'use00000000000000000000' [ 649.251041][T13332] bond2: (slave batadv_slave_1): Releasing active interface [ 651.370437][T13368] loop7: detected capacity change from 0 to 32768 [ 651.469203][T13368] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 652.168388][T13374] fuse: Unknown parameter 'use00000000000000000000' [ 652.328288][T11177] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.999185][T13416] fuse: Unknown parameter 'user_i00000000000000000000' [ 654.589144][T13422] loop6: detected capacity change from 0 to 32768 [ 654.597411][T13422] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 657.193360][T13458] fuse: Unknown parameter 'user_i00000000000000000000' [ 658.969063][T13486] loop3: detected capacity change from 0 to 32768 [ 659.280811][T13486] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 660.710393][T13500] fuse: Unknown parameter 'user_i00000000000000000000' [ 663.710630][T13551] block device autoloading is deprecated and will be removed. [ 663.717544][T13546] md2: error: bitmap file must be a regular file [ 664.133647][T13560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.140446][T13560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.300763][T13642] fuse: Unknown parameter 'user_id00000000000000000000' [ 669.637396][T13653] loop6: detected capacity change from 0 to 32768 [ 669.647020][T13653] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 670.565107][T11177] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.042124][T13684] fuse: Unknown parameter 'user_id00000000000000000000' [ 674.290009][T13714] loop5: detected capacity change from 0 to 32768 [ 674.301383][T13714] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 675.800234][T11177] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.941135][T13729] fuse: Bad value for 'fd' [ 679.016656][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.266205][T13838] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 681.273025][T13838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.292227][T13838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.293608][T13838] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 681.296536][T13838] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 681.631041][T13838] bond2: (slave batadv_slave_1): making interface the new active one [ 681.632688][T13838] bond2: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 681.656333][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2186'. [ 682.438737][T13863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.441692][T13863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.485185][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 684.666747][ T22] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 684.668647][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 684.671571][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.673068][ T22] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 684.674342][ T22] usb 1-1: Product: syz [ 684.674984][ T22] usb 1-1: Manufacturer: syz [ 684.675742][ T22] usb 1-1: SerialNumber: syz [ 684.677543][ T22] usb 1-1: config 0 descriptor?? [ 684.680332][ T22] usb 1-1: selecting invalid altsetting 0 [ 685.117730][ T4374] usb 1-1: USB disconnect, device number 8 [ 689.906416][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.907984][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.052297][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.053839][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.051085][T14243] bond2: (slave batadv_slave_1): Releasing active interface [ 703.421713][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2296'. [ 703.433908][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2296'. [ 707.170004][T14333] netlink: 'syz.5.2335': attribute type 10 has an invalid length. [ 707.172964][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.174319][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.184988][T14333] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.186528][T14333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.188215][T14333] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.189503][T14333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.192630][T14333] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 707.517266][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2335'. [ 707.519058][T14333] device bridge_slave_1 left promiscuous mode [ 707.520248][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.603507][T14333] device bridge_slave_0 left promiscuous mode [ 707.605921][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.962596][T14333] bond0: (slave bridge0): Releasing backup interface [ 709.717582][T14375] loop0: detected capacity change from 0 to 32768 [ 710.166987][T14375] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 710.168692][T14375] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 710.170042][T14375] BTRFS info (device loop0): enabling auto defrag [ 710.170975][T14375] BTRFS info (device loop0): doing ref verification [ 710.171925][T14375] BTRFS info (device loop0): force clearing of disk cache [ 710.173106][T14375] BTRFS info (device loop0): max_inline at 4096 [ 710.174137][T14375] BTRFS info (device loop0): disabling free space tree [ 711.052468][T14375] BTRFS info (device loop0): enabling ssd optimizations [ 711.060787][T14375] BTRFS info (device loop0): rebuilding free space tree [ 711.115483][T14375] BTRFS info (device loop0): disabling free space tree [ 711.117105][T14375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 711.118761][T14375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 711.236318][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'. [ 711.237876][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2343'. [ 711.593678][ T4325] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 711.653499][T14418] netlink: 'syz.7.2346': attribute type 10 has an invalid length. [ 711.689538][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.690738][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.707881][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.709013][T14418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.710423][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.711541][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.713876][T14418] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 711.727766][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2346'. [ 711.729341][T14422] device bridge_slave_1 left promiscuous mode [ 711.730418][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.805849][T14422] device bridge_slave_0 left promiscuous mode [ 711.806995][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.507348][T14422] bond0: (slave bridge0): Releasing backup interface [ 714.155022][T14461] loop3: detected capacity change from 0 to 32768 [ 714.174323][T14461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2355 (14461) [ 715.055134][T14461] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 715.056781][T14461] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 715.058038][T14461] BTRFS info (device loop3): enabling auto defrag [ 715.058968][T14461] BTRFS info (device loop3): doing ref verification [ 715.059915][T14461] BTRFS info (device loop3): force clearing of disk cache [ 715.061017][T14461] BTRFS info (device loop3): max_inline at 4096 [ 715.061938][T14461] BTRFS info (device loop3): disabling free space tree [ 715.145409][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'. [ 715.146763][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2360'. [ 715.781745][T14461] BTRFS info (device loop3): enabling ssd optimizations [ 715.783641][T14461] BTRFS info (device loop3): rebuilding free space tree [ 715.789480][T14461] BTRFS info (device loop3): disabling free space tree [ 715.790678][T14461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 715.792503][T14461] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 716.229388][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 716.381742][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2367'. [ 716.389663][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2367'. [ 716.809007][T14524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2370'. [ 716.810488][T14524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2370'. [ 719.242930][T14560] loop5: detected capacity change from 0 to 32768 [ 719.257347][T14560] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2376 (14560) [ 719.304389][T14560] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 719.306256][T14560] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 719.308071][T14560] BTRFS info (device loop5): enabling auto defrag [ 719.309130][T14560] BTRFS info (device loop5): doing ref verification [ 719.310208][T14560] BTRFS info (device loop5): force clearing of disk cache [ 719.311384][T14560] BTRFS info (device loop5): max_inline at 4096 [ 719.312494][T14560] BTRFS info (device loop5): disabling free space tree [ 720.492485][T14560] BTRFS info (device loop5): enabling ssd optimizations [ 720.494231][T14560] BTRFS info (device loop5): rebuilding free space tree [ 720.499399][T14560] BTRFS info (device loop5): disabling free space tree [ 720.500541][T14560] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 720.502159][T14560] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 721.312058][ T6976] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 721.498992][T14601] netlink: 'syz.0.2389': attribute type 10 has an invalid length. [ 721.528211][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.529496][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.167888][T14601] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.169190][T14601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.170349][T14601] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.171372][T14601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.176072][T14601] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 