last executing test programs: 6.406411852s ago: executing program 0 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c7080003400000008108"], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet(0x2, 0x3, 0x4) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.225903796s ago: executing program 0 (id=2638): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 5.834196584s ago: executing program 2 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 5.343979525s ago: executing program 0 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 5.343661685s ago: executing program 2 (id=2646): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.285698356s ago: executing program 3 (id=2648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c7080003400000008108"], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet(0x2, 0x3, 0x4) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5.013025082s ago: executing program 3 (id=2649): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000000), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ff", 0x1}], 0x1}, 0xc001) 4.565446372s ago: executing program 2 (id=2651): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x7, 0xffffffff, 0x2, 0x401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.481725094s ago: executing program 0 (id=2653): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.374572785s ago: executing program 4 (id=2654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100001002dbd70060000002500000000", @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000010001a800c000a800500080008000000050027000300000004001a"], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 4.15620103s ago: executing program 4 (id=2656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00b37b641000ff00002000000000000000020000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x4a) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x884) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x0, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x8000, 0x8, 0x101, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r6, 0x2f, 0x84, 0x4, 0x4038a0e, 0x2f, @loopback, @mcast2={0xff, 0x5}, 0x20, 0x80, 0xb, 0x4}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'veth1_virt_wifi\x00', {0x2, 0x0, @local}}) sendmsg$nl_route(r0, &(0x7f0000001140)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800040026bd7000fedbdf250a102008fe0200030020000008001900", @ANYRES32=0x0, @ANYBLOB="519f0c6fd2f2af16af50374b4547a186d14cfb7d32874cd0241b37f650c2108d76353e0a114c619c2f2062293df12007132f207ff8da7d2bed79ef3766fa7fbfb3174f0e57301ca9383b5cec142ed59b6635a42f100734e36367a798871dbac3011340e6"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44044) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) 4.149084661s ago: executing program 1 (id=2657): socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.945833855s ago: executing program 1 (id=2658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.827017897s ago: executing program 3 (id=2659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.294138922s ago: executing program 2 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x4000090) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x14, 0x601, 0x0, 0x0, {0x29, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c0c8) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44850}, 0x20044844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x404c894) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.270693813s ago: executing program 0 (id=2661): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.239343114s ago: executing program 3 (id=2662): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1cc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.193569254s ago: executing program 4 (id=2663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x80000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 1.192295665s ago: executing program 1 (id=2664): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = gettid() getpid() move_pages(r1, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000010380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d167", 0x7f, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) recvmmsg(r3, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x22}], 0x2, 0x120, 0x0) 1.043293538s ago: executing program 3 (id=2665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b949e1ca7712bcdb4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039a97c89eb", 0x20}, {0x0}], 0x2, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c000}], 0x1, 0x0) 876.324721ms ago: executing program 4 (id=2666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000010001a800c000a800500080008000000050027000300000004001a"], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 875.821712ms ago: executing program 2 (id=2667): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 858.477721ms ago: executing program 1 (id=2668): socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 705.457575ms ago: executing program 4 (id=2669): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="55ee4addb0838779ff7a51df6a14", 0xe}], 0x1}, 0x4) 496.64527ms ago: executing program 0 (id=2670): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x7, 0xffffffff, 0x2, 0x401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 495.12393ms ago: executing program 1 (id=2671): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1}, 0x4011) 377.829402ms ago: executing program 4 (id=2672): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 272.109604ms ago: executing program 1 (id=2673): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x10000, 0x40, 0x6, 0x4, 0xffffffff}, 0x8, 0x75, [{0x200, 0xffffff19, 0x3, 0x2, 0x101, 0x5}]}, [{0xfffff960, 0x8, 0x9, 0x9, 0x5, 0x81}, {0x10001, 0x2, 0x1, 0x8, 0xffff5cdb, 0x3d}, {0x8227, 0x1, 0x10001, 0x1, 0x3, 0x6}, {0x9, 0xff, 0x1f4, 0x0, 0x4, 0x78f}, {0x96, 0x7fffffff, 0xc, 0xfffffffe, 0x3, 0x8}, {0x0, 0xc44, 0x2, 0x7ff, 0x5, 0xc}, {0x7f, 0x7, 0x2, 0x9, 0x7, 0x6b}, {0xfe, 0x2, 0x7, 0x40, 0x0, 0x1}, {0x4, 0x6, 0x2, 0x8, 0x9, 0xfffffff7}, {0x80, 0x3, 0x7, 0x0, 0x2, 0x8}, {0x802, 0x8, 0x7fff, 0xa, 0x102a00, 0x1}, {0x2, 0x7, 0x9, 0x1, 0xaea6, 0x4}, {0x3, 0xf, 0x80000000, 0x4dd, 0x7, 0x9}, {0x1, 0x240, 0x7fff, 0x5, 0x2e7f, 0xed}, {0x7, 0x8, 0x401, 0x2, 0x4c, 0x3}, {0x7, 0x3, 0xae, 0x8, 0x1, 0xa}, {0x9, 0x4, 0x0, 0x0, 0x7, 0xfffffc00}, {0x200, 0xff, 0x7, 0x6, 0x0, 0xfffffffe}, {0x100, 0x7, 0x6, 0x8, 0x3}, {0x8001, 0x80, 0x6d9, 0x4, 0x5, 0x5}, {0xfffffffd, 0x7f, 0x5, 0x1, 0x4}, {0x24, 0xfffffff7, 0x0, 0x5, 0x6, 0xa}, {0x7, 0x3, 0x3, 0xfffffff9, 0xe40, 0xff}, {0x3, 0x40, 0xc3, 0x3, 0x6, 0x7}, {0x6f4, 0x5, 0x8, 0x4, 0x1, 0xff}, {0x0, 0x4, 0xff, 0x5971f7f6, 0x1, 0x7f}, {0xdbc, 0x9, 0x1cdb, 0x5, 0x429, 0x5}, {0xfffffffd, 0x6, 0x7, 0x9, 0x3, 0x9}, {0x8, 0x4, 0x9, 0xd, 0x0, 0x81}, {0x3, 0x1, 0xffff, 0x80000000, 0x3, 0xfffffff7}, {0x8, 0x0, 0xd, 0x1ff, 0x7ff, 0x5}, {0x2, 0x0, 0x2, 0x7fffffff, 0x7, 0x9}, {0x3, 0x9, 0xc, 0x2, 0x5, 0xae5}, {0x33992c94, 0x80, 0x0, 0x548c, 0x7, 0x2}, {0x7, 0xfffffff8, 0x9, 0x8000000, 0xf}, {0x401, 0x200, 0x4, 0x5, 0x800, 0xc62}, {0xd, 0x8001, 0x4e, 0x1, 0x7, 0x10001}, {0x0, 0x4, 0x2, 0xa530, 0x8, 0x1}, {0xf, 0xb, 0x2, 0x10000, 0x1, 0x2}, {0x5, 0x8, 0x4, 0x4, 0x0, 0xf8c}, {0x7, 0x2, 0x7, 0x6, 0x3, 0x80}, {0x5, 0x7, 0x4, 0x2, 0x1a00000, 0x6}, {0x571, 0x3, 0x95d, 0x9, 0x1000, 0x5}, {0x7, 0x0, 0x200, 0x0, 0x5, 0x10}, {0x4, 0xb0, 0x1, 0x4, 0x9, 0x1}, {0x8, 0x8, 0x101, 0x32, 0x3ff, 0x7}, {0x1, 0x4, 0x9c, 0x1, 0x7, 0x100}, {0x2, 0xfffffffc, 0x7, 0xfa1, 0x5, 0x1000}, {0x1, 0x40000000, 0xc, 0xdcc, 0x5, 0xa}, {0x7, 0x2, 0xffff, 0x8, 0x5, 0xa}, {0xb751, 0x10001, 0xffffff81, 0x7, 0x9, 0x3}, {0x5, 0x9, 0xe, 0xc, 0x0, 0x9}, {0x4, 0x2, 0x2, 0x7, 0xfffffff7}, {0xfffffffb, 0x4, 0x4, 0x4, 0x1, 0xf}, {0x8, 0x6, 0x4, 0x0, 0x4, 0x3}, {0xe, 0x5f67, 0x3, 0x8, 0x69, 0xdf}, {0x7f, 0x9, 0x2, 0x2a, 0x5, 0x9}, {0x0, 0x400, 0xa33d0a0d, 0x0, 0x8, 0x8}, {0x0, 0x3, 0x9, 0x9, 0x7, 0x6}, {0x9, 0x1, 0x6, 0x7fff, 0x0, 0xfffffff5}, {0x8, 0x8, 0x2, 0x7, 0x7, 0x4}, {0xff, 0x5, 0x23522536, 0x5, 0x7ff, 0x9}, {0x2, 0x0, 0x6, 0x0, 0x7, 0x1ff}, {0x4, 0x7ea6b718, 0x4, 0xa, 0x76c, 0x8001}, {0x9, 0x8, 0x6, 0x0, 0xd, 0xffffffff}, {0x7, 0x1, 0x9, 0xffffffff, 0x0, 0x4}, {0x2, 0x3, 0x1cb973da, 0x8, 0x5, 0x2}, {0x2, 0x1ff, 0x7, 0xf, 0x8, 0x8001}, {0x4, 0x897a, 0x6, 0x1, 0xf93a}, {0x8, 0xffffffff, 0x5, 0x3, 0xfffffff5, 0x1}, {0x6f, 0x5, 0x6, 0x9, 0xf, 0x8}, {0x4, 0xffffffff, 0x10001, 0x40, 0x708, 0xf}, {0xb4, 0x1, 0x1000, 0xd, 0x77, 0x3}, {0x3, 0xfffff800, 0x4, 0x9, 0x2, 0x5c}, {0x4, 0x2, 0x6, 0x6, 0x2, 0x2005}, {0xb, 0x1, 0x40, 0x7ff, 0x9, 0x1}, {0x2, 0x1, 0xd7, 0x1, 0xffff, 0x8}, {0xdecf, 0x86ac, 0x9, 0x81, 0x3, 0x4}, {0x7, 0xbd1, 0xb0, 0x3, 0x8, 0x1}, {0x2, 0x42a6, 0x5, 0x7, 0x1, 0x5}, {0x9, 0xc, 0x5, 0x6958, 0x7ff, 0x9}, {0x12a, 0x401, 0x8001, 0x8264, 0x7a80, 0x56cc}, {0x0, 0x3ff, 0x1, 0x7, 0xcb, 0xffffff2c}, {0x7d, 0x200, 0x5, 0xdba, 0x3, 0xfffffffd}, {0x3ff, 0x2c446a4, 0x3, 0x3, 0x40, 0xc}, {0x7, 0x81, 0x5, 0x8, 0xf0000000, 0x9}, {0x3, 0x0, 0x6, 0x8000, 0x1000, 0x6}, {0x1, 0x8000, 0x8, 0xe, 0x6, 0x10000}, {0x0, 0x6, 0x3, 0x8, 0x3, 0x7}, {0x9, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x1}, {0x4011a031, 0x7, 0x6, 0x0, 0x5, 0xfffffffe}, {0x100, 0xffff, 0x2, 0x9, 0x6, 0x7f}, {0x0, 0x9, 0xa4, 0x2, 0x6, 0x290}, {0x2, 0x9, 0x9f0, 0x9, 0x1, 0xc}, {0x3, 0x7, 0x101, 0x0, 0x0, 0xa8}, {0xffffffc2, 0x58b, 0x2, 0x4, 0x2}, {0x101, 0x4, 0xffffffff, 0x7, 0x1, 0x6}, {0x1, 0x7, 0x4, 0x1, 0x10000, 0x4}, {0x9, 0x1, 0x0, 0x7, 0x16a, 0x9}, {0xe8cb, 0x228, 0x5, 0x5, 0x1, 0x60000000}, {0x7, 0x400, 0xfffffffb, 0x1000, 0x9, 0xfffffff9}, {0xfffffffe, 0x401, 0x9, 0x12, 0x5, 0x80000000}, {0x8, 0xa570, 0x80, 0x3, 0x6, 0x5446}, {0x4, 0xfff, 0xec, 0xe1e, 0x8ee, 0x4}, {0xffffffff, 0x290, 0x6, 0xc, 0x401, 0x3}, {0x8, 0x4e5b, 0xfff, 0xfffffffe, 0x10000, 0xfffffffd}, {0x2, 0x6, 0x9, 0x5, 0x4, 0x9}, {0x80000001, 0x0, 0x400, 0x2, 0x1, 0x1}, {0x7, 0x6, 0x1, 0xf, 0x7, 0xb391}, {0x3, 0x1000, 0x6, 0x5, 0x80000000, 0x80000000}, {0xd, 0x6187, 0x7, 0xfffffffa, 0x1, 0x8}, {0x6, 0x2, 0x1000, 0x99, 0x8, 0x6}, {0x14e7, 0x9, 0x0, 0x1, 0x7fffffff}, {0x7, 0x4, 0x8, 0xa6, 0x2, 0x8}, {0x2, 0x3, 0xd, 0x9, 0x9, 0x39}, {0xfff, 0x1, 0x6, 0x9, 0x2, 0x5}, {0x0, 0x3abc0b25, 0x7f, 0xfffffffa, 0x57fd}, {0x6, 0x2, 0x3, 0x6, 0x5a87298a, 0x106}, {0x10000, 0x0, 0x8, 0x0, 0x0, 0x80000000}, {0x3c, 0x120000, 0x81, 0x2, 0x6}, {0xd, 0x10001, 0x6, 0x1, 0x3, 0x547}, {0x1, 0x8, 0x6, 0x1, 0x6, 0x200}, {0xa506, 0x3, 0x9, 0x3, 0x0, 0x5}, {0x7fff, 0x6, 0x1, 0x9, 0x1ff, 0x1}, {0x9, 0x407e135f, 0x0, 0x5, 0x6}, {0x0, 0x5, 0x272, 0x4, 0x0, 0xe}, {0xfffffffb, 0x1, 0x4, 0x7, 0x0, 0x3}, {0x8, 0xfffffff8, 0x8, 0x2, 0x1300000, 0x80000001}], [{0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0xdce5abc8a6e8d113}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0xe86eac2b022541d9}, {0x3}, {0x6, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x889f0d205037cd24}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xd122595bc897e202, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x7}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 44.789029ms ago: executing program 2 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x4, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000018b406000000850000006100000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r6, r7, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 0s ago: executing program 3 (id=2675): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1cc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.747604][ T4327] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.770996][ T4327] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 123.813916][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.832998][ T4327] usb 3-1: Product: syz [ 123.837265][ T4327] usb 3-1: Manufacturer: syz [ 123.854474][ T4327] usb 3-1: SerialNumber: syz [ 123.861377][ T4327] usb 3-1: config 0 descriptor?? [ 123.982050][ T5074] tmpfs: Bad value for 'huge' [ 124.283264][ T4327] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 124.402507][ T5086] fuse: Unknown parameter '0000000000000000000000600000000000000000000' [ 124.637752][ T2191] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.648569][ T5093] input: syz0 as /devices/virtual/input/input7 [ 124.853542][ T2191] usb 4-1: Using ep0 maxpacket: 32 [ 124.862598][ T2191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.894821][ T2191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.924214][ T2191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.943826][ T2191] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 124.955126][ T4323] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.982621][ T2191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.001815][ T2191] usb 4-1: Product: syz [ 125.006077][ T2191] usb 4-1: Manufacturer: syz [ 125.019153][ T2191] usb 4-1: SerialNumber: syz [ 125.167729][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 125.173669][ T5110] tmpfs: Bad value for 'huge' [ 125.188213][ T4323] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.236195][ T4323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.255746][ T2191] usb 4-1: unit 4 not found! [ 125.271374][ T2191] usb 4-1: unit 0 not found! [ 125.276254][ T4323] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 125.306821][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.367084][ T4323] usb 2-1: config 0 descriptor?? [ 125.676048][ T2191] usb 4-1: USB disconnect, device number 7 [ 125.809357][ T4323] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 125.889021][ T5124] ubi31: attaching mtd0 [ 125.922350][ T5124] ubi31: scanning is finished [ 125.932044][ T5124] ubi31: empty MTD device detected [ 126.142305][ T5124] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 126.189987][ T5124] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 126.237904][ T5124] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 126.266954][ T4323] usb 2-1: USB disconnect, device number 11 [ 126.282431][ T5124] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 126.329798][ T5124] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 126.397642][ T5124] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 126.408144][ T26] usb 3-1: USB disconnect, device number 5 [ 126.448322][ T5124] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1619999327 [ 126.548228][ T5124] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 126.620535][ T5134] ubi31: background thread "ubi_bgt31d" started, PID 5134 [ 127.040321][ T5152] tmpfs: Bad value for 'huge' [ 127.856345][ T5170] ALSA: seq fatal error: cannot create timer (-19) [ 128.336647][ T5201] tmpfs: Unknown parameter 'n' [ 128.397742][ T4322] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 128.587717][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 128.595749][ T4322] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 128.625227][ T4322] usb 2-1: config 0 has no interface number 0 [ 128.656734][ T4322] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.683870][ T4322] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.703547][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.737620][ T2191] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.745748][ T4322] usb 2-1: Product: syz [ 128.756324][ T4322] usb 2-1: Manufacturer: syz [ 128.779657][ T4322] usb 2-1: SerialNumber: syz [ 128.806918][ T4322] usb 2-1: config 0 descriptor?? [ 128.826996][ T5190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.937658][ T2191] usb 5-1: Using ep0 maxpacket: 32 [ 128.946682][ T2191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.989175][ T2191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 129.046214][ T2191] usb 5-1: string descriptor 0 read error: -22 [ 129.073799][ T5190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.090450][ T2191] usb 5-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 129.129857][ T2191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.180249][ T2191] usb 5-1: MIDIStreaming interface descriptor not found [ 129.272680][ T5222] ALSA: seq fatal error: cannot create timer (-19) [ 129.379806][ T2191] usb 5-1: USB disconnect, device number 4 [ 129.840162][ T4327] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.887972][ T5243] tmpfs: Unknown parameter 'n' [ 130.035630][ T4327] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 130.061497][ T4327] usb 1-1: config 1 has no interface number 0 [ 130.090966][ T4327] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 130.143178][ T4327] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.201842][ T4327] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 130.223958][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.247174][ T4327] usb 1-1: Product: syz [ 130.258848][ T4327] usb 1-1: Manufacturer: syz [ 130.263604][ T4327] usb 1-1: SerialNumber: syz [ 130.289269][ T5235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.308090][ T4327] usb 1-1: Expected 3 endpoints, found: 2 [ 130.714796][ T5259] ALSA: seq fatal error: cannot create timer (-19) [ 130.905822][ T4322] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 130.928091][ T4322] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 130.949632][ T4322] asix: probe of 2-1:0.188 failed with error -71 [ 130.999604][ T4322] usb 2-1: USB disconnect, device number 12 [ 131.458688][ T5278] tmpfs: Unknown parameter 'n' [ 132.185407][ T5310] tmpfs: Unknown parameter 'nr_blo' [ 132.599263][ T4323] usb 1-1: USB disconnect, device number 6 [ 132.698895][ T4327] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.887612][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 132.895016][ T4327] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.914515][ T4327] usb 4-1: config 1 interface 0 has no altsetting 0 [ 132.935084][ T4327] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 132.946402][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.972000][ T4327] usb 4-1: Product: syz [ 132.976334][ T4327] usb 4-1: Manufacturer: syz [ 132.983044][ T4327] usb 4-1: SerialNumber: syz [ 132.992085][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999135][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.230224][ T4327] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 133.259954][ T3624] bcm5974 4-1:1.0: could not read from device [ 133.296182][ T4327] usb 4-1: USB disconnect, device number 8 [ 133.304037][ T3624] bcm5974 4-1:1.0: could not read from device [ 133.360426][ T3624] bcm5974 4-1:1.0: could not read from device [ 133.493528][ T5337] tmpfs: Unknown parameter 'nr_blo' [ 133.878226][ T4323] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.092392][ T4323] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.109110][ T4323] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.123773][ T4323] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.144132][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.164864][ T5341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.360317][ T5369] tmpfs: Unknown parameter 'nr_blo' [ 134.510528][ T5371] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 134.589483][ T4327] usb 1-1: USB disconnect, device number 7 [ 135.334589][ T5400] netlink: 'syz.0.405': attribute type 21 has an invalid length. [ 135.348074][ T5400] netlink: 128 bytes leftover after parsing attributes in process `syz.0.405'. [ 135.365122][ T5400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.405'. [ 136.559996][ T5450] netlink: 'syz.2.426': attribute type 13 has an invalid length. [ 136.569754][ T5450] netlink: 160 bytes leftover after parsing attributes in process `syz.2.426'. [ 136.628481][ T5450] erspan0: refused to change device tx_queue_len [ 136.650239][ T5450] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 137.001707][ T5467] device syzkaller1 entered promiscuous mode [ 138.165471][ T4288] Bluetooth: hci1: adv larger than maximum supported [ 138.165553][ T4288] Bluetooth: hci1: Unknown advertising packet type: 0xd71 [ 138.172943][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d [ 138.397571][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.597688][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 138.607100][ T14] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 138.649860][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.656565][ T14] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 138.684139][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.701117][ T14] usb 1-1: config 0 descriptor?? [ 139.130737][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.148535][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.524654][ T14] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 139.732887][ T14] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -61 [ 139.777627][ T4323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.962580][ T4322] usb 1-1: USB disconnect, device number 8 [ 139.983722][ T5561] fido_id[5561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 140.007626][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 140.024594][ T4323] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 140.046467][ T5563] fuse: Unknown parameter 'grou00000000000000000000' [ 140.054273][ T4323] usb 3-1: config 0 has no interface number 0 [ 140.082397][ T4323] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.105789][ T4323] usb 3-1: config 0 interface 85 has no altsetting 0 [ 140.129845][ T4323] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 140.142535][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.152113][ T4323] usb 3-1: Product: syz [ 140.156376][ T4323] usb 3-1: Manufacturer: syz [ 140.162226][ T4323] usb 3-1: SerialNumber: syz [ 140.201907][ T4323] usb 3-1: config 0 descriptor?? [ 140.817651][ T4323] appletouch 3-1:0.85: Geyser mode initialized. [ 140.836818][ T4323] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 141.021310][ T4323] usb 3-1: USB disconnect, device number 6 [ 141.052842][ T4323] appletouch 3-1:0.85: input: appletouch disconnected [ 142.537690][ T4327] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 142.577603][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.719284][ T4327] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.728723][ T4327] usb 1-1: config 0 has no interface number 0 [ 142.735798][ T4327] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.747093][ T4327] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.761511][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 142.767275][ T4327] usb 1-1: config 0 interface 1 has no altsetting 0 [ 142.774380][ T4327] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 142.784320][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.795822][ T26] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 142.805822][ T4327] usb 1-1: config 0 descriptor?? [ 142.813875][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.822588][ T26] usb 3-1: Product: ဉ [ 142.826933][ T26] usb 3-1: SerialNumber: 杛⻾㏔鈱닜㾫羈௷ᾯ融४ﯿ渴듩䫚곢땽怕騴ᵊ乏Ᵹ컲瓿ﻦ䊺䱨⼯䣶ട뫏虶덢扷餽䠮衁蝦粢꒷愡礀峨┭ [ 143.054558][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.085925][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.123410][ T5632] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 143.149639][ T26] usb 3-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 143.166238][ T26] usb 3-1: found format II with max.bitrate = 83, frame size=4 [ 143.174256][ T26] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 143.194604][ T26] usb 3-1: unit 5 not found! [ 143.239460][ T26] usb 3-1: USB disconnect, device number 7 [ 143.510259][ T5135] udevd[5135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.886646][ T4327] usbhid 1-1:0.1: can't add hid device: -71 [ 143.911627][ T4327] usbhid: probe of 1-1:0.1 failed with error -71 [ 143.952167][ T4327] usb 1-1: USB disconnect, device number 9 [ 144.228935][ T5588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.457601][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.656111][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.675408][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.703939][ T5673] kvm: pic: non byte read [ 144.716600][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.724835][ T5673] kvm: pic: non byte read [ 144.736007][ T5673] kvm: pic: non byte read [ 144.743167][ T26] usb 5-1: string descriptor 0 read error: -22 [ 144.750932][ T5673] kvm: pic: non byte read [ 144.767644][ T26] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 144.778798][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.794558][ T5673] kvm: pic: non byte read [ 144.812749][ T5673] kvm: pic: non byte read [ 144.817417][ T5673] kvm: pic: non byte read [ 144.842527][ T5673] kvm: pic: non byte read [ 144.852662][ T5673] kvm: pic: non byte read [ 144.860001][ T26] usb 5-1: selecting invalid altsetting 1 [ 144.863207][ T5673] kvm: pic: non byte read [ 144.886737][ T26] usb 5-1: unit 3 not found! [ 144.902105][ T26] usb 5-1: unit 6 not found! [ 144.973454][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 145.011878][ T5021] udevd[5021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.757600][ T4322] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 145.953968][ T4322] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 145.987669][ T4322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.002861][ T4322] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.023680][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.053178][ T4322] usb 3-1: Product: syz [ 146.063606][ T4322] usb 3-1: Manufacturer: syz [ 146.074149][ T4322] usb 3-1: SerialNumber: syz [ 146.092192][ T4322] usb 3-1: config 0 descriptor?? [ 146.129874][ T4322] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 146.190314][ T5021] udevd[5021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.315452][ T4322] usb 3-1: USB disconnect, device number 8 [ 146.937757][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.162077][ T4322] usb 5-1: USB disconnect, device number 5 [ 147.171948][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.194262][ T26] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.204028][ T26] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 147.235554][ T26] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 147.258958][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.277381][ T26] usb 1-1: Product: syz [ 147.281782][ T26] usb 1-1: Manufacturer: syz [ 147.286443][ T26] usb 1-1: SerialNumber: syz [ 147.377693][ T4321] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.515334][ T26] usb 1-1: 1:1: invalid format type 0x85 is detected, processed as PCM [ 147.531528][ T26] usb 1-1: failed to enable PITCH for EP 0x1 [ 147.538266][ T26] usb 1-1: 1:1: cannot set freq 3069049 to ep 0x1 [ 147.545190][ T26] usb 1-1: 0:2 : does not exist [ 147.579272][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 147.617618][ T4321] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 147.636680][ T26] usb 1-1: USB disconnect, device number 10 [ 147.647044][ T4321] usb 3-1: config 0 has no interface number 0 [ 147.671329][ T4321] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 147.685351][ T4321] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.730290][ T4321] usb 3-1: config 0 interface 41 has no altsetting 0 [ 147.744691][ T4321] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 147.762107][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.772676][ T4321] usb 3-1: Product: syz [ 147.776931][ T4321] usb 3-1: Manufacturer: syz [ 147.787769][ T4321] usb 3-1: SerialNumber: syz [ 147.798857][ T4321] usb 3-1: config 0 descriptor?? [ 147.805800][ T5747] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 147.828340][ T5747] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 148.064729][ T5747] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 148.092328][ T5747] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 148.256489][ T5693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.547904][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.748555][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 148.781838][ T26] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 148.804611][ T4321] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 46:81:7d:0d:59:73 [ 148.819482][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.833651][ T26] usb 1-1: Product: ဉ [ 148.842678][ T26] usb 1-1: SerialNumber: 杛⻾㏔鈱닜㾫羈௷ᾯ融४ﯿ渴듩䫚곢땽怕騴ᵊ乏Ᵹ컲瓿ﻦ䊺䱨⼯䣶ട뫏虶덢扷餽䠮衁蝦粢꒷愡礀峨┭ [ 148.868808][ T4321] usb 3-1: USB disconnect, device number 9 [ 148.885594][ T4321] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 149.249063][ T26] usb 1-1: 1:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 149.264454][ T26] usb 1-1: found format II with max.bitrate = 83, frame size=4 [ 149.295525][ T26] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 149.325549][ T26] usb 1-1: unit 5 not found! [ 149.432750][ T26] usb 1-1: USB disconnect, device number 11 [ 149.680689][ T5784] device syzkaller1 entered promiscuous mode [ 150.268813][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.393656][ T5813] picdev_read: 77 callbacks suppressed [ 150.393674][ T5813] kvm: pic: non byte read [ 150.408511][ T5813] kvm: pic: non byte read [ 150.428890][ T5813] kvm: pic: non byte read [ 150.433413][ T5813] kvm: pic: non byte read [ 150.458414][ T5813] kvm: pic: non byte read [ 150.462985][ T5813] kvm: pic: non byte read [ 150.479862][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.497023][ T5813] kvm: pic: non byte read [ 150.505421][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.523780][ T5813] kvm: pic: non byte read [ 150.536567][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.550479][ T5813] kvm: pic: non byte read [ 150.567758][ T5813] kvm: pic: non byte read [ 150.577179][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.598153][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.617077][ T14] usb 2-1: config 0 descriptor?? [ 151.017736][ T4323] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.207674][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 151.216687][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.233642][ T4323] usb 1-1: config 15 has an invalid interface number: 14 but max is 0 [ 151.237825][ T4343] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.247972][ T4323] usb 1-1: config 15 has no interface number 0 [ 151.265896][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 151.273825][ T4323] usb 1-1: config 15 interface 14 has no altsetting 0 [ 151.287549][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.297132][ T14] usb 2-1: USB disconnect, device number 13 [ 151.311395][ T4323] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=32.2c [ 151.327020][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.335808][ T4323] usb 1-1: Product: syz [ 151.351122][ T4323] usb 1-1: Manufacturer: syz [ 151.356009][ T4323] usb 1-1: SerialNumber: syz [ 151.437698][ T4343] usb 4-1: Using ep0 maxpacket: 32 [ 151.448354][ T4343] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.467941][ T4343] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.487545][ T4343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.506113][ T4343] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 151.526594][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.546910][ T4343] usb 4-1: Product: syz [ 151.553444][ T4343] usb 4-1: Manufacturer: syz [ 151.565995][ T4343] usb 4-1: SerialNumber: syz [ 151.588424][ T4343] usb 4-1: config 0 descriptor?? [ 151.591247][ T4323] gspca_main: spca501-2.14.0 probing 1776:501c [ 151.617689][ T4323] gspca_spca501: reg write: error -71 [ 151.623391][ T4323] spca501 1-1:15.14: Reg write failed for 0x02,0x07,0x05 [ 151.638382][ T4323] spca501: probe of 1-1:15.14 failed with error -22 [ 151.653507][ T4323] usb 1-1: USB disconnect, device number 12 [ 152.010972][ T4343] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 153.961840][ T5949] tmpfs: Unknown parameter 'qCC' [ 154.042780][ T14] usb 4-1: USB disconnect, device number 9 [ 155.747793][ T2191] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.959778][ T2191] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 155.998958][ T2191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.041076][ T2191] usb 3-1: config 0 has no interface number 0 [ 156.060304][ T2191] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 156.091879][ T2191] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.139037][ T2191] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 156.157906][ T2191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.186466][ T2191] usb 3-1: Product: syz [ 156.201745][ T2191] usb 3-1: Manufacturer: syz [ 156.207033][ T2191] usb 3-1: SerialNumber: syz [ 156.248972][ T2191] usb 3-1: config 0 descriptor?? [ 156.255428][ T6010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.300576][ T2191] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 156.327071][ T2191] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 156.369965][ T2191] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 156.559751][ T4323] usb 3-1: USB disconnect, device number 10 [ 156.577398][ T4323] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 156.605276][ T4323] cyberjack 3-1:0.69: device disconnected [ 156.681513][ T6035] input: syz1 as /devices/virtual/input/input10 [ 157.604604][ T6058] fuse: Bad value for 'fd' [ 158.077629][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.279603][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.293960][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 158.303452][ T7] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 158.312692][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.323924][ T7] usb 4-1: config 0 descriptor?? [ 158.526461][ T6086] binder_alloc: 6085: binder_alloc_buf, no vma [ 158.607872][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.807554][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 158.815647][ T26] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.825278][ T26] usb 2-1: config 0 has no interface number 0 [ 158.834638][ T26] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 158.844159][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.852767][ T26] usb 2-1: Product: syz [ 158.857105][ T26] usb 2-1: Manufacturer: syz [ 158.863653][ T26] usb 2-1: SerialNumber: syz [ 158.886118][ T26] usb 2-1: config 0 descriptor?? [ 158.904231][ T26] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 158.943418][ T7] Bluetooth: Can't get version to change to load ram patch err [ 158.957686][ T7] Bluetooth: Loading sysconfig file failed [ 158.963618][ T7] ath3k: probe of 4-1:0.0 failed with error -71 [ 158.995580][ T7] usb 4-1: USB disconnect, device number 10 [ 159.023533][ T6098] tmpfs: Unknown parameter 'qCC' [ 159.626706][ T6116] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.650143][ T6116] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.678284][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.696862][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.713287][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.728444][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.744314][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.773958][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.794325][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 159.821193][ T6115] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 160.365300][ T6137] binder_alloc: 6136: binder_alloc_buf, no vma [ 160.717770][ T26] gspca_spca1528: reg_r err -71 [ 160.722857][ T26] spca1528: probe of 2-1:0.1 failed with error -71 [ 160.751652][ T26] usb 2-1: USB disconnect, device number 14 [ 161.935760][ T6179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.962605][ T6179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.981699][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.067586][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 162.257566][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 162.265402][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 162.294383][ T26] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 162.325011][ T26] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 162.344545][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.364571][ T26] usb 4-1: Product: syz [ 162.387600][ T26] usb 4-1: Manufacturer: syz [ 162.392299][ T26] usb 4-1: SerialNumber: syz [ 162.432405][ T26] usb 4-1: config 0 descriptor?? [ 162.439514][ T6177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.623003][ T27] audit: type=1326 audit(1784431059.599:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.4.689" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8f2b9de99 code=0x0 [ 162.665045][ T26] usb 4-1: USB disconnect, device number 11 [ 163.793440][ T4321] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.017202][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 164.031419][ T4321] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 164.047626][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.057331][ T4321] usb 3-1: Product: syz [ 164.061968][ T4321] usb 3-1: Manufacturer: syz [ 164.066638][ T4321] usb 3-1: SerialNumber: syz [ 164.088527][ T4321] usb 3-1: config 0 descriptor?? [ 164.130805][ T4321] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 165.322735][ T4321] ssu100: probe of 3-1:0.0 failed with error -71 [ 165.336071][ T4321] usb 3-1: USB disconnect, device number 11 [ 168.594088][ T6402] device syzkaller0 entered promiscuous mode [ 169.410197][ T6434] binder: BINDER_SET_CONTEXT_MGR already set [ 169.425766][ T6429] device syzkaller0 entered promiscuous mode [ 169.433921][ T6434] binder: 6433:6434 ioctl 4018620d 200000000300 returned -16 [ 169.434859][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 169.974187][ T6451] picdev_read: 77 callbacks suppressed [ 169.974208][ T6451] kvm: pic: non byte read [ 169.985047][ T6451] kvm: pic: non byte read [ 169.995315][ T6451] kvm: pic: non byte read [ 170.000268][ T6451] kvm: pic: non byte read [ 170.004947][ T6451] kvm: pic: non byte read [ 170.010205][ T6451] kvm: pic: non byte read [ 170.015008][ T6451] kvm: pic: non byte read [ 170.020382][ T6451] kvm: pic: non byte read [ 170.025186][ T6451] kvm: pic: non byte read [ 170.030476][ T6451] kvm: pic: non byte read [ 171.039849][ T6491] fuse: Unknown parameter 'user_id00000000000000000000' [ 172.230147][ T6517] fuse: Unknown parameter 'user_id00000000000000000000' [ 172.615217][ T6529] binder: BINDER_SET_CONTEXT_MGR already set [ 172.621540][ T6529] binder: 6528:6529 ioctl 4018620d 200000004a80 returned -16 [ 172.630110][ T6529] binder: 6528:6529 ioctl c0306201 2000000004c0 returned -22 [ 173.782932][ T6551] fuse: Unknown parameter 'user_id00000000000000000000' [ 174.312428][ T6506] device syzkaller0 entered promiscuous mode [ 174.743495][ T6569] binder: BINDER_SET_CONTEXT_MGR already set [ 174.793641][ T6569] binder: 6568:6569 ioctl 4018620d 200000004a80 returned -16 [ 174.793655][ T6574] binder: 6568:6574 ioctl c0306201 2000000004c0 returned -22 [ 174.997822][ T6579] fuse: Bad value for 'fd' [ 176.220318][ T6618] binder: BINDER_SET_CONTEXT_MGR already set [ 176.243801][ T6618] binder: 6617:6618 ioctl 4018620d 200000004a80 returned -16 [ 176.262012][ T6618] binder: 6617:6618 ioctl c0306201 2000000004c0 returned -22 [ 177.335126][ T4288] Bluetooth: hci4: link tx timeout [ 177.341997][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.352904][ T4288] Bluetooth: hci4: link tx timeout [ 177.358211][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.366034][ T4288] Bluetooth: hci4: link tx timeout [ 177.371414][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.048062][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'. [ 178.310757][ T6641] Illegal XDP return value 610475453 on prog (id 60) dev syz_tun, expect packet loss! [ 178.524968][ T6652] netlink: 48 bytes leftover after parsing attributes in process `syz.1.871'. [ 178.554741][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 179.388202][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 179.637376][ T6681] device syzkaller0 entered promiscuous mode [ 179.654931][ T6681] tipc: Started in network mode [ 179.660483][ T6681] tipc: Node identity b6e8492a0568, cluster identity 4711 [ 179.668466][ T6681] tipc: Enabled bearer , priority 0 [ 179.767760][ T6680] tipc: Resetting bearer [ 179.854710][ T6680] tipc: Disabling bearer [ 180.169315][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 180.730071][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 181.651695][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 182.635962][ T6783] tipc: Started in network mode [ 182.644393][ T6783] tipc: Node identity 72a9a9dd82bc, cluster identity 4711 [ 182.652315][ T6783] tipc: Enabled bearer , priority 0 [ 185.601245][ T6787] tipc: Resetting bearer [ 185.643700][ T6791] device gretap1 entered promiscuous mode [ 185.677123][ T4321] tipc: Node number set to 4027951581 [ 185.701207][ T6810] device syzkaller0 entered promiscuous mode [ 185.888974][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 186.382594][ T6846] device syzkaller0 entered promiscuous mode [ 186.474422][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 186.511683][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 186.534546][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 186.742584][ T6856] device gretap1 entered promiscuous mode [ 186.800786][ T6859] tipc: Started in network mode [ 186.816005][ T6859] tipc: Node identity 86816644b173, cluster identity 4711 [ 186.847796][ T6859] tipc: Enabled bearer , priority 0 [ 187.732167][ T6896] tipc: Enabling of bearer rejected, failed to enable media [ 187.968449][ T4327] tipc: Node number set to 938632772 [ 188.555111][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.802344][ T6933] device syzkaller0 entered promiscuous mode [ 188.913244][ T6938] device vxcan3 entered promiscuous mode [ 189.154783][ T6913] syz.0.961 (6913) used greatest stack depth: 18128 bytes left [ 190.264645][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 190.675509][ T6999] device gretap1 entered promiscuous mode [ 190.973321][ T7008] device syzkaller0 entered promiscuous mode [ 191.295129][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 191.847366][ T7047] binder: 7044:7047 ioctl 4018620d 0 returned -22 [ 191.997947][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.580773][ T7072] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1018'. [ 192.697835][ T7074] device syzkaller0 entered promiscuous mode [ 192.745838][ T7074] TC_ACT_REPEAT abuse ? [ 192.800489][ T7079] device bridge1 entered promiscuous mode [ 193.627959][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.642660][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.669149][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.676857][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.706392][ T7102] device bridge_slave_0 left promiscuous mode [ 193.725068][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.785754][ T7102] device bridge_slave_1 left promiscuous mode [ 193.820673][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.882468][ T7102] bond0: (slave bond_slave_0): Releasing backup interface [ 193.935682][ T7102] bond0: (slave bond_slave_1): Releasing backup interface [ 194.066969][ T7102] team0: Port device team_slave_0 removed [ 194.102594][ T7102] team0: Port device team_slave_1 removed [ 194.119059][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.126673][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.180259][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 194.432798][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.439495][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.507075][ T7122] device gretap1 entered promiscuous mode [ 194.551844][ T7122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.578215][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.668015][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.798004][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.467979][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.549079][ T7148] tipc: Enabling of bearer rejected, already enabled [ 195.684228][ T7155] binder: 7153:7155 ioctl 4018620d 0 returned -22 [ 195.709624][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.868667][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.889921][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.161353][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 196.170902][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 196.180014][ T7171] netlink: 'syz.3.1052': attribute type 11 has an invalid length. [ 196.188152][ T7171] netlink: 'syz.3.1052': attribute type 13 has an invalid length. [ 196.971423][ T7192] netlink: 'syz.3.1058': attribute type 3 has an invalid length. [ 196.986532][ T7191] device syzkaller0 entered promiscuous mode [ 197.103024][ T7190] device syzkaller0 entered promiscuous mode [ 197.149977][ T7190] tipc: Enabled bearer , priority 0 [ 197.218308][ T7190] tipc: Resetting bearer [ 197.244143][ T7187] tipc: Resetting bearer [ 197.298315][ T7187] tipc: Disabling bearer [ 197.566607][ T7208] binder: 7206:7208 ioctl 4018620d 0 returned -22 [ 197.613398][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 197.851608][ T4273] net_ratelimit: 4 callbacks suppressed [ 197.851624][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.556262][ T7231] device syzkaller0 entered promiscuous mode [ 198.761787][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1075'. [ 198.894176][ T7237] device syzkaller0 entered promiscuous mode [ 198.907895][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.949784][ T7237] tipc: Started in network mode [ 198.954748][ T7237] tipc: Node identity 06191d0bc788, cluster identity 4711 [ 198.990231][ T7237] tipc: Enabled bearer , priority 0 [ 199.009057][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 199.065066][ T7237] tipc: Resetting bearer [ 199.222790][ T7236] tipc: Resetting bearer [ 199.262432][ T7236] tipc: Disabling bearer [ 199.317616][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.440637][ T7256] binder: 7255:7256 ioctl 4018620d 0 returned -22 [ 199.634854][ T7258] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 199.676176][ T7258] device bond1 entered promiscuous mode [ 199.682373][ T7258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.694398][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 199.753605][ T7265] bond1: (slave bridge1): making interface the new active one [ 199.761577][ T7265] device bridge1 entered promiscuous mode [ 199.769995][ T7265] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 199.779755][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 