722.198674][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 722.204346][T14597] device bridge_slave_1 left promiscuous mode [ 722.210013][T14597] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.245861][T14597] device bridge_slave_0 left promiscuous mode [ 722.247028][T14597] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.306507][T14597] bond0: (slave bridge0): Releasing backup interface [ 724.407172][T14637] loop3: detected capacity change from 0 to 32768 [ 724.456714][T14637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2396 (14637) [ 725.136075][T14637] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.137685][T14637] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 725.138879][T14637] BTRFS info (device loop3): enabling auto defrag [ 725.139772][T14637] BTRFS info (device loop3): doing ref verification [ 725.140700][T14637] BTRFS info (device loop3): force clearing of disk cache [ 725.141802][T14637] BTRFS info (device loop3): max_inline at 4096 [ 725.142836][T14637] BTRFS info (device loop3): disabling free space tree [ 725.158883][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2398'. [ 725.167761][T14643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2398'. [ 726.389957][T14637] BTRFS info (device loop3): enabling ssd optimizations [ 726.392865][T14637] BTRFS info (device loop3): rebuilding free space tree [ 726.398088][T14637] BTRFS info (device loop3): disabling free space tree [ 726.399390][T14637] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 726.400816][T14637] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 726.541004][ T4320] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 728.028982][T14717] netlink: 'syz.3.2411': attribute type 10 has an invalid length. [ 728.030785][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.032014][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.045240][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.046507][T14717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.047760][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.048918][T14717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.051424][T14717] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 728.062153][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 728.063802][T14717] device bridge_slave_1 left promiscuous mode [ 728.064905][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.116263][T14717] device bridge_slave_0 left promiscuous mode [ 728.117511][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.208214][T14717] bond0: (slave bridge0): Releasing backup interface [ 728.440788][T14722] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2413'. [ 728.442358][T14722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2413'. [ 731.772590][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.774134][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.335804][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.291096][T14852] netlink: 'syz.6.2446': attribute type 10 has an invalid length. [ 747.292740][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.293837][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.300319][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.301476][T14852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.302812][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.303973][T14852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.307755][T14852] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 747.309207][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2446'. [ 747.310719][T14855] device bridge_slave_1 left promiscuous mode [ 747.311823][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.345701][T14855] device bridge_slave_0 left promiscuous mode [ 747.346754][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.475684][T14855] bond0: (slave bridge0): Releasing backup interface [ 747.589150][T14893] netlink: 'syz.3.2456': attribute type 10 has an invalid length. [ 747.593166][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 748.650031][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2473'. [ 753.821517][T15005] netlink: 'syz.5.2487': attribute type 10 has an invalid length. [ 753.823547][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'. [ 753.839181][T15008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.666802][T15021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2488'. [ 771.859119][T15140] loop6: detected capacity change from 0 to 32768 [ 771.930978][T15140] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2518 (15140) [ 772.626537][T15140] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 772.628219][T15140] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 772.629669][T15140] BTRFS info (device loop6): enabling auto defrag [ 772.630654][T15140] BTRFS info (device loop6): doing ref verification [ 772.631713][T15140] BTRFS info (device loop6): force clearing of disk cache [ 772.632818][T15140] BTRFS info (device loop6): max_inline at 4096 [ 772.633804][T15140] BTRFS info (device loop6): disabling free space tree [ 772.657959][T15140] BTRFS info (device loop6): enabling ssd optimizations [ 772.659551][T15140] BTRFS info (device loop6): rebuilding free space tree [ 772.662347][T15140] BTRFS info (device loop6): disabling free space tree [ 772.663535][T15140] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 772.665405][T15140] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 772.760996][T15140] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 772.905595][ T8419] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 773.175193][ T5141] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 773.586093][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.587890][ T5141] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 773.589370][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.591668][ T5141] usb 1-1: config 0 descriptor?? [ 773.594331][ T5141] pwc: Askey VC010 type 2 USB webcam detected. [ 773.999930][ T5141] pwc: recv_control_msg error -32 req 02 val 2b00 [ 774.001394][ T5141] pwc: recv_control_msg error -32 req 02 val 2700 [ 774.002839][ T5141] pwc: recv_control_msg error -32 req 02 val 2c00 [ 774.004364][ T5141] pwc: recv_control_msg error -32 req 04 val 1000 [ 774.008382][ T5141] pwc: recv_control_msg error -32 req 04 val 1300 [ 774.009878][ T5141] pwc: recv_control_msg error -32 req 04 val 1400 [ 774.011274][ T5141] pwc: recv_control_msg error -32 req 02 val 2000 [ 774.013284][ T5141] pwc: recv_control_msg error -32 req 02 val 2100 [ 774.014734][ T5141] pwc: recv_control_msg error -32 req 04 val 1500 [ 774.024509][ T5141] pwc: recv_control_msg error -32 req 02 val 2500 [ 774.028496][ T5141] pwc: recv_control_msg error -32 req 02 val 2400 [ 774.230667][ T5141] pwc: recv_control_msg error -71 req 02 val 2900 [ 774.232105][ T5141] pwc: recv_control_msg error -71 req 02 val 2800 [ 774.233287][ T5141] pwc: recv_control_msg error -71 req 04 val 1100 [ 774.234571][ T5141] pwc: recv_control_msg error -71 req 04 val 1200 [ 774.237597][ T5141] pwc: Registered as video11. [ 774.238838][ T5141] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 774.242465][ T5141] usb 1-1: USB disconnect, device number 9 [ 774.823055][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.824587][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.567478][T15113] netlink: 'syz.5.2510': attribute type 1 has an invalid length. [ 782.569491][T15136] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 782.570773][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'. [ 782.632494][T15233] netdevsim netdevsim3: Direct firmware load for I failed with error -2 [ 782.633905][T15233] netdevsim netdevsim3: Falling back to sysfs fallback for: I [ 782.650096][T15236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.651463][T15236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.875456][T15254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.876996][T15254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.184953][T15271] tipc: Enabled bearer , priority 0 [ 783.192974][T15271] device syzkaller0 entered promiscuous mode [ 783.194264][T15271] tipc: Resetting bearer [ 783.200254][T15270] tipc: Resetting bearer [ 783.255110][ T6682] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 783.438998][ T6682] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 783.440737][ T6682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.442885][ T6682] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.444316][ T6682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.448242][ T6682] usb 1-1: config 0 descriptor?? [ 783.457684][ T6682] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 784.264483][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.265979][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.907601][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.909235][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.986622][ T5141] usb 1-1: USB disconnect, device number 10 [ 786.075372][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 794.185930][T15270] tipc: Disabling bearer [ 794.197699][T15321] netlink: 'syz.6.2580': attribute type 27 has an invalid length. [ 794.767043][T15321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.784171][T15321] device batadv_slave_1 left promiscuous mode [ 795.062483][T15321] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.064014][T15321] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.065786][T15321] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.067443][T15321] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.384504][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.387522][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.425336][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 795.509882][T15386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2606'. [ 795.566841][T15386] device syzkaller1 entered promiscuous mode [ 795.708258][T15409] tipc: Enabled bearer , priority 0 [ 795.709685][T15409] device syzkaller0 entered