199.948600][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.188152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.314764][ T7276] device syzkaller0 entered promiscuous mode [ 200.517602][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 200.920510][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 200.967607][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 200.988017][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.998562][ T7293] netlink: 'syz.2.1093': attribute type 11 has an invalid length. [ 201.006442][ T7293] netlink: 'syz.2.1093': attribute type 14 has an invalid length. [ 201.415386][ T7308] binder: BINDER_SET_CONTEXT_MGR already set [ 201.422855][ T7308] binder: 7307:7308 ioctl 4018620d 200000004a80 returned -16 [ 201.437743][ T7308] binder: 7307:7308 ioctl c0306201 2000000004c0 returned -22 [ 202.036621][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.352179][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.464399][ T7344] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1111'. [ 202.642416][ T7349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.673091][ T7349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.911948][ T7364] tipc: Started in network mode [ 202.929332][ T7364] tipc: Node identity ba87969aa801, cluster identity 4711 [ 202.950145][ T7364] tipc: Enabled bearer , priority 0 [ 203.001729][ T7364] tipc: Resetting bearer [ 203.068652][ T4327] net_ratelimit: 18 callbacks suppressed [ 203.068668][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.163920][ T7373] binder: BINDER_SET_CONTEXT_MGR already set [ 203.177344][ T7373] binder: 7372:7373 ioctl 4018620d 200000004a80 returned -16 [ 203.195115][ T7373] binder: 7372:7373 ioctl c0306201 2000000004c0 returned -22 [ 203.414777][ T7382] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 203.448976][ T7382] device bond2 entered promiscuous mode [ 203.455216][ T7382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.759307][ T7382] bond2: (slave bridge2): making interface the new active one [ 203.775609][ T7382] device bridge2 entered promiscuous mode [ 203.784921][ T7382] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 203.836757][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 204.012134][ T4327] tipc: Node number set to 310810266 [ 204.029354][ T7401] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1129'. [ 204.079470][ T7404] device syzkaller0 entered promiscuous mode [ 204.108281][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.129240][ T7404] tipc: Enabled bearer , priority 0 [ 204.178151][ T7404] tipc: Resetting bearer [ 204.185083][ T7406] device syzkaller0 entered promiscuous mode [ 204.204250][ T7403] tipc: Resetting bearer [ 204.252122][ T7403] tipc: Disabling bearer [ 204.399982][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.424001][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.467689][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.478290][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.491751][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.515624][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.535444][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.555176][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.090845][ T7430] device bridge1 entered promiscuous mode [ 205.098414][ T7432] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 205.220273][ T7432] device bond1 entered promiscuous mode [ 205.226587][ T7432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.316297][ T7439] bond1: (slave bridge1): making interface the new active one [ 205.364031][ T7439] device bridge1 entered promiscuous mode [ 205.404185][ T7439] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 205.432795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 205.694115][ T7457] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1150'. [ 205.832828][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 205.857184][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 206.130280][ T7470] device bridge2 entered promiscuous mode [ 206.368989][ T7478] device gretap1 entered promiscuous mode [ 206.747679][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 206.753840][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 206.760233][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 206.766285][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 207.106949][ T7504] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1164'. [ 207.624969][ T7525] device syzkaller0 entered promiscuous mode [ 207.665922][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 207.763069][ T7529] device syzkaller1 entered promiscuous mode [ 208.061857][ T7545] lo speed is unknown, defaulting to 1000 [ 208.099943][ T7545] lo speed is unknown, defaulting to 1000 [ 208.123004][ T7545] lo speed is unknown, defaulting to 1000 [ 208.174850][ T7545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.216431][ T7545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 208.267816][ T26] net_ratelimit: 55 callbacks suppressed [ 208.267835][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.328077][ T7545] lo speed is unknown, defaulting to 1000 [ 208.365417][ T7545] lo speed is unknown, defaulting to 1000 [ 208.386689][ T7545] lo speed is unknown, defaulting to 1000 [ 208.406936][ T7545] lo speed is unknown, defaulting to 1000 [ 208.417144][ T7545] lo speed is unknown, defaulting to 1000 [ 208.430385][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.149734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.313245][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.687126][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 209.710190][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1199'. [ 209.732799][ T7608] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1200'. [ 209.891472][ T7614] device syzkaller0 entered promiscuous mode [ 209.892630][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.347943][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.602946][ T7636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.611852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.647874][ T7636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.656278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.670883][ T7641] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 210.817340][ T7641] device bond2 entered promiscuous mode [ 210.856570][ T7641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.871045][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1214'. [ 210.901051][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 210.977814][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1215'. [ 211.017177][ T7655] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1218'. [ 211.044664][ T7641] bond2: (slave bridge2): making interface the new active one [ 211.082102][ T7641] device bridge2 entered promiscuous mode [ 211.124936][ T7641] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 211.177386][ T7654] device syzkaller0 entered promiscuous mode [ 211.195930][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 211.549601][ T7664] device syzkaller0 entered promiscuous mode [ 213.469449][ T4343] net_ratelimit: 2047 callbacks suppressed [ 213.469470][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.000565][ T7680] device bridge3 entered promiscuous mode [ 214.132607][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 214.157943][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1229'. [ 214.296956][ T7703] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 214.331032][ T7703] device bond1 entered promiscuous mode [ 214.337007][ T7703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.394836][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 214.442736][ T7703] bond1: (slave bridge2): making interface the new active one [ 214.450650][ T7703] device bridge2 entered promiscuous mode [ 214.467764][ T7703] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 214.497054][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 214.507786][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.516019][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.071333][ T7732] __nla_validate_parse: 1 callbacks suppressed [ 215.071352][ T7732] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1241'. [ 215.171820][ T7734] device syzkaller0 entered promiscuous mode [ 215.342217][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 215.378054][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1243'. [ 215.547967][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.720731][ T7747] device syzkaller0 entered promiscuous mode [ 215.746999][ T7749] netlink: 'syz.1.1248': attribute type 1 has an invalid length. [ 215.864400][ T7749] device bond1 entered promiscuous mode [ 215.872106][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.941203][ T7746] tipc: Enabling of bearer rejected, already enabled [ 215.953078][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 216.031461][ T7756] bond1: (slave bridge3): making interface the new active one [ 216.080066][ T7756] device bridge3 entered promiscuous mode [ 216.107339][ T7756] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 216.161307][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 216.235705][ T7758] device syzkaller0 entered promiscuous mode [ 216.674168][ T7783] binder: 7782:7783 ioctl 4018620d 0 returned -22 [ 217.340269][ T7806] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 217.419332][ T7806] device bond3 entered promiscuous mode [ 217.425276][ T7806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.451747][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 217.551731][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.651523][ T7806] bond3: (slave bridge4): making interface the new active one [ 217.704348][ T7806] device bridge4 entered promiscuous mode [ 217.711190][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.732258][ T7806] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 217.757863][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 217.770446][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'. [ 217.820008][ T7814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.847674][ T7814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.860442][ T7815] bridge3: port 1(erspan0) entered blocking state [ 217.887202][ T7814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.891616][ T7815] bridge3: port 1(erspan0) entered disabled state [ 217.902575][ T7814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.920713][ T7815] device erspan0 entered promiscuous mode [ 217.938741][ T7815] bridge3: port 1(erspan0) entered blocking state [ 217.945391][ T7815] bridge3: port 1(erspan0) entered forwarding state [ 218.007820][ T7820] binder: 7819:7820 ioctl c0306201 0 returned -14 [ 218.008479][ T7817] device syzkaller0 entered promiscuous mode [ 218.755188][ T26] net_ratelimit: 1019 callbacks suppressed [ 218.755207][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.896849][ T7846] tipc: Enabling of bearer rejected, already enabled [ 218.998469][ T7849] binder: 7848:7849 ioctl c0306201 0 returned -14 [ 219.229912][ T7856] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1287'. [ 219.248103][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 219.387806][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.788010][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.874179][ T7873] device syzkaller0 entered promiscuous mode [ 219.926949][ T7878] binder: 7877:7878 ioctl c0306201 0 returned -14 [ 220.034666][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.062549][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.079726][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.108286][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.120371][ T7882] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 220.163007][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.171550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.203661][ T7882] device bond3 entered promiscuous mode [ 220.214050][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.239197][ T7882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.371858][ T7888] bond3: (slave bridge4): making interface the new active one [ 220.414510][ T7888] device bridge4 entered promiscuous mode [ 220.444715][ T7888] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 220.471290][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 222.770430][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 222.779823][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 222.974555][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 222.983883][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1328'. [ 223.863765][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 223.891550][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 223.961261][ T4343] net_ratelimit: 13 callbacks suppressed [ 223.961281][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.032622][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 224.047874][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 224.093605][ T7992] netlink: 'syz.3.1339': attribute type 11 has an invalid length. [ 224.182511][ T7995] device bridge3 entered promiscuous mode [ 224.988153][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.121965][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 225.167505][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 225.492131][ T8027] netlink: 'syz.0.1353': attribute type 11 has an invalid length. [ 225.525367][ T8025] TC_ACT_REPEAT abuse ? [ 225.788420][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.798297][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.807340][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.028432][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.668096][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.987930][ T8075] netlink: 'syz.0.1376': attribute type 11 has an invalid length. [ 227.075251][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.300037][ T8083] device syzkaller0 entered promiscuous mode [ 227.708924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.995961][ T8105] __nla_validate_parse: 13 callbacks suppressed [ 227.995979][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 228.030090][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 228.049724][ T8105] netlink: 'syz.0.1390': attribute type 11 has an invalid length. [ 228.067067][ T8106] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 228.175373][ T8106] device bond2 entered promiscuous mode [ 228.263346][ T8106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.315984][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 228.349254][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 228.369112][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 228.394897][ T8115] netlink: 'syz.0.1393': attribute type 13 has an invalid length. [ 228.409693][ T8119] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1394'. [ 228.435427][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 228.452675][ T8116] bond2: (slave bridge4): making interface the new active one [ 228.473192][ T8116] device bridge4 entered promiscuous mode [ 228.494163][ T8116] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 228.553200][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 228.831381][ T8129] device syzkaller0 entered promiscuous mode [ 228.937362][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1399'. [ 229.147973][ T26] net_ratelimit: 1 callbacks suppressed [ 229.147990][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.233824][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 229.263620][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 229.301242][ T8138] netlink: 'syz.0.1403': attribute type 11 has an invalid length. [ 229.327548][ T8142] netlink: 'syz.3.1405': attribute type 13 has an invalid length. [ 229.713610][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.837850][ T8161] tipc: Enabling of bearer rejected, failed to enable media [ 230.188442][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.268535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.281576][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.344577][ T8172] netlink: 'syz.3.1417': attribute type 14 has an invalid length. [ 230.498069][ T8176] netlink: 'syz.2.1418': attribute type 13 has an invalid length. [ 230.842683][ T8186] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 231.206696][ T8197] binder: 8196:8197 ioctl 4018620d 0 returned -22 [ 231.228138][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.315128][ T4288] Bluetooth: hci4: link tx timeout [ 231.320843][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 231.329190][ T4288] Bluetooth: hci4: link tx timeout [ 231.334445][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.352461][ T8204] tipc: Enabling of bearer rejected, already enabled [ 231.393893][ T8206] netlink: 'syz.0.1429': attribute type 14 has an invalid length. [ 231.548625][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.558085][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.573542][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.626971][ T8212] device syzkaller1 entered promiscuous mode [ 232.543295][ T8242] tipc: Enabling of bearer rejected, already enabled [ 232.618699][ T8246] netlink: 'syz.2.1443': attribute type 14 has an invalid length. [ 233.173938][ T8264] binder: 8263:8264 ioctl 4018620d 0 returned -22 [ 233.387738][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 233.578706][ T8274] tipc: Enabled bearer , priority 0 [ 233.593583][ T8274] device syzkaller0 entered promiscuous mode [ 233.667057][ T8274] __nla_validate_parse: 10 callbacks suppressed [ 233.667077][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1453'. [ 233.741475][ T8274] tipc: Resetting bearer [ 233.771455][ T8272] tipc: Resetting bearer [ 233.833584][ T8272] tipc: Disabling bearer [ 233.864118][ T8281] tipc: Enabling of bearer rejected, failed to enable media [ 234.347970][ T4343] net_ratelimit: 3 callbacks suppressed [ 234.347988][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.915391][ T8312] binder: 8311:8312 ioctl 4018620d 0 returned -22 [ 235.392837][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.792465][ T8337] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 235.892512][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 235.953379][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1480'. [ 236.019275][ T8339] netlink: 'syz.4.1480': attribute type 6 has an invalid length. [ 236.063521][ T8339] netlink: 'syz.4.1480': attribute type 5 has an invalid length. [ 236.102897][ T8339] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.113956][ T8339] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.124151][ T8339] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.133093][ T8339] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.242391][ T8341] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1479'. [ 236.347728][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.428097][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.496692][ T8348] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 236.575066][ T8348] device bond4 entered promiscuous mode [ 236.581464][ T8348] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.707227][ T8355] bond4: (slave bridge5): making interface the new active one [ 236.738333][ T8355] device bridge5 entered promiscuous mode [ 236.762042][ T8355] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 236.797291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 236.949150][ T8360] device syzkaller0 entered promiscuous mode [ 237.443754][ T8377] binder: 8376:8377 ioctl c0306201 0 returned -14 [ 237.467949][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.508189][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.399272][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.551187][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.508076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.521478][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.535172][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.544728][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.554250][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.587990][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.790815][ T8411] binder: 8410:8411 ioctl c0306201 0 returned -14 [ 240.819229][ T8414] device syzkaller0 entered promiscuous mode [ 240.863093][ T8414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1506'. [ 241.157728][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.236548][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1514'. [ 241.628904][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.669423][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 241.801128][ T8444] netlink: 'syz.3.1518': attribute type 11 has an invalid length. [ 242.048502][ T8453] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1521'. [ 242.820844][ T8472] binder: 8471:8472 ioctl c0306201 0 returned -14 [ 243.075683][ T8482] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1535'. [ 243.215513][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1537'. [ 243.657126][ T8494] device syzkaller0 entered promiscuous mode [ 244.748242][ T4321] net_ratelimit: 3 callbacks suppressed [ 244.748260][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.787939][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.269768][ T7587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.281482][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.293581][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.768837][ T8506] device syzkaller0 entered promiscuous mode [ 246.829240][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.123051][ T8522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1552'. [ 247.150854][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1555'. [ 247.208603][ T8529] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1554'. [ 247.449676][ T8537] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1559'. [ 247.462280][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 247.789711][ T8547] device syzkaller0 entered promiscuous mode [ 247.873783][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.682870][ T8571] Bluetooth: MGMT ver 1.22 [ 248.802059][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 248.911042][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.315453][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.949870][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.278849][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 250.289727][ T8563] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1566'. [ 250.312795][ T8570] device geneve2 entered promiscuous mode [ 250.535317][ T8582] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1572'. [ 250.608817][ T8584] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1573'. [ 250.654258][ T8588] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 250.749222][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.922960][ T8602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.988496][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.710633][ T8633] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 251.814272][ T8633] device bond4 entered promiscuous mode [ 251.821146][ T8633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.028093][ T4336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.036758][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.044983][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.054186][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.603050][ T8671] device syzkaller0 entered promiscuous mode [ 252.644434][ T8671] __nla_validate_parse: 13 callbacks suppressed [ 252.644454][ T8671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1611'. [ 252.706960][ T8675] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1612'. [ 252.813093][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1613'. [ 252.892970][ T8683] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1615'. [ 252.931074][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 253.068019][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.495918][ T8707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1626'. [ 253.543415][ T8710] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1628'. [ 253.579699][ T8711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1627'. [ 253.792416][ T8720] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1631'. [ 253.817905][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 255.133664][ T8773] device syzkaller0 entered promiscuous mode [ 255.148248][ T4322] net_ratelimit: 49 callbacks suppressed [ 255.148266][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.162181][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.472210][ T8782] device syzkaller0 entered promiscuous mode [ 255.876885][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.189707][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.232852][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.183083][ T8815] __nla_validate_parse: 8 callbacks suppressed [ 258.183096][ T8815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1668'. [ 258.200703][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.268203][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.278939][ T4336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.294586][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.308356][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.468265][ T8826] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1674'. [ 258.479886][ T8827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1672'. [ 258.492696][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 258.503275][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 258.512379][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 258.685419][ T8834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1676'. [ 258.909299][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 259.227293][ T8856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1685'. [ 259.352112][ T8862] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1688'. [ 259.387840][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.348212][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.428165][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.112755][ T8930] device syzkaller0 entered promiscuous mode [ 261.133349][ T8930] tipc: Enabled bearer , priority 0 [ 261.162605][ T8928] tipc: Resetting bearer [ 261.202080][ T8928] tipc: Disabling bearer [ 261.229443][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.467682][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.663764][ T8954] device syzkaller0 entered promiscuous mode [ 262.507798][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.225236][ T9013] __nla_validate_parse: 17 callbacks suppressed [ 263.225256][ T9013] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1754'. [ 263.548124][ T7587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.556381][ T7587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.566044][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.575132][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.859350][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1761'. [ 264.043694][ T9040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1763'. [ 264.139927][ T8933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.267930][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.384199][ T9048] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1767'. [ 264.873509][ T9067] device syzkaller0 entered promiscuous mode [ 264.960240][ T9067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1774'. [ 265.399836][ T9092] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1782'. [ 265.628954][ T9100] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1788'. [ 265.709090][ T26] net_ratelimit: 51 callbacks suppressed [ 265.709109][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.992976][ T9119] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1793'. [ 266.003149][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 266.747991][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.317842][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.788183][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.901540][ T9186] device syzkaller0 entered promiscuous mode [ 268.827840][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.910219][ T9114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.318310][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.333894][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.343155][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.816657][ T9237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.833394][ T9237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.854232][ T9235] tipc: Enabling of bearer rejected, already enabled [ 269.948415][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.960399][ T9237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.981660][ T9237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.046560][ T9247] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 270.066059][ T9247] device bond2 entered promiscuous mode [ 270.072456][ T9247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.214226][ T9237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.225057][ T9237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.246361][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'. [ 270.272636][ T9249] bond2: (slave bridge4): making interface the new active one [ 270.285216][ T9249] device bridge4 entered promiscuous mode [ 270.302410][ T9249] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 270.323030][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 270.472312][ T9237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.483157][ T9237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.522568][ T9262] binder: 9257:9262 ioctl c0306201 0 returned -14 [ 270.617025][ T9237] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.627073][ T9237] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.648629][ T9237] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.656893][ T9237] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.680607][ T9237] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.689376][ T9237] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.706986][ T9237] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.715651][ T9237] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.493118][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.471904][ T9308] binder: 9306:9308 ioctl c0306201 0 returned -14 [ 272.517942][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.774833][ T9239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.174772][ T9322] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 273.246307][ T9322] device bond3 entered promiscuous