promiscuous mode [ 795.749986][T15409] tipc: Resetting bearer [ 795.751088][T15409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.753490][T15408] tipc: Resetting bearer [ 795.845986][T15408] tipc: Disabling bearer [ 795.946581][T15423] device syzkaller0 entered promiscuous mode [ 801.776190][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.206735][T15428] netlink: 'syz.7.2627': attribute type 10 has an invalid length. [ 807.212685][T15428] team0: Port device dummy0 added [ 807.213775][T15430] netlink: 'syz.7.2627': attribute type 10 has an invalid length. [ 807.223768][T15430] team0: Port device dummy0 removed [ 807.226452][T15430] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 807.335341][T15440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.340286][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2634'. [ 807.341661][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2634'. [ 807.342980][T15448] netlink: 'syz.7.2634': attribute type 11 has an invalid length. [ 807.344257][T15448] netlink: 'syz.7.2634': attribute type 14 has an invalid length. [ 807.416160][T15440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.526378][T15440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.528742][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2644'. [ 807.534055][T15469] device team1 entered promiscuous mode [ 807.626140][T15440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.696541][T15481] tipc: Enabled bearer , priority 0 [ 807.698487][T15481] device syzkaller0 entered promiscuous mode [ 807.732418][T15481] tipc: Resetting bearer [ 807.738428][T15481] netlink: 'syz.7.2649': attribute type 1 has an invalid length. [ 807.740692][T15480] tipc: Resetting bearer [ 807.815576][T15480] tipc: Disabling bearer [ 807.824721][T15440] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.829071][T15440] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.832525][T15440] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.836419][T15440] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.856687][T15483] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 807.869217][T15483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.890376][T15483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.891958][T15483] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 807.894452][T15483] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 807.952466][T15489] device veth3 entered promiscuous mode [ 807.956693][T15489] bond4: (slave veth3): Enslaving as an active interface with a down link [ 807.990134][T15490] netlink: 'syz.7.2652': attribute type 10 has an invalid length. [ 808.000887][T15490] bond0: (slave dummy0): Releasing backup interface [ 808.051963][T15490] team0: Port device dummy0 added [ 808.061819][T15491] netlink: 'syz.7.2652': attribute type 10 has an invalid length. [ 808.077977][T15491] team0: Port device dummy0 removed [ 808.080802][T15491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 808.411705][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'. [ 808.428803][T15503] device team1 entered promiscuous mode [ 808.450499][T15507] netlink: 'syz.5.2655': attribute type 4 has an invalid length. [ 808.628646][T15522] tipc: Enabled bearer , priority 0 [ 808.630413][T15522] device syzkaller0 entered promiscuous mode [ 808.680866][T15522] tipc: Resetting bearer [ 808.693874][T15522] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 808.704681][T15521] tipc: Resetting bearer [ 808.777625][T15521] tipc: Disabling bearer [ 808.836636][T15544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.864508][T15544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.869094][T15544] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 808.871443][T15544] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 808.922939][T15544] device veth3 entered promiscuous mode [ 808.926260][T15544] bond3: (slave veth3): Enslaving as an active interface with a down link [ 808.940106][T15167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.941357][T15167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.943331][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.383968][T15576] team0: Port device dummy0 added [ 809.391728][T15579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 809.409641][T15576] team0: Port device dummy0 removed [ 809.413078][T15576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 809.421259][T15579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 809.422759][T15579] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 809.427400][T15579] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 809.462542][T15581] device veth3 entered promiscuous mode [ 809.470563][T15581] bond3: (slave veth3): Enslaving as an active interface with a down link [ 809.854651][T15608] tipc: Enabled bearer , priority 0 [ 809.859307][T15608] device syzkaller0 entered promiscuous mode [ 809.907092][T15608] tipc: Resetting bearer [ 809.911385][T15607] tipc: Resetting bearer [ 810.005761][T15607] tipc: Disabling bearer [ 810.037880][T15612] tipc: Enabling of bearer rejected, failed to enable media [ 810.239391][T15629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.287216][T15629] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.288529][T15629] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 810.290938][T15629] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 810.297730][T15643] tipc: Enabling of bearer rejected, failed to enable media [ 810.330280][T15651] device veth3 entered promiscuous mode [ 810.344569][T15651] bond3: (slave veth3): Enslaving as an active interface with a down link [ 810.538120][T15668] team0: Port device dummy0 added [ 810.558896][T15668] team0: Port device dummy0 removed [ 810.561149][T15668] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 810.759749][T15679] tipc: Enabled bearer , priority 0 [ 810.761526][T15679] device syzkaller0 entered promiscuous mode [ 810.816859][T15679] tipc: Resetting bearer [ 810.828918][T15677] tipc: Resetting bearer [ 810.865878][T15677] tipc: Disabling bearer [ 811.140992][T15713] tipc: Enabled bearer , priority 0 [ 811.143871][T15713] device syzkaller0 entered promiscuous mode [ 811.208630][T15720] tipc: Resetting bearer [ 811.212384][T15712] tipc: Resetting bearer [ 811.245669][T15712] tipc: Disabling bearer [ 811.247554][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2751'. [ 811.326746][T15729] tipc: Enabling of bearer rejected, failed to enable media [ 811.442273][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'. [ 811.524952][T15758] tipc: Enabled bearer , priority 0 [ 811.528982][T15758] device syzkaller0 entered promiscuous mode [ 811.534470][T15758] tipc: Resetting bearer [ 811.542005][T15757] tipc: Resetting bearer [ 811.615577][T15757] tipc: Disabling bearer [ 811.705568][ C1] Unknown status report in ack skb [ 811.758970][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'. [ 811.895755][T15797] tipc: Enabled bearer , priority 0 [ 811.897690][T15797] device syzkaller0 entered promiscuous mode [ 811.911428][T15797] tipc: Resetting bearer [ 811.949155][T15796] tipc: Resetting bearer [ 812.004020][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 812.027596][T15796] tipc: Disabling bearer [ 812.183927][T15827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2796'. [ 812.282052][T15838] tipc: Enabled bearer , priority 0 [ 812.284046][T15838] device syzkaller0 entered promiscuous mode [ 812.293863][T15838] tipc: Resetting bearer [ 812.296450][T15837] tipc: Resetting bearer [ 812.325559][T15837] tipc: Disabling bearer [ 812.621380][T15870] tipc: Enabled bearer , priority 0 [ 812.627948][T15870] device syzkaller0 entered promiscuous mode [ 812.636282][T15870] tipc: Resetting bearer [ 812.647352][T15869] tipc: Resetting bearer [ 812.691013][T15869] tipc: Disabling bearer [ 812.994665][T15792] Set syz1 is full, maxelem 65536 reached [ 813.112594][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2830'. [ 813.142071][T15899] tipc: Enabled bearer , priority 0 [ 813.143620][T15899] device syzkaller0 entered promiscuous mode [ 813.155464][T15899] tipc: Resetting bearer [ 813.160626][T15898] tipc: Resetting bearer [ 813.205679][T15898] tipc: Disabling bearer [ 813.347745][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 813.534908][T15939] tipc: Enabled bearer , priority 0 [ 813.542305][T15939] device syzkaller0 entered promiscuous mode [ 813.550207][T15939] tipc: Resetting bearer [ 813.552878][T15938] tipc: Resetting bearer [ 813.585755][T15938] tipc: Disabling bearer [ 813.623610][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2853'. [ 813.771230][T15960] device syzkaller1 entered promiscuous mode [ 813.960413][T15974] tipc: Enabled bearer , priority 0 [ 813.962025][T15974] device syzkaller0 entered promiscuous mode [ 813.974179][T15974] tipc: Resetting bearer [ 813.985497][T15973] tipc: Resetting bearer [ 814.035518][T15973] tipc: Disabling bearer [ 814.108773][T15986] validate_nla: 11 callbacks suppressed [ 814.108782][T15986] netlink: 'syz.6.2872': attribute type 10 has an invalid length. [ 814.114330][T15986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 814.238165][T16006] netlink: 'syz.3.2880': attribute type 1 has an invalid length. [ 814.239530][T16006] netlink: 'syz.3.2880': attribute type 2 has an invalid length. [ 814.249541][T16004] tipc: Enabled bearer , priority 0 [ 814.258839][T16004] device syzkaller0 entered promiscuous mode [ 814.273270][T16004] tipc: Resetting bearer [ 814.283880][T16003] tipc: Resetting bearer [ 814.335531][T16003] tipc: Disabling bearer [ 814.661399][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.663832][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.666632][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.668831][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.670382][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 814.672466][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.721549][T16061] tipc: Enabled bearer , priority 0 [ 814.723209][T16061] device