mode [ 273.276225][ T9322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.378665][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'. [ 273.388390][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.425020][ T9327] bond3: (slave bridge5): making interface the new active one [ 273.433225][ T9327] device bridge5 entered promiscuous mode [ 273.442218][ T9327] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 273.454510][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 273.547900][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.703544][ T9337] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1878'. [ 273.923206][ T9351] device syzkaller0 entered promiscuous mode [ 274.165258][ T9361] binder: 9357:9361 ioctl c0306201 0 returned -14 [ 274.394839][ T9371] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1892'. [ 274.410727][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 274.594421][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.036877][ T9393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1902'. [ 275.150707][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1904'. [ 275.239733][ T9401] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1906'. [ 275.249716][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 275.588788][ T9416] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 275.610202][ T9416] device bond1 entered promiscuous mode [ 275.616069][ T9416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.633281][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1913'. [ 275.642885][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.662809][ T9416] bond1: (slave bridge1): making interface the new active one [ 275.673029][ T9416] device bridge1 entered promiscuous mode [ 275.681577][ T9416] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 275.691104][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 275.895252][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1916'. [ 276.392527][ T9429] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1918'. [ 276.401958][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 276.428086][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.528236][ T9433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1920'. [ 276.667893][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.680888][ T9339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.194765][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1927'. [ 277.245097][ T9458] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1929'. [ 277.254683][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 277.453887][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1931'. [ 277.618723][ T9472] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.639234][ T9472] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.708099][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.726909][ T9472] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.738097][ T9472] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.822719][ T9472] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.874211][ T9472] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.926068][ T9487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.934693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.949988][ T9472] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.974897][ T9472] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.134870][ T9472] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.158009][ T9472] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.201049][ T9472] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.218147][ T9472] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.245262][ T9472] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.260393][ T9472] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.292560][ T9472] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.326161][ T9472] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.761296][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.302125][ T9534] TC_ACT_REPEAT abuse ? [ 279.467841][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.547766][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.664536][ T9550] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 279.710318][ T9550] device bond4 entered promiscuous mode [ 279.739025][ T9550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.784019][ T9550] bond4: (slave bridge6): making interface the new active one [ 279.792196][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.802718][ T9550] device bridge6 entered promiscuous mode [ 279.812580][ T9550] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 279.822394][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 279.942782][ T9559] device syzkaller0 entered promiscuous mode [ 280.016975][ T9560] TC_ACT_REPEAT abuse ? [ 280.451754][ T9583] __nla_validate_parse: 12 callbacks suppressed [ 280.451777][ T9583] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1985'. [ 280.477640][ T9583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1985'. [ 280.586811][ T9587] device syzkaller0 entered promiscuous mode [ 280.704534][ T9476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.747908][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1989'. [ 281.671555][ T9622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.697615][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2003'. [ 281.867777][ T4321] net_ratelimit: 2 callbacks suppressed [ 281.867798][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.890051][ T9622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.046623][ T9622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.215677][ T9622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.451471][ T9622] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.489008][ T9622] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.509859][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.522251][ T9622] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.563182][ T9622] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.886241][ T9655] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2013'. [ 282.896751][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 282.916768][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.105666][ T9661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2015'. [ 283.239115][ T9663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2016'. [ 283.575905][ T9679] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2024'. [ 283.597801][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 283.948436][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.641303][ T9625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.987972][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.185564][ T9729] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 285.236385][ T9729] device bond5 entered promiscuous mode [ 285.242808][ T9729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.254697][ T9730] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.264958][ T9730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.323636][ T9730] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.355324][ T9730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.439268][ T9729] bond5: (slave bridge6): making interface the new active one [ 285.449329][ T9729] device bridge6 entered promiscuous mode [ 285.462235][ T9729] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 285.472697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 285.491886][ T9730] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.502906][ T9730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.547767][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.573852][ T9730] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.584899][ T9730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.678467][ T9730] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.687050][ T9730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.707855][ T9730] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.716330][ T9730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.736260][ T9730] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.744835][ T9730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.764415][ T9730] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.773339][ T9730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.871601][ T9752] __nla_validate_parse: 5 callbacks suppressed [ 285.871613][ T9752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2054'. [ 285.988899][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2056'. [ 286.027902][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.264448][ T9769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.273793][ T9769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.283193][ T9769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.918487][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2068'. [ 287.073839][ T4343] net_ratelimit: 6 callbacks suppressed [ 287.073858][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.039623][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.048291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.113223][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.123513][ T9810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.132044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.364699][ T9736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.587914][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.609704][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2080'. [ 288.666740][ T9822] TC_ACT_REPEAT abuse ? [ 289.148203][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.156757][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.449624][ T9849] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 289.504148][ T9849] device bond6 entered promiscuous mode [ 289.518059][ T9849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.539314][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2092'. [ 289.646112][ T9849] bond6: (slave bridge7): making interface the new active one [ 289.687540][ T9849] device bridge7 entered promiscuous mode [ 289.726907][ T9849] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 289.766397][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 289.963273][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2097'. [ 290.466017][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2107'. [ 290.732776][ T9899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2111'. [ 291.173010][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2119'. [ 291.356247][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2124'. [ 292.165735][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2132'. [ 292.268234][ T26] net_ratelimit: 5 callbacks suppressed [ 292.268252][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.312688][ T9957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.321164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.434799][ T9851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.515612][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2136'. [ 292.703416][ T9969] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 292.992719][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 293.192537][ T9994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.201243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.282396][ T9999] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2148'. [ 293.307797][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.316555][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 293.506891][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2152'. [ 293.917139][T10030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2158'. [ 294.347786][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.467847][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2165'. [ 294.669446][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.282075][T10087] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 295.302410][T10087] device bond7 entered promiscuous mode [ 295.308391][T10087] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.333997][T10087] bond7: (slave bridge8): making interface the new active one [ 295.341651][T10087] device bridge8 entered promiscuous mode [ 295.349216][T10087] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 295.358698][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 295.387994][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.938087][T10114] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 295.972408][T10114] device bond5 entered promiscuous mode [ 295.978503][T10114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.040221][T10114] bond5: (slave bridge6): making interface the new active one [ 296.057294][T10114] device bridge6 entered promiscuous mode [ 296.081712][T10114] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 296.101943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 296.516805][T10006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.216404][T10155] __nla_validate_parse: 8 callbacks suppressed [ 297.216423][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2203'. [ 297.378518][T10161] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2205'. [ 297.413351][T10161] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 297.467885][ T4343] net_ratelimit: 1 callbacks suppressed [ 297.467904][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.509381][T10161] device bond4 entered promiscuous mode [ 297.521392][T10161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.529907][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2205'. [ 297.595272][T10161] bond4: (slave bridge6): making interface the new active one [ 297.610410][T10161] device bridge6 entered promiscuous mode [ 297.622128][T10161] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 297.643888][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 297.707772][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.887697][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 298.045040][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 298.336386][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 298.426099][T10206] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2220'. [ 298.507916][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.747795][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.351165][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2226'. [ 299.547936][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.974313][T10245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2231'. [ 300.510920][T10172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.588185][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.758146][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.171613][T10272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2242'. [ 301.230592][T10276] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 301.304148][T10276] device bond8 entered promiscuous mode [ 301.328004][T10276] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.419450][T10276] bond8: (slave bridge9): making interface the new active one [ 301.460007][T10276] device bridge9 entered promiscuous mode [ 301.493714][T10276] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 301.536826][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 301.628076][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.861481][T10301] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 302.390220][T10326] __nla_validate_parse: 2 callbacks suppressed [ 302.390240][T10326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2261'. [ 302.667717][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.708270][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.797636][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.747867][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.113528][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.355157][T10370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2273'. [ 305.393898][T10370] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 305.546711][T10370] device bond5 entered promiscuous mode [ 305.593331][T10370] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.606441][T10375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2275'. [ 305.657955][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2273'. [ 305.682588][T10386] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 305.758916][T10376] bond5: (slave bridge7): making interface the new active one [ 305.766474][T10376] device bridge7 entered promiscuous mode [ 305.787728][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.818570][T10376] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 305.828875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 306.827742][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.835943][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.120740][T10430] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2292'. [ 307.301432][T10434] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2293'. [ 307.616005][T10449] netlink: 'syz.0.2300': attribute type 72 has an invalid length. [ 307.762804][T10458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.771352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.870237][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.048030][T10467] device syzkaller0 entered promiscuous mode [ 308.070313][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2308'. [ 308.351136][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.914707][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.871799][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.959467][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.444158][T10480] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2310'. [ 310.594952][T10492] device syzkaller0 entered promiscuous mode [ 310.862447][T10511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.870986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.989921][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.907881][ T4323] net_ratelimit: 1 callbacks suppressed [ 312.907898][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.068178][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.273108][T10536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2326'. [ 313.404805][T10538] device syzkaller0 entered promiscuous mode [ 313.626055][T10500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.107884][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.153421][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.949596][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.188182][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.246102][T10578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2338'. [ 316.271904][T10575] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 316.381031][ T4336] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 316.396501][T10575] device bond6 entered promiscuous mode [ 316.434748][T10575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.466964][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 316.528703][T10575] bond6: (slave bridge7): making interface the new active one [ 316.536248][T10575] device bridge7 entered promiscuous mode [ 316.544055][T10575] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 316.571276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 316.630908][T10597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2345'. [ 317.229496][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.255051][T10615] device syzkaller0 entered promiscuous mode [ 317.309581][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.316063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.324706][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.267934][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.987750][ T4323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.252277][T10580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.308063][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.347761][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.392421][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.038516][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.435477][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.479970][T10627] netlink: 'syz.2.2357': attribute type 1 has an invalid length. [ 322.500316][T10621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.530251][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 322.684871][T10641] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2358'. [ 323.190810][ T4336] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 323.467831][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.594475][T10679] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 323.618466][T10679] device bond9 entered promiscuous mode [ 323.624529][T10679] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.648786][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 323.671032][T10679] bond9: (slave bridge10): making interface the new active one [ 323.678837][T10679] device bridge10 entered promiscuous mode [ 323.687908][T10679] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 323.696904][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 323.809485][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2375'. [ 323.872918][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.883466][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.912337][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.922691][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.933754][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.942492][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.951585][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.960741][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.969679][T10687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.275767][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 324.289861][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 326.110205][T10661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.401257][T10715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.409259][T10715] IPv6: NLM_F_CREATE should be set when creating new route [ 326.667162][T10721] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 326.699355][T10721] device bond7 entered promiscuous mode [ 326.705319][T10721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.722361][T10724] device bridge11 entered promiscuous mode [ 326.853867][T10730] device syzkaller0 entered promiscuous mode [ 326.891365][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2391'. [ 326.916034][T10733] bond7: (slave bridge8): making interface the new active one [ 326.932884][T10733] device bridge8 entered promiscuous mode [ 326.943000][T10733] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 326.965177][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 328.679019][ T4327] net_ratelimit: 71 callbacks suppressed [ 328.679045][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.509090][T10755] TC_ACT_REPEAT abuse ? [ 329.543441][T10759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.550798][T10759] IPv6: NLM_F_CREATE should be set when creating new route [ 329.708047][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.759199][T10767] device bridge9 entered promiscuous mode [ 330.319085][T10785] device syzkaller0 entered promiscuous mode [ 330.749779][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.151044][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.791522][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.534014][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 332.589021][T10802] device bridge2 entered promiscuous mode [ 332.762897][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.827785][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.915871][T10817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2425'. [ 333.550042][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 333.791343][T10840] device bridge7 entered promiscuous mode [ 333.890021][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.008182][T10845] device syzkaller0 entered promiscuous mode [ 334.187807][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.291666][T10862] TC_ACT_REPEAT abuse ? [ 334.918032][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.962480][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.323995][T10859] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2441'. [ 336.553790][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 336.743985][T10882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2450'. [ 336.774310][T10884] device bridge12 entered promiscuous mode [ 336.930073][T10889] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 336.943407][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2454'. [ 336.965250][T10891] TC_ACT_REPEAT abuse ? [ 336.988257][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.229082][ T4322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.361778][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 337.598970][T10910] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 337.716209][T10910] device bond6 entered promiscuous mode [ 337.766549][T10910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.788386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.834727][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'. [ 337.861003][T10922] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 337.928974][T10921] bond6: (slave bridge8): making interface the new active one [ 337.936535][T10921] device bridge8 entered promiscuous mode [ 337.957209][T10921] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 337.971269][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 338.036593][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.590831][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 338.708051][T10947] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 339.070796][T10963] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2481'. [ 339.080091][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.542860][T10985] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2488'. [ 339.556871][T10984] TC_ACT_REPEAT abuse ? [ 339.786830][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 339.854452][T10997] TC_ACT_REPEAT abuse ? [ 340.117729][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.144584][T11002] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2495'. [ 340.276000][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.400543][T11006] device syzkaller0 entered promiscuous mode [ 340.655226][T11024] TC_ACT_REPEAT abuse ? [ 341.153871][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.187963][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.274319][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.923460][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.118852][T11037] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 343.134358][T11036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2506'. [ 343.160105][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 343.257703][T11044] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2510'. [ 343.293800][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2510'. [ 343.922686][T11070] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 344.006302][T11070] device bond10 entered promiscuous mode [ 344.016596][T11070] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.032155][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 344.051789][T11072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.089126][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2519'. [ 344.178465][T11087] bond10: (slave bridge13): making interface the new active one [ 344.217984][T11087] device bridge13 entered promiscuous mode [ 344.247945][T11087] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 344.270027][ T4321] net_ratelimit: 2 callbacks suppressed [ 344.270047][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.296594][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 344.319980][T11080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.345539][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 344.495496][T11091] device syzkaller0 entered promiscuous mode [ 344.615716][T11102] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2524'. [ 344.631152][T11102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2524'. [ 345.314504][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.347957][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.357804][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.007528][T11101] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2523'. [ 347.395022][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.477124][T11125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.522802][T11125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.570138][T11131] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 347.609953][T11131] device bond5 entered promiscuous mode [ 347.617564][T11131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.639257][T11130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.647792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.726311][T11131] bond5: (slave bridge8): making interface the new active one [ 347.734736][T11131] device bridge8 entered promiscuous mode [ 347.755936][T11131] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 347.770504][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 348.145590][T11154] __nla_validate_parse: 7 callbacks suppressed [ 348.145610][T11154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2541'. [ 348.427893][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.527299][T11168] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2548'. [ 348.558215][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2548'. [ 348.569523][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 348.589648][T11171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.606159][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 348.618839][T11171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.812495][T11181] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 348.840375][T11179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.858047][T11179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.868648][T11181] device bond8 entered promiscuous mode [ 348.874502][T11181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.992556][T11184] device syzkaller0 entered promiscuous mode [ 349.017164][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2553'. [ 349.392588][ T7] net_ratelimit: 5 callbacks suppressed [ 349.392608][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.477871][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.518785][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.238425][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 351.261800][T11190] bond8: (slave