syzkaller0 entered promiscuous mode [ 814.737187][T16061] tipc: Resetting bearer [ 814.744332][T16059] tipc: Resetting bearer [ 814.805815][T16059] tipc: Disabling bearer [ 814.905895][T16052] chnl_net:caif_netlink_parms(): no params data found [ 814.940014][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.941475][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.943197][T16052] device bridge_slave_0 entered promiscuous mode [ 814.946194][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.947467][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.948978][T16052] device bridge_slave_1 entered promiscuous mode [ 814.958516][T16052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.961190][T16052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.971463][T16052] team0: Port device team_slave_0 added [ 814.973749][T16052] team0: Port device team_slave_1 added [ 814.983827][T16052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.984921][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.989573][T16052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.991992][T16052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.993225][T16052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.998853][T16052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.267659][ T4478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.316268][T16052] device hsr_slave_0 entered promiscuous mode [ 815.345275][T16052] device hsr_slave_1 entered promiscuous mode [ 815.385133][T16052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.386418][T16052] Cannot create hsr debugfs directory [ 815.389331][T16114] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 815.400464][T16116] tipc: Enabling of bearer rejected, failed to enable media [ 815.447107][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2919'. [ 815.463070][ T4478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.469116][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2922'. [ 815.477746][T16109] device syzkaller1 entered promiscuous mode [ 815.566585][ T4478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.659355][T16139] tipc: Enabled bearer , priority 0 [ 815.661076][T16139] device syzkaller0 entered promiscuous mode [ 815.671376][T16139] tipc: Resetting bearer [ 815.676095][T16138] tipc: Resetting bearer [ 815.705468][T16138] tipc: Disabling bearer [ 815.708272][T16141] tipc: Enabled bearer , priority 0 [ 815.773967][ T4478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.779001][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 815.785618][T16143] device team1 entered promiscuous mode [ 815.787735][T16141] device syzkaller0 entered promiscuous mode [ 815.815662][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.819024][T16140] tipc: Resetting bearer [ 815.885926][T16140] tipc: Disabling bearer [ 815.893140][T16146] device syzkaller1 entered promiscuous mode [ 815.987926][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 816.061674][ T4478] tipc: Left network mode [ 816.257552][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'. [ 816.262819][T16178] device team2 entered promiscuous mode [ 816.428074][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 816.477541][T16187] tipc: Enabled bearer , priority 0 [ 816.479048][T16187] device syzkaller0 entered promiscuous mode [ 816.481064][T16204] netlink: 'syz.7.2952': attribute type 10 has an invalid length. [ 816.503071][T16204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 816.589600][T16186] tipc: Resetting bearer [ 816.646522][T16186] tipc: Disabling bearer [ 816.685311][T16230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.687631][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.745283][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 816.808560][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2962'. [ 816.901396][T16252] tipc: Enabled bearer , priority 0 [ 816.902943][T16252] device syzkaller0 entered promiscuous mode [ 816.911329][T16252] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 816.988413][T16259] tipc: Resetting bearer [ 816.992971][T16263] tipc: Enabled bearer , priority 0 [ 816.994467][T16263] device syzkaller0 entered promiscuous mode [ 817.035685][T16249] tipc: Resetting bearer [ 817.105444][T16249] tipc: Disabling bearer [ 817.125117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.155282][T16262] tipc: Resetting bearer [ 817.246175][T16262] tipc: Disabling bearer [ 817.418996][T16298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.420480][T16298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.743296][T16309] tipc: Enabled bearer , priority 0 [ 817.747286][T16308] fuse: Bad value for 'fd' [ 818.137638][T16313] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.150973][ T4478] device hsr_slave_0 left promiscuous mode [ 818.185465][ T4478] device hsr_slave_1 left promiscuous mode [ 818.265117][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.266485][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.355202][ T4478] device veth1_macvtap left promiscuous mode [ 818.356155][ T4478] device veth0_macvtap left promiscuous mode [ 818.357153][ T4478] device veth1_vlan left promiscuous mode [ 818.358185][ T4478] device veth0_vlan left promiscuous mode [ 818.495675][ T4478] bond3 (unregistering): (slave veth3): Releasing active interface [ 818.735116][ T5141] tipc: Node number set to 1417578717 [ 818.786714][T16334] fuse: Bad value for 'fd' [ 818.815104][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 819.165925][ T4478] bond3 (unregistering): Released all slaves [ 819.675353][T16340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.676827][T16340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.845984][ T4478] bond2 (unregistering): Released all slaves [ 820.486098][ T4478] bond1 (unregistering): Released all slaves [ 820.895102][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 822.146583][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 822.305963][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 822.465493][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.665430][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.985099][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 825.055135][ T4330] Bluetooth: hci3: command 0x0405 tx timeout [ 825.155982][ T4478] bond0 (unregistering): Released all slaves [ 825.256409][T16313] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.289140][T16052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 825.396087][T16313] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.402858][T16052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 825.436166][T16052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 825.476484][T16052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 825.523457][T16368] fuse: Bad value for 'fd' [ 825.576684][T16313] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.606585][T16052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.612706][T16052] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.617421][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 825.619069][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 825.621671][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 825.624639][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 825.628217][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.629438][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.630914][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 825.640976][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 825.642705][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 825.644265][T15167] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.645424][T15167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.649407][T16379] binder: 16379:16378 cannot find target node [ 825.650696][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 825.651964][T16379] binder: 16378:16379 transaction call to 0:0 failed 104/29189/-22, size 12-24 line 3054 [ 825.654074][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 825.657690][T16379] binder: 16378:16379 ioctl c0306201 20000100 returned -14 [ 825.659981][ T5141] binder: undelivered TRANSACTION_ERROR: 29189 [ 825.661662][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 825.664172][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 825.671875][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 825.674129][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 825.678751][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 825.689841][T16052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.691492][T16052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.700815][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 825.702462][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 825.704061][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 825.706913][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.711193][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 825.724870][T16313] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.739188][T16313] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.742509][T16313] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.748386][T16313] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.749395][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.752276][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.955092][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.956655][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.037682][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 826.039063][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 826.041258][T16397] tipc: Enabled bearer , priority 0 [ 826.119383][T16395] tipc: Resetting bearer [ 826.120398][T16395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.123385][T16052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.130751][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.132563][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.146410][T16052] device veth0_vlan entered promiscuous mode [ 826.149489][T16052] device veth1_vlan entered promiscuous mode [ 826.151362][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.152951][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.154804][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 826.170046][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.175499][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.176975][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 826.181767][T16052] device veth0_macvtap entered promiscuous mode [ 826.185751][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 826.188764][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 826.194963][T16052] device veth1_macvtap entered promiscuous mode [ 826.198800][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 826.200494][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 826.208314][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.210222][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.211841][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.219872][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.225246][T16052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.226796][T16052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.232071][T16052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.233615][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 826.236078][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 826.252129][T16052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.253506][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 826.255091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.255292][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 826.272938][T16052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.274376][T16052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.281101][T16052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.289143][T16052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.307524][T16418] binder: 16416:16418 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000001000000 != 0000000000000000 [ 826.323224][T16419] 9pnet_fd: Insufficient options for proto=fd [ 826.332564][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.333946][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.337090][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 826.353593][T15167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.355747][T15167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.358310][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 826.451908][T16430] __nla_validate_parse: 2 callbacks suppressed [ 826.451925][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2900'. [ 826.535102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.573456][T16444] netlink: 'syz.0.3040': attribute type 46 has an invalid length. [ 826.653675][T15167] Bluetooth: hci1: Frame reassembly failed (-90) [ 827.009339][T16056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 827.011815][T16056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 827.018848][T16056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 827.022753][T16468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 827.024792][T16468] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 827.026661][T16468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 827.065054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.111206][T16466] chnl_net:caif_netlink_parms(): no params data found [ 827.128250][T16466] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.129400][T16466] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.130830][T16466] device bridge_slave_0 entered promiscuous mode [ 827.132847][T16466] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.134054][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.136084][T16466] device bridge_slave_1 entered promiscuous mode [ 827.151056][T16466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.153633][T16466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.162528][T16466] team0: Port device team_slave_0 added [ 827.164339][T16466] team0: Port device team_slave_1 added [ 827.171861][T16466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.173154][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.177799][T16466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.180095][T16466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.181274][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.186634][T16466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.236158][T16466] device hsr_slave_0 entered promiscuous mode [ 827.275292][T16466] device hsr_slave_1 entered promiscuous mode [ 827.316037][T16466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.317288][T16466] Cannot create hsr debugfs directory [ 827.389528][T16466] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.438955][T16466] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.478164][T16466] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.518380][T16466] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.690479][T16466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 827.775218][ T6771] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 827.785519][T16466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 827.836273][T16466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 827.876159][T16466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 827.955068][ T6771] usb 1-1: Using ep0 maxpacket: 32 [ 827.957277][ T6771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 827.959001][ T6771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 827.960579][ T6771] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 827.963807][ T6771] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 827.965445][ T6771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.966697][ T6771] usb 1-1: Product: syz [ 827.967300][ T6771] usb 1-1: Manufacturer: syz [ 827.967968][ T6771] usb 1-1: SerialNumber: syz [ 827.970026][ T6771] usb 1-1: config 0 descriptor?? [ 828.000228][T16466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.006256][T16466] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.007551][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 828.009200][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.012280][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 828.013884][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 828.017845][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.019042][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.021396][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 828.024875][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 828.027368][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 828.028979][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.030032][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.032543][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 828.037345][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 828.039158][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 828.041466][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 828.044296][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.046860][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 828.049752][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 828.052617][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 828.054106][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.058853][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 828.060614][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.062503][T16466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.095097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.116122][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.117431][ T198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 828.119735][T16466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.126930][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 828.133839][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 828.136761][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 828.138217][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 828.140582][T16466] device veth0_vlan entered promiscuous mode [ 828.144052][T16466] device veth1_vlan entered promiscuous mode [ 828.151737][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 828.153218][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 828.154855][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 828.158530][T16466] device veth0_macvtap entered promiscuous mode [ 828.160852][T16466] device veth1_macvtap entered promiscuous mode [ 828.167850][T16466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.169492][T16466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.171198][T16466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.172948][T16466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.174398][T16466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.176603][T16466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.177634][ T5284] usb 1-1: USB disconnect, device number 11 [ 828.177951][T16466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.180586][T16466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.182653][T16466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.186121][T16466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.187861][T16466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.189767][T16466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.190991][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 828.193037][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 828.194894][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 828.196782][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 828.198325][T15167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 828.200795][T16466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.202131][T16466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.203389][T16466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.204828][T16466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.224154][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.232718][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.234070][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.236306][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.237856][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.239666][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 828.665132][T16468] Bluetooth: hci1: command 0x1003 tx timeout [ 828.665157][ T4337] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 829.055432][ T4330] Bluetooth: hci6: command 0x0409 tx timeout [ 829.105203][ T5289] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 829.135142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.285106][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 829.287118][ T5289] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 829.288545][ T5289] usb 1-1: config 0 has no interface number 0 [ 829.289661][ T5289] usb 1-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 829.291401][ T5289] usb 1-1: config 0 interface 214 has no altsetting 0 [ 829.298480][ T5289] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 829.300026][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.301357][ T5289] usb 1-1: Product: syz [ 829.302107][ T5289] usb 1-1: Manufacturer: syz [ 829.302836][ T5289] usb 1-1: SerialNumber: syz [ 829.308223][ T5289] usb 1-1: config 0 descriptor?? [ 829.309992][T16532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 829.513243][T16530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 830.185075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.655481][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 830.657721][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 830.659343][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 831.135143][ T4337] Bluetooth: hci6: command 0x041b tx timeout [ 831.215070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.263705][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 831.265778][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 831.267712][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 831.269427][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 831.271162][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 831.272855][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 831.274580][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 831.279594][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 831.281470][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 831.283451][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 831.286095][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 831.288010][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 831.290003][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 831.292015][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 831.293893][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 831.297007][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 831.299830][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 831.301683][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 831.303479][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 831.305452][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 831.307329][ T5289] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 832.255050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.215058][ T4337] Bluetooth: hci6: command 0x040f tx timeout [ 833.295068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.335061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.507779][T16564] ubi0: attaching mtd0 [ 834.509115][T16564] ubi0: scanning is finished [ 834.509837][T16564] ubi0: empty MTD device detected [ 834.532531][T16564] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 834.533883][T16564] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 834.535136][T16564] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 834.536193][T16564] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 834.537380][T16564] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 834.538394][T16564] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 834.539683][T16564] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2348266485 [ 834.541348][T16564] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 834.543645][T16565] ubi0: background thread "ubi_bgt0d" started, PID 16565 [ 834.554864][T16564] ubi0: detaching mtd0 [ 834.558361][T16564] ubi0: mtd0 is detached [ 835.295082][ T4337] Bluetooth: hci6: command 0x0419 tx timeout [ 835.375051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.415052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.375081][ T4337] Bluetooth: hci6: command 0x0405 tx timeout [ 837.455050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.495048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.535666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.658336][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3060'. [ 839.663319][T16515] device team1 entered promiscuous mode [ 839.668099][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3068'. [ 839.681479][ T5289] ax88179_178a 1-1:0.214 eth12: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 9a:2a:0a:fe:2d:a1 [ 839.686214][ T5289] usb 1-1: USB disconnect, device number 12 [ 839.688805][ T5289] ax88179_178a 1-1:0.214 eth12: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 839.722369][T16576] binder: 16575:16576 tried to acquire reference to desc 0, got 1 instead [ 839.724507][T16576] binder: 16575:16576 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 839.727682][T16576] binder: 16576 RLIMIT_NICE not set [ 839.729256][T16576] binder: undelivered transaction 111, put_user failed [ 839.730428][T16576] binder: 16575:16576 ioctl c0306201 20000680 returned -14 [ 839.731872][ T6682] binder: undelivered TRANSACTION_COMPLETE [ 839.776970][T16579] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 839.781189][T16582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3084'. [ 839.782958][T16582] device netdevsim0 entered promiscuous mode [ 839.920328][T16595] fuse: Bad value for 'fd' [ 840.572442][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 840.575111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.584642][T16612] device team2 entered promiscuous mode [ 840.657472][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3095'. [ 841.068425][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3097'. [ 841.142604][T16639] tipc: Enabling of bearer rejected, already enabled [ 841.144505][T16639] device syzkaller0 entered promiscuous mode [ 841.147415][T16639] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 841.689368][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3108'. [ 841.765868][T16659] ubi0: attaching mtd0 [ 841.766940][T16659] ubi0: scanning is finished [ 841.890619][T16659] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 841.892055][T16659] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 841.893789][T16659] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 841.894944][T16659] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 842.786603][T16659] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 842.787725][T16659] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 842.789046][T16659] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2348266485 [ 842.790520][T16659] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 842.805991][T16671] ubi0: background thread "ubi_bgt0d" started, PID 16671 [ 842.820022][T16668] ubi0: detaching mtd0 [ 842.825841][T16668] ubi0: mtd0 is detached [ 842.857497][T16680] tipc: Enabling of bearer rejected, failed to enable media [ 843.004723][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 844.570417][T16716] fuse: Bad value for 'fd' [ 844.823317][T16726] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 844.830522][T16726] cramfs: wrong magic [ 854.998748][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.000237][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.898843][T16756] fuse: Bad value for 'fd' [ 856.039933][T16766] tipc: Enabling of bearer rejected, failed to enable media [ 856.196545][ T27] audit: type=1326 audit(856.180:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz.0.3144" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9955c0a8 code=0x0 [ 856.702359][T16793] fuse: Bad value for 'fd' [ 857.082355][ T4330] Bluetooth: hci6: unknown advertising packet type: 0x82 [ 857.082399][ T4330] Bluetooth: hci6: Malformed LE Event: 0x02 [ 857.112280][T16801] tipc: Enabling of bearer rejected, already enabled [ 857.261448][T16817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.262921][T16817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.577084][ T27] audit: type=1326 audit(859.560:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.5.3174" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035c0a8 code=0x0 [ 863.215798][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.558872][T16835] tipc: Enabling of bearer rejected, already enabled [ 868.620775][T16871] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3177'. [ 868.886317][T16887] 9pnet_virtio: no channels available for device syz [ 870.411926][T16915] tipc: Enabled bearer , priority 0 [ 870.422652][T16915] tipc: Resetting bearer [ 870.488591][T16913] tipc: Disabling bearer [ 881.657219][T16927] tipc: Enabling of bearer rejected, failed to enable media [ 882.664915][ T27] audit: type=1326 audit(882.500:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16940 comm="syz.7.3199" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d15c0a8 code=0x0 [ 883.252554][T16976] tipc: Enabling of bearer rejected, failed to enable media [ 884.164566][T16998] ubi0: attaching mtd0 [ 884.170922][T16998] ubi0: scanning is finished [ 884.200035][T16998] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 884.201335][T16998] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 884.202577][T16998] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 884.203582][T16998] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 884.204585][T16998] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 884.205691][T16998] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 884.206852][T16998] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2348266485 [ 884.208365][T16998] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 884.210023][T17001] ubi0: background thread "ubi_bgt0d" started, PID 17001 [ 884.578658][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.580488][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.818965][ T27] audit: type=1326 audit(884.800:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17004 comm="syz.6.3218" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5c0a8 code=0x0 [ 885.537854][T17032] block device autoloading is deprecated and will be removed. [ 895.657268][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3215'. [ 895.658805][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 895.662893][T17002] netlink: 'syz.0.3215': attribute type 10 has an invalid length. [ 895.664227][T17002] bridge0: port 3(team0) entered blocking state [ 895.665882][T17002] bridge0: port 3(team0) entered disabled state [ 895.667537][T17002] device team0 entered promiscuous mode [ 895.668401][T17002] device team_slave_0 entered promiscuous mode [ 895.669525][T17002] device team_slave_1 entered promiscuous mode [ 895.670757][T17002] bridge0: port 3(team0) entered blocking state [ 895.671749][T17002] bridge0: port 3(team0) entered forwarding state [ 895.679822][T17021] tipc: Enabling of bearer rejected, failed to enable media [ 896.244641][ T5284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 896.248916][ T5284] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.966394][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3238'. [ 896.968008][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 896.972561][T17086] netlink: 'syz.3.3238': attribute type 10 has an invalid length. [ 896.974035][T17086] bridge0: port 3(team0) entered blocking state [ 896.978309][T17086] bridge0: port 3(team0) entered disabled state [ 896.980024][T17086] device team0 entered promiscuous mode [ 896.980884][T17086] device team_slave_0 entered promiscuous mode [ 896.981903][T17086] device team_slave_1 entered promiscuous mode [ 896.983013][T17086] bridge0: port 3(team0) entered blocking state [ 896.984071][T17086] bridge0: port 3(team0) entered forwarding state [ 897.159742][T17092] tipc: Enabling of bearer rejected, already enabled [ 909.615112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.782750][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3252'. [ 909.784143][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3252'. [ 909.793334][T17142] netlink: 'syz.6.3252': attribute type 10 has an invalid length. [ 909.798284][T17142] bridge1: port 1(team0) entered blocking state [ 909.799337][T17142] bridge1: port 1(team0) entered disabled state [ 910.537999][T17159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.539976][T17159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.655154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.240771][T17176] tipc: Enabling of bearer rejected, failed to enable media [ 911.695045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.735078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.402135][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 913.775044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.815057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.855056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.895057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.935066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.975065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.015064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.055068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.095075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.135067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.168361][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3268'. [ 923.169676][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3268'. [ 923.174253][T17225] netlink: 'syz.7.3268': attribute type 10 has an invalid length. [ 923.175682][T17225] bridge2: port 1(team0) entered blocking state [ 923.176712][T17225] bridge2: port 1(team0) entered disabled state [ 923.178396][T17225] device team_slave_0 entered promiscuous mode [ 923.179433][T17225] device team_slave_1 entered promiscuous mode [ 923.181384][T17225] bridge2: port 1(team0) entered blocking state [ 923.182359][T17225] bridge2: port 1(team0) entered forwarding state [ 923.190938][T17241] tipc: Enabling of bearer rejected, failed to enable media [ 923.293631][T17267] tipc: Enabling of bearer rejected, failed to enable media [ 923.321404][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.323028][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.436382][ T27] audit: type=1326 audit(923.410:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17254 comm="syz.6.3281" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5c0a8 code=0x0 [ 924.185075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.292182][T17305] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3287'. [ 924.659077][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.682953][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.684624][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.687755][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.691909][T17318] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 924.715283][T17318] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 924.744341][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.747985][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.754900][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.759596][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.760994][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.768018][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 936.975087][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 938.929248][ T2062] ================================================================== [ 938.930632][ T2062] BUG: KASAN: use-after-free in handle_tx+0x3ac/0x5f8 [ 938.931785][ T2062] Read of size 1 at addr ffff0000e0127490 by task aoe_tx0/2062 [ 938.933057][ T2062] [ 938.933447][ T2062] CPU: 0 PID: 2062 Comm: aoe_tx0 Not tainted syzkaller #0 [ 938.934564][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 938.936132][ T2062] Call trace: [ 938.936687][ T2062] dump_backtrace+0x1c8/0x1f4 [ 938.937478][ T2062] show_stack+0x2c/0x3c [ 938.938123][ T2062] __dump_stack+0x30/0x40 [ 938.938801][ T2062] dump_stack_lvl+0xf8/0x160 [ 938.939530][ T2062] print_address_description+0x88/0x218 [ 938.940384][ T2062] print_report+0x50/0x68 [ 938.941085][ T2062] kasan_report+0xa8/0x100 [ 938.941818][ T2062] __asan_report_load1_noabort+0x2c/0x38 [ 938.942674][ T2062] handle_tx+0x3ac/0x5f8 [ 938.943346][ T2062] caif_xmit+0x108/0x150 [ 938.944060][ T2062] dev_hard_start_xmit+0x244/0x8e0 [ 938.944957][ T2062] __dev_queue_xmit+0x155c/0x309c [ 938.945797][ T2062] tx+0x9c/0x1c8 [ 938.946417][ T2062] kthread+0x160/0x330 [ 938.947119][ T2062] kthread+0x250/0x2d8 [ 938.947760][ T2062] ret_from_fork+0x10/0x20 [ 938.948459][ T2062] [ 938.948864][ T2062] Allocated by task 17129: [ 938.949528][ T2062] kasan_set_track+0x4c/0x80 [ 938.950272][ T2062] kasan_save_alloc_info+0x28/0x34 [ 938.951069][ T2062] __kasan_kmalloc+0xa0/0xb8 [ 938.951799][ T2062] kmalloc_trace+0x7c/0x94 [ 938.952496][ T2062] alloc_tty_struct+0xb8/0x654 [ 938.953199][ T2062] tty_init_dev+0x60/0x3e8 [ 938.953787][ T2062] tty_open+0x6e0/0xb54 [ 938.954417][ T2062] chrdev_open+0x26c/0x4f0 [ 938.955121][ T2062] do_dentry_open+0x730/0xfa8 [ 938.955865][ T2062] vfs_open+0x7c/0x90 [ 938.956516][ T2062] path_openat+0x1f48/0x2680 [ 938.957228][ T2062] do_filp_open+0x174/0x344 [ 938.957937][ T2062] do_sys_openat2+0x128/0x3d8 [ 938.958710][ T2062] __arm64_sys_openat+0x120/0x154 [ 938.959503][ T2062] invoke_syscall+0x98/0x2bc [ 938.960302][ T2062] el0_svc_common+0x138/0x258 [ 938.961097][ T2062] do_el0_svc+0x58/0x13c [ 938.961803][ T2062] el0_svc+0x58/0x138 [ 938.962493][ T2062] el0t_64_sync_handler+0x84/0xf0 [ 938.963290][ T2062] el0t_64_sync+0x18c/0x190 [ 938.964008][ T2062] [ 938.964397][ T2062] Freed by task 4367: [ 938.965067][ T2062] kasan_set_track+0x4c/0x80 [ 938.965753][ T2062] kasan_save_free_info+0x3c/0x60 [ 938.966547][ T2062] ____kasan_slab_free+0x148/0x1b0 [ 938.967388][ T2062] __kasan_slab_free+0x18/0x28 [ 938.968088][ T2062] slab_free_freelist_hook+0x16c/0x1ec [ 938.968876][ T2062] __kmem_cache_free+0xc0/0x224 [ 938.969670][ T2062] kfree+0xd0/0x1ac [ 938.970219][ T2062] release_one_tty+0x21c/0x238 [ 938.970930][ T2062] process_one_work+0x7f4/0x13a8 [ 938.971683][ T2062] worker_thread+0x8c8/0xfbc [ 938.972395][ T2062] kthread+0x250/0x2d8 [ 938.973043][ T2062] ret_from_fork+0x10/0x20 [ 938.973651][ T2062] [ 938.973988][ T2062] Last potentially related work creation: [ 938.974889][ T2062] kasan_save_stack+0x40/0x70 [ 938.975657][ T2062] __kasan_record_aux_stack+0xc0/0xdc [ 938.976527][ T2062] kasan_record_aux_stack_noalloc+0x14/0x20 [ 938.977449][ T2062] insert_work+0x64/0x37c [ 938.978198][ T2062] __queue_work+0xcbc/0x123c [ 938.978955][ T2062] queue_work_on+0xc0/0x16c [ 938.979667][ T2062] tty_kref_put+0x144/0x1b8 [ 938.980387][ T2062] release_tty+0x3e8/0x4a4 [ 938.981073][ T2062] tty_release_struct+0xb4/0xd4 [ 938.981896][ T2062] tty_release+0xa0c/0x1208 [ 938.982632][ T2062] __fput+0x1bc/0x7c0 [ 938.983295][ T2062] ____fput+0x20/0x30 [ 938.983968][ T2062] task_work_run+0x1ec/0x270 [ 938.984718][ T2062] do_exit+0x54c/0x19a8 [ 938.985382][ T2062] do_group_exit+0x194/0x22c [ 938.986091][ T2062] get_signal+0x11d0/0x1310 [ 938.986789][ T2062] do_notify_resume+0x340/0x2b0c [ 938.987609][ T2062] el0_svc+0x98/0x138 [ 938.988305][ T2062] el0t_64_sync_handler+0x84/0xf0 [ 938.989108][ T2062] el0t_64_sync+0x18c/0x190 [ 938.989846][ T2062] [ 938.990219][ T2062] Second to last potentially related work creation: [ 938.991246][ T2062] kasan_save_stack+0x40/0x70 [ 938.991943][ T2062] __kasan_record_aux_stack+0xc0/0xdc [ 938.992783][ T2062] kasan_record_aux_stack_noalloc+0x14/0x20 [ 938.993748][ T2062] kvfree_call_rcu+0xb4/0x6f0 [ 938.994513][ T2062] drop_sysctl_table+0x274/0x39c [ 938.995314][ T2062] unregister_sysctl_table+0x90/0x130 [ 938.996209][ T2062] unregister_net_sysctl_table+0x20/0x30 [ 938.997117][ T2062] addrconf_ifdown+0x1274/0x15dc [ 938.997855][ T2062] addrconf_notify+0x2f4/0xca8 [ 938.998653][ T2062] raw_notifier_call_chain+0xd4/0x164 [ 938.999553][ T2062] unregister_netdevice_many+0xe2c/0x1740 [ 939.000493][ T2062] default_device_exit_batch+0x9a8/0xa40 [ 939.001404][ T2062] cleanup_net+0x644/0xa74 [ 939.002171][ T2062] process_one_work+0x7f4/0x13a8 [ 939.002917][ T2062] worker_thread+0x8c8/0xfbc [ 939.003686][ T2062] kthread+0x250/0x2d8 [ 939.004325][ T2062] ret_from_fork+0x10/0x20 [ 939.005079][ T2062] [ 939.005467][ T2062] The buggy address belongs to the object at ffff0000e0127000 [ 939.005467][ T2062] which belongs to the cache kmalloc-cg-2k of size 2048 [ 939.007942][ T2062] The buggy address is located 1168 bytes inside of [ 939.007942][ T2062] 2048-byte region [ffff0000e0127000, ffff0000e0127800) [ 939.010094][ T2062] [ 939.010436][ T2062] The buggy address belongs to the physical page: [ 939.011370][ T2062] page:00000000bb430814 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120120 [ 939.012927][ T2062] head:00000000bb430814 order:3 compound_mapcount:0 compound_pincount:0 [ 939.014162][ T2062] memcg:ffff0000f4660c01 [ 939.014897][ T2062] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 939.016158][ T2062] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0003380 [ 939.017620][ T2062] raw: 0000000000000000 0000000080080008 00000001ffffffff ffff0000f4660c01 [ 939.019043][ T2062] page dumped because: kasan: bad access detected [ 939.020115][ T2062] [ 939.020484][ T2062] Memory state around the buggy address: [ 939.021404][ T2062] ffff0000e0127380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.022617][ T2062] ffff0000e0127400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.023823][ T2062] >ffff0000e0127480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.025166][ T2062] ^ [ 939.025972][ T2062] ffff0000e0127500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.027277][ T2062] ffff0000e0127580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 939.028513][ T2062] ================================================================== [ 939.029724][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.030715][ T2062] Disabling lock debugging due to kernel taint [ 939.064141][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 939.066793][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 939.067989][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 939.069257][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 939.070524][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 939.071677][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 940.155090][T16468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 940.162811][T16468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 940.164085][T16468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 940.167635][T16468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 940.168983][T16468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 940.170285][T16468] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 940.171531][T16468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 940.172674][T16468] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 940.173986][T16468] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 940.177667][ T4330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 940.179022][ T4330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 940.180210][ T4330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 940.210757][T16468] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 940.212008][T16468] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 940.213065][T16468] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 940.214383][T16468] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 940.216029][T16468] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 940.217147][T16468] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 940.247256][T16056] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 940.248565][T16056] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 940.249792][T16056] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 940.251180][T16056] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 940.252798][T16056] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 940.253919][T16056] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 941.135031][T16468] Bluetooth: hci0: command 0x0409 tx timeout [ 942.255035][T16056] Bluetooth: hci8: command 0x0409 tx timeout [ 942.256045][T16056] Bluetooth: hci7: command 0x0409 tx timeout [ 942.257034][T16056] Bluetooth: hci1: command 0x0409 tx timeout [ 942.335127][T16468] Bluetooth: hci9: command 0x0409 tx timeout [ 943.215077][T16056] Bluetooth: hci0: command 0x041b tx timeout [ 944.335045][T16468] Bluetooth: hci1: command 0x041b tx timeout [ 944.336015][T16468] Bluetooth: hci7: command 0x041b tx timeout [ 944.336946][T16468] Bluetooth: hci8: command 0x041b tx timeout [ 944.415034][T16056] Bluetooth: hci9: command 0x041b tx timeout [ 945.295049][T16468] Bluetooth: hci0: command 0x040f tx timeout [ 946.415049][T16056] Bluetooth: hci8: command 0x040f tx timeout [ 946.416070][T16056] Bluetooth: hci7: command 0x040f tx timeout [ 946.417053][T16056] Bluetooth: hci1: command 0x040f tx timeout [ 946.495034][T16468] Bluetooth: hci9: command 0x040f tx timeout [ 947.375034][T16056] Bluetooth: hci0: command 0x0419 tx timeout [ 948.125007][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [aoe_tx0:2062] [ 948.126158][ C0] Modules linked in: [ 948.126738][ C0] irq event stamp: 39646248 [ 948.127444][ C0] hardirqs last enabled at (39646248): [] exit_to_kernel_mode+0xcc/0xfc [ 948.128934][ C0] hardirqs last disabled at (39646247): [] el1_interrupt+0x24/0x54 [ 948.130329][ C0] softirqs last enabled at (19710): [] local_bh_enable+0x10/0x34 [ 948.131662][ C0] softirqs last disabled at (19714): [] local_bh_disable+0x10/0x34 [ 948.132948][ C0] CPU: 0 PID: 2062 Comm: aoe_tx0 Tainted: G B syzkaller #0 [ 948.134179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 948.135824][ C0] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 948.137045][ C0] pc : _raw_spin_unlock_irqrestore+0x58/0xac [ 948.137983][ C0] lr : _raw_spin_unlock_irqrestore+0x48/0xac [ 948.138841][ C0] sp : ffff800026a87840 [ 948.139432][ C0] x29: ffff800026a87840 x28: ffff0000e524dcf0 x27: ffff0000e0127000 [ 948.140684][ C0] x26: ffff0000e524dc80 x25: 1fffe0001c05f596 x24: 0000000000000000 [ 948.141950][ C0] x23: 0000000000000000 x22: dfff800000000000 x21: ffff0000cde70fd8 [ 948.143133][ C0] x20: ffff80001c662b30 x19: 0000000000000000 x18: ffff800011abbcc0 [ 948.144286][ C0] x17: 0000000000000000 x16: ffff800008042c8c x15: 0000000000000000 [ 948.145496][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 948.146610][ C0] x11: ff00800008047f18 x10: 0000000000000000 x9 : 0000000000000080 [ 948.147839][ C0] x8 : 00000000000000c0 x7 : 0000000000000001 x6 : ffff80000b35b19c [ 948.148935][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 948.150141][ C0] x2 : ffff800026a87780 x1 : 0000000000000000 x0 : ffff800011a419e4 [ 948.151291][ C0] Call trace: [ 948.151733][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 948.152504][ C0] uart_write_room+0x150/0x2d4 [ 948.153205][ C0] tty_write_room+0x6c/0x8c [ 948.153843][ C0] handle_tx+0x120/0x5f8 [ 948.154499][ C0] caif_xmit+0x108/0x150 [ 948.155180][ C0] dev_hard_start_xmit+0x244/0x8e0 [ 948.155993][ C0] __dev_queue_xmit+0x155c/0x309c [ 948.156769][ C0] tx+0x9c/0x1c8 [ 948.157358][ C0] kthread+0x160/0x330 [ 948.157980][ C0] kthread+0x250/0x2d8 [ 948.158615][ C0] ret_from_fork+0x10/0x20 [ 948.159336][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 948.160396][ C0] CPU: 0 PID: 2062 Comm: aoe_tx0 Tainted: G B L syzkaller #0 [ 948.161809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 948.163347][ C0] Call trace: [ 948.163853][ C0] dump_backtrace+0x1c8/0x1f4 [ 948.164593][ C0] show_stack+0x2c/0x3c [ 948.165233][ C0] __dump_stack+0x30/0x40 [ 948.165922][ C0] dump_stack_lvl+0xf8/0x160 [ 948.166606][ C0] dump_stack+0x1c/0x5c [ 948.167219][ C0] panic+0x2e0/0x79c [ 948.167833][ C0] softlockup_fn+0x0/0x120 [ 948.168521][ C0] __hrtimer_run_queues+0x420/0xc64 [ 948.169312][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 948.170117][ C0] arch_timer_handler_virt+0x74/0x88 [ 948.170954][ C0] handle_percpu_devid_irq+0x174/0x34c [ 948.171827][ C0] generic_handle_domain_irq+0xe0/0x140 [ 948.172760][ C0] gic_handle_irq+0x70/0x1e4 [ 948.173489][ C0] call_on_irq_stack+0x30/0x48 [ 948.174297][ C0] do_interrupt_handler+0xd4/0x138 [ 948.175118][ C0] el1_interrupt+0x34/0x54 [ 948.175821][ C0] el1h_64_irq_handler+0x18/0x24 [ 948.176568][ C0] el1h_64_irq+0x64/0x68 [ 948.177279][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 948.178209][ C0] uart_write_room+0x150/0x2d4 [ 948.178947][ C0] tty_write_room+0x6c/0x8c [ 948.179712][ C0] handle_tx+0x120/0x5f8 [ 948.180371][ C0] caif_xmit+0x108/0x150 [ 948.181030][ C0] dev_hard_start_xmit+0x244/0x8e0 [ 948.181890][ C0] __dev_queue_xmit+0x155c/0x309c [ 948.182678][ C0] tx+0x9c/0x1c8 [ 948.183269][ C0] kthread+0x160/0x330 [ 948.183896][ C0] kthread+0x250/0x2d8 [ 948.184524][ C0] ret_from_fork+0x10/0x20 [ 948.185204][ C0] SMP: stopping secondary CPUs [ 948.185884][ C0] Kernel Offset: disabled [ 948.186616][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 948.187510][ C0] Memory Limit: none [ 948.442314][ C0] Rebooting in 86400 seconds..