bridge10): making interface the new active one [ 351.269675][T11190] device bridge10 entered promiscuous mode [ 351.276647][T11190] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 351.296839][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 351.527794][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 351.548059][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.556659][T11204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.564069][T11204] IPv6: NLM_F_CREATE should be set when creating new route [ 351.643213][T11211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2560'. [ 351.693974][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 351.735129][T11213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.097233][T11229] device syzkaller0 entered promiscuous mode [ 352.427623][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.507788][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.591316][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.052560][T11257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.059931][T11257] IPv6: NLM_F_CREATE should be set when creating new route [ 353.097903][T11257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.157006][T11262] __nla_validate_parse: 6 callbacks suppressed [ 353.157026][T11262] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2581'. [ 353.191928][T11259] device syzkaller0 entered promiscuous mode [ 353.199804][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2581'. [ 353.627867][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.638864][T11283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2588'. [ 353.895584][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 353.909942][T11296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.944352][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 353.958182][T11296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.332821][T11311] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2597'. [ 354.380722][T11311] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 354.458743][T11311] device bond9 entered promiscuous mode [ 354.464813][T11311] 8021q: adding VLAN 0 to HW filter on device bond9 [ 354.530899][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 354.668168][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.682312][T11311] bond9: (slave bridge11): making interface the new active one [ 354.710897][T11311] device bridge11 entered promiscuous mode [ 354.722635][T11311] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 354.734581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 355.020293][T11332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.055978][T11332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.110138][T11333] bridge0: port 3(dummy0) entered blocking state [ 355.134647][T11333] bridge0: port 3(dummy0) entered disabled state [ 355.165333][T11333] device dummy0 entered promiscuous mode [ 355.193530][T11333] bridge0: port 3(dummy0) entered blocking state [ 355.200763][T11333] bridge0: port 3(dummy0) entered forwarding state [ 355.264633][T11345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2606'. [ 355.286877][T11343] device dummy0 left promiscuous mode [ 355.304343][T11343] bridge0: port 3(dummy0) entered disabled state [ 355.467750][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.710692][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.966482][T11367] device syzkaller0 entered promiscuous mode [ 356.370418][T11381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.413911][T11381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.747837][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.144439][T11401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2622'. [ 357.496601][T11412] device syzkaller0 entered promiscuous mode [ 357.629320][T11417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.640969][T11417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.787874][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.009131][T11432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.030150][T11432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.073414][T11432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.112652][T11432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.150860][T11432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.442119][T11444] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2637'. [ 358.457780][T11442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2636'. [ 358.467399][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 359.119545][T11463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2642'. [ 359.156184][T11462] device syzkaller0 entered promiscuous mode [ 359.185020][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'. [ 359.285860][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'. [ 359.565621][T11478] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2648'. [ 359.580980][T11479] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2646'. [ 359.592385][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 359.619427][T11479] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 359.821595][T11479] device bond6 entered promiscuous mode [ 359.848239][T11479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.867943][ T4327] net_ratelimit: 3505 callbacks suppressed [ 359.867961][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.888803][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 360.048153][T11492] bond6: (slave bridge9): making interface the new active one [ 360.067155][T11492] device bridge9 entered promiscuous mode [ 360.093502][T11492] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 360.128532][ T9990] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 360.913939][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.547674][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.958087][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.107957][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.987769][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.669815][T11537] __nla_validate_parse: 3 callbacks suppressed [ 363.669833][T11537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2661'. [ 363.751288][T11539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.759668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.772298][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 363.995008][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 364.028303][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.051740][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 364.192271][T11565] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 364.587714][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.068172][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.092705][T11591] [ 365.095106][T11591] ====================================================== [ 365.102159][T11591] WARNING: possible circular locking dependency detected [ 365.109227][T11591] syzkaller #0 Not tainted [ 365.113669][T11591] ------------------------------------------------------ [ 365.120732][T11591] syz.2.2674/11591 is trying to acquire lock: [ 365.126833][T11591] ffff88807c4bbd58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 365.136530][T11591] [ 365.136530][T11591] but task is already holding lock: [ 365.143930][T11591] ffff888073ccf430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 365.154855][T11591] [ 365.154855][T11591] which lock already depends on the new lock. [ 365.154855][T11591] [ 365.165303][T11591] [ 365.165303][T11591] the existing dependency chain (in reverse order) is: [ 365.174358][T11591] [ 365.174358][T11591] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 365.183096][T11591] down_write+0x36/0x60 [ 365.187805][T11591] process_measurement+0x3af/0x1c40 [ 365.193569][T11591] ima_file_mmap+0xe9/0x140 [ 365.198627][T11591] __se_sys_remap_file_pages+0x55a/0x7b0 [ 365.204811][T11591] do_syscall_64+0x4c/0xa0 [ 365.209786][T11591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.216234][T11591] [ 365.216234][T11591] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 365.223827][T11591] __lock_acquire+0x2d18/0x7c40 [ 365.229248][T11591] lock_acquire+0x1bb/0x4a0 [ 365.234304][T11591] down_read_killable+0x4c/0x340 [ 365.239879][T11591] mmap_read_lock_killable+0x1d/0x60 [ 365.245715][T11591] lock_mm_and_find_vma+0x2b1/0x2f0 [ 365.251462][T11591] do_user_addr_fault+0x2e8/0xb20 [ 365.257043][T11591] exc_page_fault+0x60/0x100 [ 365.262187][T11591] asm_exc_page_fault+0x22/0x30 [ 365.267601][T11591] fault_in_readable+0x13e/0x1f0 [ 365.273096][T11591] fault_in_iov_iter_readable+0xbf/0x2f0 [ 365.279304][T11591] generic_perform_write+0x1f1/0x5c0 [ 365.285154][T11591] __generic_file_write_iter+0x148/0x2a0 [ 365.291358][T11591] generic_file_write_iter+0xab/0x2e0 [ 365.297295][T11591] vfs_write+0x482/0x9a0 [ 365.302111][T11591] ksys_write+0x14d/0x260 [ 365.307004][T11591] do_syscall_64+0x4c/0xa0 [ 365.311975][T11591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.318509][T11591] [ 365.318509][T11591] other info that might help us debug this: [ 365.318509][T11591] [ 365.328765][T11591] Possible unsafe locking scenario: [ 365.328765][T11591] [ 365.336245][T11591] CPU0 CPU1 [ 365.341634][T11591] ---- ---- [ 365.347022][T11591] lock(&sb->s_type->i_mutex_key#13); [ 365.352512][T11591] lock(&mm->mmap_lock); [ 365.359384][T11591] lock(&sb->s_type->i_mutex_key#13); [ 365.367398][T11591] lock(&mm->mmap_lock); [ 365.371797][T11591] [ 365.371797][T11591] *** DEADLOCK *** [ 365.371797][T11591] [ 365.379964][T11591] 3 locks held by syz.2.2674/11591: [ 365.385177][T11591] #0: ffff88807b62ad68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 365.394457][T11591] #1: ffff88807deb8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 365.403582][T11591] #2: ffff888073ccf430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 365.414935][T11591] [ 365.414935][T11591] stack backtrace: [ 365.420860][T11591] CPU: 1 PID: 11591 Comm: syz.2.2674 Not tainted syzkaller #0 [ 365.428341][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.438435][T11591] Call Trace: [ 365.441736][T11591] [ 365.444692][T11591] dump_stack_lvl+0x188/0x24e [ 365.449409][T11591] ? load_image+0x410/0x410 [ 365.453935][T11591] ? show_regs_print_info+0x12/0x12 [ 365.459167][T11591] ? print_circular_bug+0x12b/0x1a0 [ 365.464430][T11591] check_noncircular+0x296/0x330 [ 365.469402][T11591] ? add_chain_block+0x9b0/0x9b0 [ 365.474368][T11591] ? lockdep_lock+0xf1/0x1f0 [ 365.478995][T11591] ? _find_first_zero_bit+0xd2/0x100 [ 365.484318][T11591] __lock_acquire+0x2d18/0x7c40 [ 365.489214][T11591] ? verify_lock_unused+0x140/0x140 [ 365.494448][T11591] ? verify_lock_unused+0x140/0x140 [ 365.499684][T11591] ? verify_lock_unused+0x140/0x140 [ 365.504922][T11591] lock_acquire+0x1bb/0x4a0 [ 365.509463][T11591] ? mmap_read_lock_killable+0x1d/0x60 [ 365.514962][T11591] ? read_lock_is_recursive+0x10/0x10 [ 365.520460][T11591] ? cmp_ex_search+0x1a/0x70 [ 365.525263][T11591] ? bsearch+0x86/0xb0 [ 365.529369][T11591] ? fault_in_readable+0x13e/0x1f0 [ 365.534515][T11591] ? search_extable+0x8c/0xd0 [ 365.539229][T11591] ? trim_init_extable+0x3b0/0x3b0 [ 365.544733][T11591] ? mmap_read_lock_killable+0x1d/0x60 [ 365.550259][T11591] down_read_killable+0x4c/0x340 [ 365.555231][T11591] ? mmap_read_lock_killable+0x1d/0x60 [ 365.560723][T11591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 365.566789][T11591] mmap_read_lock_killable+0x1d/0x60 [ 365.572109][T11591] lock_mm_and_find_vma+0x2b1/0x2f0 [ 365.577335][T11591] do_user_addr_fault+0x2e8/0xb20 [ 365.582397][T11591] ? _raw_spin_unlock_irq+0x1f/0x40 [ 365.587624][T11591] ? lockdep_hardirqs_on+0x94/0x140 [ 365.592861][T11591] exc_page_fault+0x60/0x100 [ 365.597483][T11591] asm_exc_page_fault+0x22/0x30 [ 365.602378][T11591] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 365.608130][T11591] Code: 78 5a c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 5a c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a 5a [ 365.627766][T11591] RSP: 0018:ffffc9000d377ab0 EFLAGS: 00050287 [ 365.633860][T11591] RAX: ffffffff81bdc749 RBX: 0000000000001000 RCX: 0000000000080000 [ 365.641865][T11591] RDX: ffffc9000fa46000 RSI: 000000000007af70 RDI: 000000000007af71 [ 365.649877][T11591] RBP: 0000000000000000 R08: ffff888027190000 R09: 0000000000000002 [ 365.657882][T11591] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000482000 [ 365.666012][T11591] R13: dffffc0000000000 R14: 0000200000481000 R15: 0000200000481000 [ 365.674470][T11591] ? fault_in_readable+0x139/0x1f0 [ 365.679636][T11591] fault_in_iov_iter_readable+0xbf/0x2f0 [ 365.685305][T11591] generic_perform_write+0x1f1/0x5c0 [ 365.690641][T11591] ? generic_file_direct_write+0x330/0x330 [ 365.696488][T11591] ? __file_remove_privs+0x5f0/0x5f0 [ 365.701804][T11591] ? rwsem_write_trylock+0x135/0x1c0 [ 365.707121][T11591] ? clear_nonspinnable+0x60/0x60 [ 365.712178][T11591] ? generic_write_checks_count+0x363/0x440 [ 365.718105][T11591] __generic_file_write_iter+0x148/0x2a0 [ 365.723865][T11591] generic_file_write_iter+0xab/0x2e0 [ 365.729276][T11591] vfs_write+0x482/0x9a0 [ 365.733561][T11591] ? file_end_write+0x250/0x250 [ 365.738460][T11591] ? __fget_files+0x3fc/0x460 [ 365.743195][T11591] ? __fdget_pos+0x2ae/0x360 [ 365.747827][T11591] ? ksys_write+0x70/0x260 [ 365.752283][T11591] ksys_write+0x14d/0x260 [ 365.756655][T11591] ? __ia32_sys_read+0x80/0x80 [ 365.761458][T11591] ? lockdep_hardirqs_on+0x94/0x140 [ 365.766687][T11591] do_syscall_64+0x4c/0xa0 [ 365.771175][T11591] ? clear_bhb_loop+0x60/0xb0 [ 365.775885][T11591] ? clear_bhb_loop+0x60/0xb0 [ 365.780597][T11591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.786538][T11591] RIP: 0033:0x7f8ffa39de99 [ 365.791004][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.810648][T11591] RSP: 002b:00007f8ffb233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.819090][T11591] RAX: ffffffffffffffda RBX: 00007f8ffa626090 RCX: 00007f8ffa39de99 [ 365.827118][T11591] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 000000000000000b [ 365.835116][T11591] RBP: 00007f8ffa433eaf R08: 0000000000000000 R09: 0000000000000000 [ 365.843158][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.851173][T11591] R13: 00007f8ffa626128 R14: 00007f8ffa626090 R15: 00007ffc7a3d5a68 [ 365.859196][T11591] [ 366.107714][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.137436][T11583] device syzkaller0 left promiscuous mode [ 367.143698][T11583] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 367.157880][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.206324][T11593] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 367.227983][T11593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 367.255972][T11593] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.627685][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.198220][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.508428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.228029][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.267652][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.667660][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.307621][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.707837][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.347914][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.387692][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.628548][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.428097][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog