last executing test programs: 11m2.9983326s ago: executing program 1 (id=192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) fadvise64(r0, 0x18, 0x0, 0x4) 11m1.878868285s ago: executing program 1 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000095}, 0x4009) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m1.40394687s ago: executing program 1 (id=198): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x48000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) 11m0.13833968s ago: executing program 1 (id=201): socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x220, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}, {0xb}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "8842", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x0, 0x7]}, {0x0, [0x0, 0x0, 0x0, 0x5, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 10m57.202127259s ago: executing program 1 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) 10m56.080432984s ago: executing program 1 (id=209): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) creat(&(0x7f0000000240)='./bus\x00', 0x4a) ioctl$sock_proto_private(0xffffffffffffffff, 0x8937, 0x0) 10m40.649731017s ago: executing program 32 (id=209): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) creat(&(0x7f0000000240)='./bus\x00', 0x4a) ioctl$sock_proto_private(0xffffffffffffffff, 0x8937, 0x0) 9m56.889995082s ago: executing program 4 (id=392): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x400}, 0x8884) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) shutdown(r0, 0x2) 9m53.908348553s ago: executing program 4 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 9m53.498076065s ago: executing program 4 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 9m51.27792647s ago: executing program 4 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 9m50.115901913s ago: executing program 4 (id=416): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup3(r0, r0, 0x80000) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 9m46.849931581s ago: executing program 4 (id=424): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m45.527465825s ago: executing program 33 (id=424): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m58.418161091s ago: executing program 3 (id=1273): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 3m57.524068025s ago: executing program 3 (id=1274): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x80000000, 0x0) ptrace(0x10, r3) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0xa000000c, 0x0) 3m57.093921383s ago: executing program 3 (id=1278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x400042c9, 0x10100, 0x4, 0x3aa}, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3m3.237249637s ago: executing program 3 (id=1278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x400042c9, 0x10100, 0x4, 0x3aa}, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m43.442041893s ago: executing program 6 (id=1415): syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) syz_init_net_socket$bt_sco(0x9, 0x5, 0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m43.02581227s ago: executing program 6 (id=1417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2m35.974026714s ago: executing program 6 (id=1431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x36, 0x301, 0x270bd27, 0x25dfdbfc, {0x7}, [@generic="c34ed81a14"]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x97, 0xfff0bdc1, 0x2000, 0x0, 0x0, 0xfffffffffffffdfd, 0x4, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x774, 0x0, 0x0, 0x0, 0x20000}) 2m34.89715079s ago: executing program 6 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2m33.897774032s ago: executing program 6 (id=1435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) 2m32.88211304s ago: executing program 6 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() 2m17.993045943s ago: executing program 34 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() 2m13.215264116s ago: executing program 3 (id=1278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x400042c9, 0x10100, 0x4, 0x3aa}, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m2.433466172s ago: executing program 0 (id=1497): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x4, 'lblcr\x00', 0x0, 0xfffffff8}, 0x2c) mprotect(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x1000000) 2m1.694437522s ago: executing program 0 (id=1499): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 2m0.342402314s ago: executing program 0 (id=1510): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) 1m59.291325302s ago: executing program 0 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89e0, &(0x7f0000000180)) 1m58.140106584s ago: executing program 0 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r3}, 0x38) 1m57.068768338s ago: executing program 0 (id=1507): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m41.493996859s ago: executing program 35 (id=1507): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m14.522753963s ago: executing program 3 (id=1278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x400042c9, 0x10100, 0x4, 0x3aa}, 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10.915668381s ago: executing program 5 (id=1699): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) 10.014145774s ago: executing program 7 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 8.761494432s ago: executing program 7 (id=1703): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 7.989856917s ago: executing program 5 (id=1704): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xec801, 0x9a) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001}]) dup(r0) dup3(r1, r4, 0x6700000000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) 7.78050292s ago: executing program 2 (id=1705): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x80000000, {0x1, 0x0, 0x2d8000000000, 0x5, 0x81, 0x3, {0x0, 0xfffffffffffff0a1, 0x20, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xfff, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x2000085e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.780051903s ago: executing program 7 (id=1706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 7.544087012s ago: executing program 2 (id=1707): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f00000002c0)) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x14, 0x0, 0x9, 0xb, 0x0, 0x70bd2a, 0xfffffffe, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x10000, 0x4, 0x0, 0x0, 0x2, 0x40000001}, @sadb_lifetime={0x4, 0x4, 0x6021, 0xfff, 0x8, 0x8}]}, 0x58}}, 0x14) 6.511186372s ago: executing program 2 (id=1708): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000068bde4dfa22670adb212fd15d38bb7fe231ab1ce9ef3955733e5d6f20bf07047b4d45368f47550c39896c094c898dce8befe9458617ee3e681", @ANYRES32, @ANYBLOB="fdffff7f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff0300"/25], 0x50) socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unshare(0x2040600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 6.422320209s ago: executing program 5 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_usb_connect$uac1(0x2, 0xa6, 0x0, 0x0) 6.332115181s ago: executing program 2 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x8) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 5.18358456s ago: executing program 7 (id=1711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4008af10, &(0x7f0000000080)) 3.579974813s ago: executing program 7 (id=1712): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="c0", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf25060000000800050009000000050053000100000005005300010000000a00180003030303030300000a00180003030303030300000500530000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x5e) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 3.241075271s ago: executing program 5 (id=1713): creat(0x0, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x7) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.084326201s ago: executing program 2 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 1.211325799s ago: executing program 2 (id=1715): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x2000000000000006, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0x8, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x5, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0x935, 0x7, 0x5, 0x20, 0x3, 0x9, 0x6, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1fb, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) userfaultfd(0x80001) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1.151151161s ago: executing program 7 (id=1716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/157) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = openat$audio1(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.088611399s ago: executing program 5 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 5 (id=1718): syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f000066f000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, r4, 0x800, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af51917cf4d2ea1846a4fed02a654a5b1de7f1939e8abff005597c8ef039a5be42200", 0x40000000000038}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x800, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af51917cf4d2ea1846a4fed02a654a5b1de7f1939e8abff005597c8ef039a5be42200", 0x40000000000038}, 0x60) kernel console output (not intermixed with test programs): p6gretap2 xmit: Local address not yet configured! [ 407.065632][ T5948] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 407.328746][ T9152] syz.3.814: attempt to access beyond end of device [ 407.328746][ T9152] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 407.343005][ T9152] hpfs: hpfs_map_sector(): read error [ 408.391777][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 408.437611][ T5948] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 408.457697][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.484620][ T5948] usb 7-1: Product: syz [ 408.506434][ T5948] usb 7-1: Manufacturer: syz [ 408.538589][ T9164] trusted_key: encrypted_key: insufficient parameters specified [ 408.554626][ T5948] usb 7-1: SerialNumber: syz [ 408.731405][ T5948] usb 7-1: config 0 descriptor?? [ 409.014726][ T5948] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.239718][ T9176] binder: 9175:9176 ioctl c0306201 2000000003c0 returned -14 [ 409.249039][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.321246][ T9169] syzkaller0: entered promiscuous mode [ 409.326930][ T9169] syzkaller0: entered allmulticast mode [ 409.520658][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.679369][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 409.692966][ T47] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 409.726012][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.737568][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.785241][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.819067][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.881929][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.894722][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.303597][ T47] usb 4-1: GET_CAPABILITIES returned 0 [ 410.309740][ T47] usbtmc 4-1:16.0: can't read capabilities [ 410.361382][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 410.528009][ T5948] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 410.562783][ T5948] usb 7-1: USB disconnect, device number 3 [ 410.628098][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.645847][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.775404][ T5948] usb 4-1: USB disconnect, device number 4 [ 410.782225][ T9180] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 410.803510][ T9198] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 411.493918][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.447465][ T9214] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 412.717649][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.956967][ T9189] tipc: Enabled bearer , priority 0 [ 412.975635][ T9191] tipc: Disabling bearer [ 412.985152][ T9217] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 413.036575][ T9218] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 413.191841][ T30] audit: type=1326 audit(1747970389.718:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9215 comm="syz.3.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x0 [ 413.289438][ T9225] trusted_key: encrypted_key: insufficient parameters specified [ 414.179074][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 414.423967][ T9237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.097147][ T5948] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 416.289359][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 416.520160][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.656757][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.822559][ T5948] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 416.882866][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.938625][ T5948] usb 3-1: SerialNumber: syz [ 416.998761][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 418.372990][ T5948] usb 3-1: 0:2 : does not exist [ 418.474938][ T5948] usb 3-1: USB disconnect, device number 6 [ 418.612212][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 418.630840][ T30] audit: type=1800 audit(1747970395.108:14): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.851" name="/" dev="9p" ino=2 res=0 errno=0 [ 418.660680][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.869094][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.568910][ T9309] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 422.568910][ T9309] program syz.3.862 not setting count and/or reply_len properly [ 423.234238][ T9320] netlink: 'syz.3.866': attribute type 12 has an invalid length. [ 423.270799][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.098884][ T5885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 424.269931][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 424.281747][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 424.282883][ T9333] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 424.295310][ T5885] usb 6-1: config 7 has an invalid interface number: 87 but max is 0 [ 424.314798][ T5885] usb 6-1: config 7 has no interface number 0 [ 424.321230][ T5885] usb 6-1: config 7 interface 87 has no altsetting 0 [ 424.330095][ T5885] usb 6-1: New USB device found, idVendor=12d1, idProduct=796e, bcdDevice=25.c0 [ 424.331388][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.868'. [ 424.340612][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.356901][ T5885] usb 6-1: Product: syz [ 424.363136][ T5885] usb 6-1: Manufacturer: syz [ 424.367771][ T5885] usb 6-1: SerialNumber: syz [ 424.458881][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.538685][ T5948] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 424.614890][ T5885] hub 6-1:7.87: bad descriptor, ignoring hub [ 424.621002][ T5885] hub 6-1:7.87: probe with driver hub failed with error -5 [ 424.629382][ T5885] option 6-1:7.87: GSM modem (1-port) converter detected [ 424.667741][ T5885] usb 6-1: USB disconnect, device number 5 [ 424.677637][ T5885] option 6-1:7.87: device disconnected [ 425.241228][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 425.248018][ T5948] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 425.256300][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.266980][ T5948] usb 1-1: config 0 has no interface number 0 [ 425.273956][ T5948] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 425.285633][ T5948] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 425.296985][ T5948] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 425.312927][ T5948] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 425.348110][ T5948] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 425.458670][ T5948] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 425.468172][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.517060][ T5948] usb 1-1: config 0 descriptor?? [ 425.526751][ T9331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 425.535082][ T9331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 425.543768][ T30] audit: type=1800 audit(1747970402.068:15): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.874" name="/" dev="9p" ino=2 res=0 errno=0 [ 425.600351][ T5948] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.642002][ T9347] Bluetooth: MGMT ver 1.23 [ 425.660832][ T9342] netfs: Couldn't get user pages (rc=-14) [ 425.837031][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 426.164554][ T5948] usb 1-1: USB disconnect, device number 5 [ 426.768689][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 426.971089][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 426.994808][ T5948] usb 3-1: config 0 has no interfaces? [ 427.142803][ T5948] usb 3-1: config 0 has no interfaces? [ 427.149353][ T5948] usb 3-1: config 0 has no interfaces? [ 427.155769][ T5948] usb 3-1: config 0 has no interfaces? [ 427.222421][ T5948] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 427.928616][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.069417][ T5948] usb 3-1: config 0 descriptor?? [ 428.211707][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.221183][ T9373] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 428.304239][ T9373] tipc: Started in network mode [ 428.309760][ T9373] tipc: Node identity 7f000001, cluster identity 4711 [ 428.319455][ T9373] tipc: Enabled bearer , priority 10 [ 429.448749][ T5885] tipc: Node number set to 2130706433 [ 430.099142][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 430.921540][ T59] usb 3-1: USB disconnect, device number 7 [ 431.965186][ T5948] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 432.024627][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 432.813259][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.979105][ T5883] IPVS: starting estimator thread 0... [ 432.984801][ T5948] usb 6-1: config 0 has no interfaces? [ 433.015637][ T5948] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 433.076512][ T30] audit: type=1326 audit(1747970409.598:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 433.099156][ T9401] IPVS: using max 28 ests per chain, 67200 per kthread [ 433.187692][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.196461][ T5948] usb 6-1: Product: syz [ 433.203710][ T5948] usb 6-1: Manufacturer: syz [ 433.208320][ T5948] usb 6-1: SerialNumber: syz [ 433.229221][ T5948] usb 6-1: config 0 descriptor?? [ 433.256690][ T30] audit: type=1326 audit(1747970409.598:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 433.858733][ T30] audit: type=1326 audit(1747970409.598:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 433.880957][ T30] audit: type=1326 audit(1747970409.598:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 433.902403][ T30] audit: type=1326 audit(1747970409.598:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.018701][ T30] audit: type=1326 audit(1747970409.598:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.053583][ T30] audit: type=1326 audit(1747970409.598:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.113549][ T30] audit: type=1326 audit(1747970409.598:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.154644][ T5887] usb 6-1: USB disconnect, device number 6 [ 434.194378][ T30] audit: type=1326 audit(1747970409.598:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.233739][ T30] audit: type=1326 audit(1747970409.598:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277538e969 code=0x7ffc0000 [ 434.467197][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 434.494227][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 434.892254][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 434.906464][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.953226][ T10] usb 1-1: config 0 descriptor?? [ 435.065841][ T9426] binder: BINDER_SET_CONTEXT_MGR already set [ 435.090581][ T9426] binder: 9425:9426 ioctl 4018620d 200000000040 returned -16 [ 435.122229][ T9426] binder: 9425:9426 ioctl c0306201 200000001d40 returned -11 [ 435.169643][ T10] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 435.213316][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 436.206848][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 436.445899][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 436.703478][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 436.710765][ T10] [drm] Initialized udl on minor 2 [ 436.718422][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 436.771410][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 436.844312][ T5916] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 436.875955][ T10] usb 1-1: USB disconnect, device number 6 [ 436.905650][ T5916] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 436.936930][ T5916] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 437.155006][ T9448] trusted_key: encrypted_key: insufficient parameters specified [ 437.516760][ T9451] xt_hashlimit: size too large, truncated to 1048576 [ 437.890700][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.045192][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.051743][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.333372][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.009053][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 443.585834][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 443.607380][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 443.632132][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 444.702181][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.730359][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.738640][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.748392][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.756334][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.764391][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.778655][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.788956][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.796720][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.804683][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.812524][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.820604][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.828330][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.838646][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.848335][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.856489][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.942673][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 445.991380][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.031895][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.072539][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.081578][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.194476][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.369546][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.381092][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.391525][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.405141][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.416128][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.436865][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.476355][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.500605][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.517236][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.531160][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.541825][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.551225][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.561399][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.607881][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.642975][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.704786][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.957426][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.989737][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 446.997531][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 447.090609][ T5885] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.382480][ T9510] fido_id[9510]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 447.524069][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.048809][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 450.792445][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 450.910402][ T9544] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 450.910402][ T9544] program syz.0.929 not setting count and/or reply_len properly [ 451.992269][ T9561] sctp: [Deprecated]: syz.6.935 (pid 9561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.992269][ T9561] Use struct sctp_sack_info instead [ 453.939076][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.632429][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.235862][ T9595] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 457.235862][ T9595] program syz.5.945 not setting count and/or reply_len properly [ 457.486746][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 457.684629][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 460.367705][ T9609] 9pnet_fd: Insufficient options for proto=fd [ 460.376486][ T5827] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 460.829955][ T5948] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 461.358485][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 461.818448][ T5948] usb 7-1: Using ep0 maxpacket: 32 [ 461.832927][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 462.386506][ T5948] usb 7-1: config 253 has an invalid interface number: 202 but max is 0 [ 462.399287][ T5948] usb 7-1: config 253 has no interface number 0 [ 463.571574][ T5948] usb 7-1: string descriptor 0 read error: -71 [ 463.577937][ T5948] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 463.589386][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 463.665475][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.695454][ T9640] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 463.728718][ T5948] usb 7-1: can't set config #253, error -71 [ 463.755740][ T9642] capability: warning: `syz.0.957' uses 32-bit capabilities (legacy support in use) [ 463.769248][ T5948] usb 7-1: USB disconnect, device number 4 [ 463.837568][ T9645] netlink: 'syz.6.960': attribute type 1 has an invalid length. [ 463.857283][ T9640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.874498][ T9647] sch_fq: defrate 2048 ignored. [ 463.902256][ T9648] vlan3: entered promiscuous mode [ 463.907419][ T9648] bond3: entered promiscuous mode [ 463.914274][ T9648] vlan3: entered allmulticast mode [ 463.926711][ T9648] bond3: entered allmulticast mode [ 463.986817][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.960'. [ 463.995859][ T9645] bond1: entered promiscuous mode [ 463.995911][ T9645] bond1: entered allmulticast mode [ 464.011530][ T9640] bond3: (slave gretap1): making interface the new active one [ 464.019201][ T9640] gretap1: entered promiscuous mode [ 464.024596][ T9640] gretap1: entered allmulticast mode [ 464.033549][ T9640] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 464.047320][ T9640] syz.2.959 (9640) used greatest stack depth: 19112 bytes left [ 464.055216][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 464.472267][ T10] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 465.145433][ T10] usb 1-1: config 0 has no interface number 0 [ 465.155569][ T10] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 465.167418][ T10] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 465.176524][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.185685][ T9649] geneve2: entered allmulticast mode [ 465.188231][ T10] usb 1-1: config 0 descriptor?? [ 465.197347][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 465.206003][ T10] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 465.214621][ T10] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 465.247047][ T9649] bond1: (slave geneve2): making interface the new active one [ 465.261567][ T9649] geneve2: entered promiscuous mode [ 465.315433][ T9649] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 465.406273][ T9655] bond1: left promiscuous mode [ 465.423519][ T59] usb 1-1: USB disconnect, device number 7 [ 465.456160][ T9655] geneve2: left promiscuous mode [ 465.491520][ T9655] bond1: left allmulticast mode [ 465.530316][ T9655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.386000][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 466.402721][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 466.402736][ T30] audit: type=1326 audit(1747970442.918:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 466.622377][ T30] audit: type=1326 audit(1747970442.918:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 466.647612][ T30] audit: type=1326 audit(1747970442.918:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 466.697350][ T30] audit: type=1326 audit(1747970442.918:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.305402][ T30] audit: type=1326 audit(1747970442.918:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.370036][ T30] audit: type=1326 audit(1747970442.918:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.439351][ T30] audit: type=1326 audit(1747970442.998:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.540286][ T30] audit: type=1326 audit(1747970442.998:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.699922][ T30] audit: type=1326 audit(1747970443.198:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 467.719064][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 467.788647][ T30] audit: type=1326 audit(1747970443.198:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9665 comm="syz.5.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 471.628626][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 471.628649][ T30] audit: type=1326 audit(1747970447.450:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9698 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f656db8e969 code=0x7ffc0000 [ 471.684080][ T30] audit: type=1326 audit(1747970447.510:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9698 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656db8e969 code=0x7ffc0000 [ 471.735745][ T30] audit: type=1326 audit(1747970447.550:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9698 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656db8e969 code=0x7ffc0000 [ 471.799215][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 471.822269][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.979'. [ 471.824404][ T30] audit: type=1326 audit(1747970447.560:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9698 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f656db8e969 code=0x7ffc0000 [ 471.824464][ T30] audit: type=1326 audit(1747970447.560:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9698 comm="syz.6.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656db8e969 code=0x7ffc0000 [ 473.311635][ T9725] ======================================================= [ 473.311635][ T9725] WARNING: The mand mount option has been deprecated and [ 473.311635][ T9725] and is ignored by this kernel. Remove the mand [ 473.311635][ T9725] option from the mount to silence this warning. [ 473.311635][ T9725] ======================================================= [ 473.849914][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 475.337782][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 478.259823][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 480.578905][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 480.998803][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 481.148643][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 481.309153][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 481.604066][ T10] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 481.614373][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.622931][ T10] usb 1-1: Product: syz [ 481.627273][ T10] usb 1-1: Manufacturer: syz [ 481.633005][ T10] usb 1-1: SerialNumber: syz [ 481.644164][ T10] usb 1-1: config 0 descriptor?? [ 481.930253][ T10] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 482.705484][ T5887] usb 1-1: USB disconnect, device number 8 [ 482.817539][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 482.982439][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 482.991716][ T9812] netlink: 'syz.2.1005': attribute type 5 has an invalid length. [ 483.001450][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 483.077750][ T9812] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 483.087429][ T9812] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 483.098128][ T9812] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 483.155384][ T9812] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 483.194354][ T9812] geneve3: entered promiscuous mode [ 483.212842][ T9812] geneve3: entered allmulticast mode [ 485.496990][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.700026][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.846100][ T9855] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.855534][ T9855] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.864467][ T9855] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.873576][ T9855] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.222918][ T9855] : (slave vxlan0): Enslaving as an active interface with an up link [ 489.591920][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 489.959871][ T30] audit: type=1326 audit(1747970465.780:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.0.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9170b8e969 code=0x0 [ 491.899859][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 492.592076][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 492.879552][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 494.070804][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 495.542369][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 495.633331][ T9923] netlink: 'syz.5.1039': attribute type 10 has an invalid length. [ 495.761520][ T9923] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 496.171892][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.213072][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.739540][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 498.016409][ T9950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 501.568673][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 501.582409][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.589387][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.706244][ T9981] syz.0.1052 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 503.218384][ T5887] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 503.923357][ T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 504.072609][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 504.126356][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 504.148832][ T47] usb 7-1: config 0 has an invalid interface number: 32 but max is 0 [ 504.184514][ T47] usb 7-1: config 0 has no interface number 0 [ 504.194871][ T5887] usb 1-1: can't read configurations, error -71 [ 504.615794][ T47] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.828701][ T47] usb 7-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.583218][ T47] usb 7-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 505.594745][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.610679][ T47] usb 7-1: config 0 descriptor?? [ 506.046831][ T47] hid (null): unknown global tag 0xe [ 506.098388][ T47] logitech-djreceiver 0003:046D:C71B.0005: unknown global tag 0xe [ 506.308943][ T47] logitech-djreceiver 0003:046D:C71B.0005: item 0 2 1 14 parsing failed [ 506.374274][T10000] No such timeout policy "syz1" [ 506.466228][ T47] logitech-djreceiver 0003:046D:C71B.0005: logi_dj_probe: parse failed [ 506.489974][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 507.026477][ T47] logitech-djreceiver 0003:046D:C71B.0005: probe with driver logitech-djreceiver failed with error -22 [ 507.063779][ T47] usb 7-1: USB disconnect, device number 5 [ 509.281966][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 510.799464][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 512.749045][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 516.049399][ T30] audit: type=1326 audit(1747970491.870:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10073 comm="syz.6.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f656db8e969 code=0x0 [ 516.851400][T10079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.054367][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 520.153097][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 520.303473][T10118] fuse: Unknown parameter 'QO V¢òÿ' [ 521.319068][ T5887] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 521.350284][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 521.610494][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 521.729247][ T5887] usb 4-1: config 0 has no interfaces? [ 521.764212][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 521.789280][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.797420][ T5887] usb 4-1: Product: syz [ 521.815762][ T5887] usb 4-1: Manufacturer: syz [ 521.844198][ T5887] usb 4-1: SerialNumber: syz [ 521.854556][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1095'. [ 521.885097][ T5887] usb 4-1: config 0 descriptor?? [ 522.145294][ T47] usb 4-1: USB disconnect, device number 5 [ 522.295436][ T3451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 523.358851][ T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 523.679977][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.726297][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 523.761715][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.859590][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 523.895716][ T47] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.337000][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.382527][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.430390][ T47] usb 4-1: Product: syz [ 524.449285][ T47] usb 4-1: Manufacturer: syz [ 524.465000][ T47] usb 4-1: SerialNumber: syz [ 524.502973][ T47] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 524.515773][ T47] cdc_ncm 4-1:1.0: bind() failure [ 524.771503][ T47] usb 4-1: USB disconnect, device number 6 [ 524.984937][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 525.164479][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.198134][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.234092][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.478744][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.563576][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.573091][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.585222][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.614780][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.423089][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 527.459965][ T5827] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 528.425182][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.433378][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.964578][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 530.430028][ T1143] net_ratelimit: 5 callbacks suppressed [ 530.430065][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.825656][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.575103][ T5827] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 531.583937][ T5827] Bluetooth: hci2: Injecting HCI hardware error event [ 531.591884][ T5827] Bluetooth: hci2: hardware error 0x00 [ 531.603100][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.818999][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.843779][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.147443][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.178615][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.208956][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.227930][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.270183][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.657825][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 534.314302][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 535.561984][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 536.091495][ T5883] net_ratelimit: 7 callbacks suppressed [ 536.091576][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.191192][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.502349][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.189078][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 537.320566][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.684502][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.014625][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.516257][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.536408][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.548827][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.660213][T10249] netlink: 'syz.6.1128': attribute type 12 has an invalid length. [ 538.820265][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.182961][T10259] netfs: Couldn't get user pages (rc=-14) [ 539.200596][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 539.208466][ T5916] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 539.368744][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 539.394287][ T5916] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 539.428559][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.476452][ T5916] usb 4-1: config 0 has no interface number 0 [ 539.510161][ T5916] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 539.519499][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.562575][ T5916] usb 4-1: Product: syz [ 539.584737][ T5916] usb 4-1: Manufacturer: syz [ 539.590754][ T5916] usb 4-1: SerialNumber: syz [ 539.629499][ T5916] usb 4-1: config 0 descriptor?? [ 539.710584][ T5916] asix 4-1:0.251: probe with driver asix failed with error -22 [ 539.879160][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1134'. [ 540.211810][ T59] usb 4-1: USB disconnect, device number 7 [ 541.170026][ T59] net_ratelimit: 6 callbacks suppressed [ 541.170045][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.188785][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 541.666914][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.600423][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.751516][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.795654][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 543.868872][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.983745][T10297] mac80211_hwsim hwsim15 è: renamed from wlan1 (while UP) [ 545.027644][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.455695][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.359363][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 546.578982][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.847093][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.076406][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.566827][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.605857][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.648232][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.818954][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 549.222012][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.286694][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.678986][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.718831][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 551.158964][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.699365][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.107390][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 552.404482][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.685247][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.601695][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.723918][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.753388][T10372] tty tty2: ldisc open failed (-12), clearing slot 1 [ 553.782344][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.815309][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 553.893994][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 553.946729][T10385] bridge_slave_1: left allmulticast mode [ 553.960425][T10385] bridge_slave_1: left promiscuous mode [ 553.966383][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.038983][T10387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.048109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.163979][T10385] bridge_slave_0: left allmulticast mode [ 554.191914][T10385] bridge_slave_0: left promiscuous mode [ 554.228155][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.494904][T10396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 555.619948][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.977141][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 556.604791][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.779268][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.779394][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.499798][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.014391][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 559.038180][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.029710][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.043038][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.549370][ T6219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.693631][T10440] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 560.804512][T10440] syz_tun: entered promiscuous mode [ 560.863130][T10440] : (slave syz_tun): Enslaving as an active interface with an up link [ 560.889569][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 561.107356][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.255399][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1185'. [ 562.119030][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.349656][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.641254][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.922566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.932740][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.933081][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.947324][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.955021][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 563.080136][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.165197][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.222666][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.527429][T10482] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 564.542738][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.743435][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.828837][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 567.557136][ T5948] net_ratelimit: 1 callbacks suppressed [ 567.557156][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.766092][T10504] hub 1-0:1.0: USB hub found [ 567.806070][T10504] hub 1-0:1.0: 1 port detected [ 568.041186][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.060922][ T30] audit: type=1326 audit(1747970543.800:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 568.584912][ T30] audit: type=1326 audit(1747970543.800:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 568.713706][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.797178][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.858106][ T30] audit: type=1326 audit(1747970543.810:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 568.915372][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 568.995241][ T30] audit: type=1326 audit(1747970543.810:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.017171][ T30] audit: type=1326 audit(1747970543.810:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.040117][ T30] audit: type=1326 audit(1747970543.810:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.061943][ T30] audit: type=1326 audit(1747970543.810:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.084356][ T30] audit: type=1326 audit(1747970543.810:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.106225][ T30] audit: type=1326 audit(1747970543.810:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.130218][ T30] audit: type=1326 audit(1747970543.820:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.2.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bd38e969 code=0x7ffc0000 [ 569.328784][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.215827][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.525182][T10523] kAFS: unable to lookup cell '' [ 571.051278][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.320596][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 571.415182][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.367738][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.495137][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.867357][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.055260][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 574.149434][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.748904][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 575.021247][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.289954][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 575.310507][ T47] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 575.354639][ T47] usb 1-1: config 162 has an invalid interface number: 3 but max is 2 [ 575.380740][ T47] usb 1-1: config 162 has no interface number 0 [ 575.403282][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.440104][ T47] usb 1-1: config 162 has no interface number 1 [ 575.702776][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 575.715685][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.721021][ T47] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 575.756282][ T47] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 575.767766][ T47] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 575.801962][ T47] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 575.829947][ T47] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 575.900013][ T47] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 575.954918][ T47] usb 1-1: config 162 interface 84 has no altsetting 0 [ 575.972251][ T47] usb 1-1: config 162 interface 2 has no altsetting 0 [ 575.991547][ T47] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 576.008559][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.039220][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.072648][ T47] usb 1-1: Product: syz [ 576.085369][ T47] usb 1-1: Manufacturer: syz [ 576.095272][ T47] usb 1-1: SerialNumber: syz [ 577.079197][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.242420][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.459962][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.666887][ T5827] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 578.719736][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 578.728215][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.949098][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.511233][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.583428][T10600] binder: 10589:10600 ioctl c0306201 0 returned -14 [ 579.593441][T10600] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 579.601622][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1222'. [ 579.612456][T10600] batadv0: entered promiscuous mode [ 579.617923][T10600] batadv0: entered allmulticast mode [ 579.626654][T10600] bridge0: port 1(batadv0) entered blocking state [ 579.634070][T10600] bridge0: port 1(batadv0) entered disabled state [ 579.654925][T10600] bridge0: port 1(batadv0) entered blocking state [ 579.661900][T10600] bridge0: port 1(batadv0) entered forwarding state [ 580.607885][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.694217][ T1106] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 580.704381][ T1106] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 580.806814][ T47] usb 1-1: USB disconnect, device number 11 [ 580.835120][T10588] hugetlbfs: syz.5.1219 (10588): Using mlock ulimits for SHM_HUGETLB is obsolete [ 581.551014][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.561164][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 581.711499][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.978022][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.228967][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.940437][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.952088][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 584.480932][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.199216][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.231891][T10639] evm: overlay not supported [ 585.559021][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.388955][T10663] openvswitch: netlink: Missing valid actions attribute. [ 586.396067][T10663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.599023][T10662] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 586.903117][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.770187][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.790930][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 588.418842][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.427536][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.519895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.883414][ T5887] net_ratelimit: 1 callbacks suppressed [ 589.883435][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.714578][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 591.243464][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.285940][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 591.467111][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.483065][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.655354][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.609534][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.663509][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.368603][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.380659][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.441369][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.572266][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 596.015066][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 596.706937][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.955124][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 596.972534][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.504640][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.848801][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.321713][ T6220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.321953][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 598.481616][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.638984][T10781] xt_hashlimit: size too large, truncated to 1048576 [ 598.698213][T10783] : renamed from bond0 (while UP) [ 598.919368][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.997449][ T9589] : (slave syz_tun): Releasing backup interface [ 599.260629][T10788] xt_hashlimit: size too large, truncated to 1048576 [ 599.595551][T10786] syzkaller0: entered promiscuous mode [ 599.601301][T10786] syzkaller0: entered allmulticast mode [ 599.630053][ T3451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.352156][T10808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.525803][ T5962] net_ratelimit: 2 callbacks suppressed [ 601.525827][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.319170][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 602.386351][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.453420][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.599064][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.626746][T10201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 602.638195][T10201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.368805][T10201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.378940][T10201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.387069][T10201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 603.741707][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.880583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.889823][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 604.726733][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 604.748034][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.899776][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.400883][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.576591][ T5827] Bluetooth: hci2: command tx timeout [ 606.217402][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.299731][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 607.566628][ T5916] net_ratelimit: 1 callbacks suppressed [ 607.566650][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.643199][ T5827] Bluetooth: hci2: command 0x041b tx timeout [ 607.685296][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.206728][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 608.230541][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.480337][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.795343][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.414390][ T3432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.415355][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 609.720174][T10201] Bluetooth: hci2: command 0x041b tx timeout [ 609.807393][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.530547][ T6219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.549910][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 610.846944][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.565242][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.680693][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 611.803207][T10201] Bluetooth: hci2: command 0x041b tx timeout [ 612.923226][ T5887] net_ratelimit: 2 callbacks suppressed [ 612.923246][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.611240][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.622328][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 614.031836][T10201] Bluetooth: hci2: command 0x041b tx timeout [ 614.608204][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.628526][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.973983][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.993540][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.019157][T10912] syz.0.1307 (10912) used greatest stack depth: 18168 bytes left [ 617.210084][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.475990][T10820] chnl_net:caif_netlink_parms(): no params data found [ 617.902552][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.916633][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 618.029126][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.120113][T10927] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:ff01 with DS=0xf [ 618.287231][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.642681][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 618.736936][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.744302][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.752158][T10820] bridge_slave_0: entered allmulticast mode [ 618.770611][T10820] bridge_slave_0: entered promiscuous mode [ 618.794169][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.811687][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.819694][T10820] bridge_slave_1: entered allmulticast mode [ 618.827605][T10820] bridge_slave_1: entered promiscuous mode [ 618.848777][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 618.856306][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 618.873791][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 618.885519][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.906197][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.915580][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.928176][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.938240][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.966688][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.051159][T10820] team0: Port device team_slave_0 added [ 619.064918][T10820] team0: Port device team_slave_1 added [ 619.115680][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.123076][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.151152][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.152582][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.164948][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.173656][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 619.187810][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.189986][ T5887] usb 1-1: GET_CAPABILITIES returned 0 [ 619.221538][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.235436][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 619.327622][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.351596][T10820] hsr_slave_0: entered promiscuous mode [ 619.363339][T10820] hsr_slave_1: entered promiscuous mode [ 619.386902][T10820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.395731][T10820] Cannot create hsr debugfs directory [ 619.434664][ T10] usb 1-1: USB disconnect, device number 12 [ 620.544120][T10958] overlayfs: failed to clone upperpath [ 620.552560][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.646447][T10961] overlayfs: failed to clone upperpath [ 621.150407][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.615567][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.785959][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.900735][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 622.710985][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.807196][T10820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.035725][T10820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.285470][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b6ac400: rx timeout, send abort [ 623.795290][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b6ac400: abort rx timeout. Force session deactivation [ 624.038125][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.171985][T10982] sp0: Synchronizing with TNC [ 624.363986][T10975] [U] è` [ 624.705133][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.717938][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.783303][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.837964][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.704023][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 625.731471][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.115963][T10820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.195939][T10820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.788942][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.883842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.892516][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.916002][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.765012][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 628.782709][T10820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.787273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.854482][T10820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.470062][T11019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.836245][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.577725][T10820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.878046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.885550][T10820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.728984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.869599][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.879347][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.887486][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.067490][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.813658][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.903061][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.331536][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.405933][T11063] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 636.248003][ T1106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.790178][ T3451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 636.914918][T10820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 637.476189][T10820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.709687][T10820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.410376][T10820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.750346][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 638.877684][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.922959][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.981683][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.988945][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.074995][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.082319][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.226213][T10820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 640.280586][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 640.307879][T10820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.919569][ T5827] Bluetooth: hci2: command 0x041b tx timeout [ 642.961347][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 644.541422][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.322152][T10820] veth0_vlan: entered promiscuous mode [ 646.366604][T10820] veth1_vlan: entered promiscuous mode [ 646.500060][T10820] veth0_macvtap: entered promiscuous mode [ 646.570994][T10820] veth1_macvtap: entered promiscuous mode [ 647.097233][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.119591][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.149778][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.175990][T10820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.203910][T10820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.257370][T10820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.288581][T10820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.644652][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.677393][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.741885][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 650.450975][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.465195][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.067524][ T1158] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 655.553516][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.730290][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.148288][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 656.209052][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.090671][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.221897][T11240] Cannot find add_set index 0 as target [ 659.658860][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 659.742199][T11096] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 659.847012][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.862486][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.872881][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.923974][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.933220][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.990388][T11096] usb 1-1: Using ep0 maxpacket: 16 [ 660.010409][T11096] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 660.021147][T11096] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.032361][T11096] usb 1-1: config 0 has no interface number 0 [ 660.049715][T11096] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 660.061388][T11096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.071875][T11096] usb 1-1: Product: syz [ 660.076141][T11096] usb 1-1: Manufacturer: syz [ 660.082538][T11096] usb 1-1: SerialNumber: syz [ 660.512922][T11096] usb 1-1: config 0 descriptor?? [ 660.565634][T11096] asix 1-1:0.251: probe with driver asix failed with error -22 [ 660.972287][ T5885] usb 1-1: USB disconnect, device number 13 [ 662.048699][ T5840] Bluetooth: hci2: command tx timeout [ 662.204498][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 663.604232][ T36] bridge_slave_1: left allmulticast mode [ 663.613213][ T36] bridge_slave_1: left promiscuous mode [ 663.619845][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.551152][T11277] atomic_op ffff8880499ab998 conn xmit_atomic 0000000000000000 [ 664.942522][ T5840] Bluetooth: hci2: command tx timeout [ 665.101172][ T36] bridge_slave_0: left allmulticast mode [ 665.106902][ T36] bridge_slave_0: left promiscuous mode [ 665.126447][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.317520][T11279] overlayfs: failed to clone upperpath [ 666.464325][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.473709][T11286] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1402'. [ 666.489602][T11286] netlink: zone id is out of range [ 666.495276][T11286] netlink: zone id is out of range [ 666.501128][T11286] netlink: get zone limit has 8 unknown bytes [ 667.001863][ T5840] Bluetooth: hci2: command tx timeout [ 668.554908][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 669.078571][ T5840] Bluetooth: hci2: command tx timeout [ 670.747771][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 672.886818][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 673.516862][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.780448][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.881704][ T36] bond0 (unregistering): Released all slaves [ 674.094420][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 674.514579][T11348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.211813][T11244] chnl_net:caif_netlink_parms(): no params data found [ 675.282259][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 675.862071][ T36] hsr_slave_0: left promiscuous mode [ 675.888654][ T36] hsr_slave_1: left promiscuous mode [ 676.460541][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 676.539563][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.547039][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.789809][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.797383][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.928899][ T36] veth1_macvtap: left promiscuous mode [ 676.946257][ T36] veth0_macvtap: left promiscuous mode [ 677.161762][ T36] veth1_vlan: left promiscuous mode [ 677.363926][ T36] veth0_vlan: left promiscuous mode [ 678.720174][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 680.411238][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 682.039429][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 682.386858][ T36] team0 (unregistering): Port device team_slave_1 removed [ 682.505134][ T36] team0 (unregistering): Port device team_slave_0 removed [ 684.545790][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 685.715968][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.726867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.822656][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 686.924338][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1432'. [ 687.491040][T11244] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.513321][T11244] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.520637][T11244] bridge_slave_0: entered allmulticast mode [ 687.530797][T11244] bridge_slave_0: entered promiscuous mode [ 687.561395][T11244] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.579558][T11244] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.698998][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 687.710343][T11244] bridge_slave_1: entered allmulticast mode [ 688.625748][T11244] bridge_slave_1: entered promiscuous mode [ 689.275734][T11475] netlink: 'syz.2.1443': attribute type 3 has an invalid length. [ 689.964823][T11244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.047020][T11244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.360341][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 690.431607][T11244] team0: Port device team_slave_0 added [ 691.192588][T11244] team0: Port device team_slave_1 added [ 691.944540][T11244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.753286][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.881230][T11244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.925111][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 693.651669][T11244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.659047][T11244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.686423][T11244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.121171][T11244] hsr_slave_0: entered promiscuous mode [ 695.171608][T11244] hsr_slave_1: entered promiscuous mode [ 695.202094][T11244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.248619][T11244] Cannot create hsr debugfs directory [ 695.551359][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.438979][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.483443][T11244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 697.515656][T11244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 697.534662][T11244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 697.564886][T11244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 697.776567][T11244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.818274][T11244] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.837219][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.844414][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.867740][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.874939][T10355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.279763][T11244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.415850][T11244] veth0_vlan: entered promiscuous mode [ 698.433442][T11244] veth1_vlan: entered promiscuous mode [ 698.494491][T11244] veth0_macvtap: entered promiscuous mode [ 698.513307][T11244] veth1_macvtap: entered promiscuous mode [ 698.547071][T11244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.557967][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 698.584485][T11244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.616798][T11244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.629114][T11244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.638418][T11244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.648596][T11244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.847016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.948680][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 700.159687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.456786][T11124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 700.478803][T11297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.487324][T11124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 700.499155][T11124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 700.517113][T11124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 700.540361][T11124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.613450][T11297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.162625][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1466'. [ 701.173698][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1466'. [ 701.196695][T11607] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1466'. [ 701.332358][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 701.798069][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 702.631077][ T5840] Bluetooth: hci6: command tx timeout [ 703.076433][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 703.454987][T11297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.551363][T11593] chnl_net:caif_netlink_parms(): no params data found [ 703.752030][T11297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.010794][T11297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.693499][ T5840] Bluetooth: hci6: command tx timeout [ 704.702021][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 705.638456][T11297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.972950][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.005006][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.012434][T11593] bridge_slave_0: entered allmulticast mode [ 706.061607][T11593] bridge_slave_0: entered promiscuous mode [ 706.070455][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.077732][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.085207][T11593] bridge_slave_1: entered allmulticast mode [ 706.093063][T11593] bridge_slave_1: entered promiscuous mode [ 706.967537][ T5840] Bluetooth: hci6: command tx timeout [ 706.995262][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 707.050134][T11124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 707.079449][T11124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 707.097576][T11124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 707.128920][T11124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 707.200820][T11124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.669900][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.404676][T11669] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 708.681395][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.692961][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 708.883247][T11690] ubi31: attaching mtd0 [ 708.901572][T11690] ubi31 error: ubi_attach_mtd_dev: bad VID header (12288) or data offsets (12352) [ 708.988343][T11124] Bluetooth: hci6: command tx timeout [ 709.072926][T11593] team0: Port device team_slave_0 added [ 709.101050][T11593] team0: Port device team_slave_1 added [ 709.478351][T11124] Bluetooth: hci2: command tx timeout [ 711.114224][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 711.317124][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.356148][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.412799][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.425748][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.432924][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.460362][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.472729][T11297] bridge_slave_1: left allmulticast mode [ 711.478945][T11297] bridge_slave_1: left promiscuous mode [ 711.491089][T11297] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.996842][T11124] Bluetooth: hci2: command tx timeout [ 712.014399][T11297] bridge_slave_0: left allmulticast mode [ 712.021506][T11297] bridge_slave_0: left promiscuous mode [ 712.030347][T11297] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.693024][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 714.031634][T11124] Bluetooth: hci2: command tx timeout [ 714.507049][ T5883] IPVS: starting estimator thread 0... [ 714.618849][T11762] IPVS: using max 28 ests per chain, 67200 per kthread [ 715.024919][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 715.179951][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 715.883783][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 715.938934][ T5883] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 715.960988][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.001129][ T5883] usb 6-1: Product: syz [ 716.008366][ T5883] usb 6-1: Manufacturer: syz [ 716.027048][ T5883] usb 6-1: SerialNumber: syz [ 716.067374][ T5883] usb 6-1: config 0 descriptor?? [ 716.335933][T11124] Bluetooth: hci2: command tx timeout [ 716.373103][ T5883] usb 6-1: selecting invalid altsetting 3 [ 716.727689][T11790] xt_nat: multiple ranges no longer supported [ 716.802202][ T5883] comedi comedi0: could not set alternate setting 3 in high speed [ 716.814540][ T5883] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 716.896031][ T5883] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 717.038321][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 717.165662][T11297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.210910][T11297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.251144][T11297] bond0 (unregistering): Released all slaves [ 717.416678][T11764] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1496'. [ 718.032274][ T5883] usb 6-1: USB disconnect, device number 7 [ 718.941911][T11593] hsr_slave_0: entered promiscuous mode [ 718.953119][T11593] hsr_slave_1: entered promiscuous mode [ 718.964227][T11593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.972290][T11593] Cannot create hsr debugfs directory [ 718.991204][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 720.971734][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 721.268313][T11297] hsr_slave_0: left promiscuous mode [ 721.295373][T11297] hsr_slave_1: left promiscuous mode [ 721.328450][T11297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.336260][T11297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.387306][T11297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.387407][T11830] overlayfs: failed to clone upperpath [ 721.436029][T11297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.499713][T11297] veth1_macvtap: left promiscuous mode [ 721.506043][T11297] veth0_macvtap: left promiscuous mode [ 721.513376][T11297] veth1_vlan: left promiscuous mode [ 721.520815][T11297] veth0_vlan: left promiscuous mode [ 722.197203][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 723.371111][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 723.852866][T11297] team0 (unregistering): Port device team_slave_1 removed [ 723.941955][T11297] team0 (unregistering): Port device team_slave_0 removed [ 724.540227][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 726.098199][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 726.647712][T11863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.132387][T11663] chnl_net:caif_netlink_parms(): no params data found [ 727.167773][T11593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 727.258375][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 727.730571][T11593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 727.764595][T11593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 727.867323][T11593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 728.286857][T11663] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.330677][T11899] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1523'. [ 728.378627][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.386002][T11663] bridge_slave_0: entered allmulticast mode [ 728.421027][T11663] bridge_slave_0: entered promiscuous mode [ 728.578917][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 728.653836][T11663] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.670186][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.684172][T11663] bridge_slave_1: entered allmulticast mode [ 728.695646][T11663] bridge_slave_1: entered promiscuous mode [ 729.387587][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1524'. [ 729.619561][T11663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.705412][T11663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.303556][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.501054][T11663] team0: Port device team_slave_0 added [ 730.587010][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 730.616388][T11663] team0: Port device team_slave_1 added [ 731.439242][T11663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.452067][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.565994][T11663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.585556][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.605462][T11663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.615491][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.642747][T11663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.681465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.688817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.771451][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 732.241879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.249214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.387624][T11663] hsr_slave_0: entered promiscuous mode [ 732.671041][T11663] hsr_slave_1: entered promiscuous mode [ 732.677527][T11663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.708380][T11663] Cannot create hsr debugfs directory [ 733.510504][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 733.598504][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 733.826680][T11593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.845200][T11593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.293225][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 736.192835][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 738.500505][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 738.607993][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.875063][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 738.900610][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 738.914487][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 738.932264][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 738.942138][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 739.271414][T11663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 739.327247][T11663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 739.355124][T11663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 739.387659][T11663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.434961][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 740.590978][T12015] : entered promiscuous mode [ 740.856409][T11992] chnl_net:caif_netlink_parms(): no params data found [ 740.989578][T11124] Bluetooth: hci7: command tx timeout [ 741.370554][T11593] veth0_vlan: entered promiscuous mode [ 741.445741][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.454355][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.485509][T11992] bridge_slave_0: entered allmulticast mode [ 741.547284][T11992] bridge_slave_0: entered promiscuous mode [ 741.601853][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 741.741114][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.800658][T12035] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1548'. [ 742.128183][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.160767][T11992] bridge_slave_1: entered allmulticast mode [ 742.191714][T11992] bridge_slave_1: entered promiscuous mode [ 742.214760][T11663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.446427][T11593] veth1_vlan: entered promiscuous mode [ 742.693275][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.068609][T11124] Bluetooth: hci7: command tx timeout [ 743.201167][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 743.436422][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.479785][T11663] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.834551][T11992] team0: Port device team_slave_0 added [ 744.141446][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.148728][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.800415][T11992] team0: Port device team_slave_1 added [ 745.219807][T11124] Bluetooth: hci7: command tx timeout [ 745.562017][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.569206][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.577610][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 745.887953][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.899961][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.926459][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.144708][T11593] veth0_macvtap: entered promiscuous mode [ 746.423577][T11593] veth1_macvtap: entered promiscuous mode [ 746.604268][T11663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 746.616740][T11663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.675036][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.726138][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.753741][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 746.840474][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.852545][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.859028][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.013265][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.025635][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.037528][T11593] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.046279][T11593] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.067671][T11593] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.091502][T11593] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.228877][T11124] Bluetooth: hci7: command tx timeout [ 748.085938][T11992] hsr_slave_0: entered promiscuous mode [ 748.150023][T11992] hsr_slave_1: entered promiscuous mode [ 748.156482][T11992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.185731][T11992] Cannot create hsr debugfs directory [ 749.038496][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 749.837888][T11663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.897374][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 750.493283][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 751.240406][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.256190][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.361546][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 752.576028][T12129] syz_tun: entered allmulticast mode [ 752.877216][T11992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 752.904350][T10355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.932374][T10355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.947962][T11992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 752.973841][T11992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 753.013847][T12125] syz_tun: left allmulticast mode [ 753.030564][T11992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 753.129266][T11663] veth0_vlan: entered promiscuous mode [ 753.152434][T11663] veth1_vlan: entered promiscuous mode [ 753.279822][T11663] veth0_macvtap: entered promiscuous mode [ 753.301799][T11663] veth1_macvtap: entered promiscuous mode [ 754.163674][T11663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.181697][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 754.338172][T11663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.368735][T11663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.398226][T11663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.069400][T11663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.078432][T11663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.013574][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 757.524871][T12158] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 757.534348][T12158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 757.544001][T12158] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 757.822076][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.897050][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.008522][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.019099][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.084054][T12168] syz.5.1573: attempt to access beyond end of device [ 758.084054][T12168] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 758.100516][T12168] EXT4-fs (loop5): unable to read superblock [ 758.149574][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.156822][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.647279][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.655812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.779153][T10355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.802481][T10355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.902191][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 759.085822][T12178] xt_cgroup: path and classid specified [ 761.672651][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 762.623450][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.972056][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 763.562651][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.730244][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.786971][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.910144][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.987173][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 766.369789][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 766.480508][ T1106] bridge_slave_1: left allmulticast mode [ 766.480578][ T1106] bridge_slave_1: left promiscuous mode [ 766.480780][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.248892][ T1106] bridge_slave_0: left allmulticast mode [ 767.254600][ T1106] bridge_slave_0: left promiscuous mode [ 767.377983][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.748771][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 769.062499][T12238] kvm: kvm [12237]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x802 [ 769.160955][T12238] kvm: kvm [12237]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2 [ 769.433065][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 769.683182][T12238] kvm: kvm [12237]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2 [ 769.841534][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 769.858690][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 769.869927][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 769.897200][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 769.910194][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 772.286974][ T3432] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 772.312144][ T5840] Bluetooth: hci2: command tx timeout [ 773.413149][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1599'. [ 774.099002][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1600'. [ 774.349576][ T5840] Bluetooth: hci2: command tx timeout [ 774.494116][ T6219] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 775.310474][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 776.605096][ T5840] Bluetooth: hci2: command tx timeout [ 777.381352][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 777.584153][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.610085][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.374839][ T1106] bond0 (unregistering): Released all slaves [ 778.594387][T11992] veth0_vlan: entered promiscuous mode [ 779.070837][ T5840] Bluetooth: hci2: command tx timeout [ 779.190927][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 779.321859][T11992] veth1_vlan: entered promiscuous mode [ 780.362335][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 781.972262][T12360] trusted_key: encrypted_key: insufficient parameters specified [ 782.486101][T11992] veth0_macvtap: entered promiscuous mode [ 782.601072][ T1106] hsr_slave_0: left promiscuous mode [ 782.618768][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 783.333900][T12370] Sensor B: ================= START STATUS ================= [ 783.342038][T12370] Sensor B: Test Pattern: 75% Colorbar [ 783.347936][T12370] Sensor B: Show Information: All [ 783.353728][T12370] Sensor B: Vertical Flip: false [ 783.358782][T12370] Sensor B: Horizontal Flip: false [ 783.364351][T12370] Sensor B: Brightness: 128 [ 783.368979][T12370] Sensor B: Contrast: 128 [ 783.373347][T12370] Sensor B: Hue: 0 [ 783.377105][T12370] Sensor B: Saturation: 128 [ 783.381683][T12370] Sensor B: ================== END STATUS ================== [ 783.390529][ T1106] hsr_slave_1: left promiscuous mode [ 783.396945][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.445011][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.502527][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.530619][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.041278][ T1106] veth1_macvtap: left promiscuous mode [ 785.047021][ T1106] veth0_macvtap: left promiscuous mode [ 785.053205][ T1106] veth1_vlan: left promiscuous mode [ 785.058611][ T1106] veth0_vlan: left promiscuous mode [ 787.008578][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 789.064646][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 790.998709][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 792.837013][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 793.267280][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 793.580075][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 793.952656][T11992] veth1_macvtap: entered promiscuous mode [ 794.652168][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.665066][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.677092][T11992] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.688196][T11992] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.696909][T11992] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.718734][T11992] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.772211][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 795.517307][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 796.070373][T12254] chnl_net:caif_netlink_parms(): no params data found [ 796.131599][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 797.629921][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 797.793338][T11124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 797.807603][T11124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 797.817753][T11124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 797.831078][T11124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 797.841130][T11124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 798.869097][T10355] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 799.869581][T11124] Bluetooth: hci7: command tx timeout [ 800.273755][ T1106]  (unregistering): (slave vxlan0): Releasing backup interface [ 800.548628][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 801.948309][T11124] Bluetooth: hci7: command tx timeout [ 802.083343][ T1106]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.140634][ T1106]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.306667][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 802.348996][ T1106]  (unregistering): Released all slaves [ 804.030674][T11124] Bluetooth: hci7: command tx timeout [ 804.350113][T12542] xt_l2tp: v2 sid > 0xffff: 262144 [ 804.461039][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 805.937141][ T1106] tipc: Disabling bearer [ 805.946390][ T1106] tipc: Left network mode [ 806.019983][T12254] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.044486][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.068364][T12254] bridge_slave_0: entered allmulticast mode [ 806.094827][T12254] bridge_slave_0: entered promiscuous mode [ 806.119170][T11124] Bluetooth: hci7: command tx timeout [ 806.232981][T12254] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.269684][T12551] 9pnet_virtio: no channels available for device 127.0.0.1 [ 806.291342][T12552] TCP: out of memory -- consider tuning tcp_mem [ 806.291386][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.297866][T12254] bridge_slave_1: entered allmulticast mode [ 806.335890][T12254] bridge_slave_1: entered promiscuous mode [ 807.831348][T12254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.904938][T12254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.950053][ T3494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 808.100987][ T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 808.275034][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.281731][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.218224][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 809.264424][ T47] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 809.365646][ T47] usb 6-1: config 0 has no interface number 0 [ 809.460079][ T47] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.708920][ T47] usb 6-1: config 0 interface 85 has no altsetting 0 [ 809.766832][ T47] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 809.811120][T12254] team0: Port device team_slave_0 added [ 809.819445][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.827818][ T47] usb 6-1: Product: syz [ 809.851264][ T47] usb 6-1: Manufacturer: syz [ 809.857951][ T47] usb 6-1: SerialNumber: syz [ 809.906463][ T47] usb 6-1: config 0 descriptor?? [ 809.912926][ T1106] hsr_slave_0: left promiscuous mode [ 809.932622][ T1106] hsr_slave_1: left promiscuous mode [ 809.959399][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 809.969929][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.994890][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.097442][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.205900][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.596797][ T1106] veth1_macvtap: left promiscuous mode [ 810.636323][ T1106] veth0_macvtap: left promiscuous mode [ 810.642871][ T47] appletouch 6-1:0.85: Failed to read mode from device. [ 810.656663][ T47] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 810.675141][ T1106] veth1_vlan: left promiscuous mode [ 810.715937][ T1106] veth0_vlan: left promiscuous mode [ 811.257188][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.939906][T12639] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.291486][ T5885] usb 6-1: USB disconnect, device number 8 [ 815.001208][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 816.549283][T12666] kernel read not supported for file /eth0 (pid: 12666 comm: syz.5.1683) [ 816.590824][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 816.590840][ T30] audit: type=1800 audit(1747970791.830:89): pid=12666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1683" name="eth0" dev="mqueue" ino=14239 res=0 errno=0 [ 817.055148][ T30] audit: type=1326 audit(1747970792.290:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.086626][ T30] audit: type=1326 audit(1747970792.310:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.113148][ T30] audit: type=1326 audit(1747970792.310:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.135764][ T30] audit: type=1326 audit(1747970792.310:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.198224][ T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 817.678140][ T30] audit: type=1326 audit(1747970792.310:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.790868][ T30] audit: type=1326 audit(1747970792.330:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.836907][ T30] audit: type=1326 audit(1747970792.330:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.862958][ T30] audit: type=1326 audit(1747970792.330:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 817.918147][ T30] audit: type=1326 audit(1747970792.330:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12680 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1708f8e969 code=0x7ffc0000 [ 818.054480][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 818.177966][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 818.398656][T12685] kvm: kvm [12684]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 818.639985][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 820.064726][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 820.483432][T12254] team0: Port device team_slave_1 added [ 821.269406][T12254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.288902][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.362586][T12254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.387844][ T1143] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 821.506463][T12254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.526315][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.578208][T12254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.688173][ T47] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 821.903247][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 821.972087][ T47] usb 6-1: config 0 has no interfaces? [ 822.056825][ T47] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 822.193318][T12254] hsr_slave_0: entered promiscuous mode [ 822.211030][T12254] hsr_slave_1: entered promiscuous mode [ 822.224282][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.244040][ T47] usb 6-1: Product: syz [ 822.248588][ T47] usb 6-1: Manufacturer: syz [ 822.253196][ T47] usb 6-1: SerialNumber: syz [ 822.279052][ T47] usb 6-1: config 0 descriptor?? [ 822.328961][T12254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.336565][T12254] Cannot create hsr debugfs directory [ 823.450073][T11299] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 824.168339][T12491] chnl_net:caif_netlink_parms(): no params data found [ 824.268641][ T5885] usb 6-1: USB disconnect, device number 9 [ 824.383840][ T1106] IPVS: stop unused estimator thread 0... [ 825.219762][ T6220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 826.268248][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 826.298561][T12752] netlink: 'syz.5.1699': attribute type 10 has an invalid length. [ 826.389671][T12754] netlink: 'syz.5.1699': attribute type 10 has an invalid length. [ 826.397548][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1699'. [ 826.996552][ T3494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.778451][ T3475] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 827.881739][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.893254][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.903629][T12752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.912399][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.921708][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.930032][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.994390][T12752] : (slave batadv0): Enslaving as an active interface with an up link [ 828.077942][T12754] batadv0: entered promiscuous mode [ 828.088319][T12754] batadv0: entered allmulticast mode [ 828.114004][T12754] : (slave batadv0): Releasing backup interface [ 828.142675][T12754] bridge0: port 3(batadv0) entered blocking state [ 828.158972][T12754] bridge0: port 3(batadv0) entered disabled state [ 828.454183][ T3494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.496612][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.522716][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.534992][T12491] bridge_slave_0: entered allmulticast mode [ 828.545849][T12491] bridge_slave_0: entered promiscuous mode [ 828.571087][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.583965][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.594107][T12491] bridge_slave_1: entered allmulticast mode [ 828.617153][T12491] bridge_slave_1: entered promiscuous mode [ 828.645988][T11297] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 828.655677][T11297] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 828.685368][ T3494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.830025][ T3494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.915944][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.929381][T11297] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 828.956548][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.910304][T12491] team0: Port device team_slave_0 added [ 829.972673][T12491] team0: Port device team_slave_1 added [ 830.028175][ T5840] Bluetooth: hci2: command tx timeout [ 830.213373][ T1106] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 830.919490][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.935293][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.006575][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.210128][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.321163][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.795265][T12803] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 832.248319][ T5840] Bluetooth: hci2: command tx timeout [ 832.498742][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.411287][ T3451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 833.703910][T12843] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 834.428085][T11124] Bluetooth: hci2: command tx timeout [ 835.273691][T12851] overlayfs: failed to clone upperpath [ 836.073285][ T3451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 836.401340][T12491] hsr_slave_0: entered promiscuous mode [ 836.429678][ T31] INFO: task syz.6.1436:11440 blocked for more than 143 seconds. [ 836.438625][ T31] Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.446421][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.456375][T12491] hsr_slave_1: entered promiscuous mode [ 836.481665][ T31] task:syz.6.1436 state:D stack:24056 pid:11440 tgid:11434 ppid:7490 task_flags:0x400140 flags:0x00004004 [ 836.496453][T12491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.508838][ T5840] Bluetooth: hci2: command tx timeout [ 836.548170][ T31] Call Trace: [ 836.552311][ T31] [ 836.555807][ T31] __schedule+0x168f/0x4c70 [ 836.566662][ T31] ? __lock_acquire+0xaac/0xd20 [ 836.574156][ T31] ? schedule+0x165/0x360 [ 836.582074][ T31] ? __pfx___schedule+0x10/0x10 [ 836.587282][ T31] ? schedule+0x91/0x360 [ 836.587403][T12491] Cannot create hsr debugfs directory [ 836.593712][ T31] schedule+0x165/0x360 [ 836.674750][ T31] ? rwsem_down_read_slowpath+0x568/0x880 [ 837.058097][ T31] schedule_preempt_disabled+0x13/0x30 [ 837.099707][ T31] rwsem_down_read_slowpath+0x552/0x880 [ 837.166744][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 837.173375][ T31] ? super_lock+0x2a9/0x3b0 [ 837.177950][ T31] down_read+0x98/0x2e0 [ 837.182633][ T31] super_lock+0x2a9/0x3b0 [ 837.188411][ T31] ? __pfx_super_lock+0x10/0x10 [ 837.193477][ T31] ? do_raw_spin_lock+0x121/0x290 [ 837.198920][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 837.204181][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 837.210367][ T31] iterate_supers+0x80/0x180 [ 837.215440][ T31] ksys_sync+0x94/0x150 [ 837.220253][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 837.225080][ T31] ? do_syscall_64+0xba/0x210 [ 837.238442][ T31] __ia32_sys_sync+0xe/0x20 [ 837.248691][ T31] do_syscall_64+0xf6/0x210 [ 837.253259][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 837.268999][ T31] ? clear_bhb_loop+0x60/0xb0 [ 837.273745][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.300913][ T31] RIP: 0033:0x7f656db8e969 [ 837.305401][ T31] RSP: 002b:00007f656e9a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 837.328083][ T31] RAX: ffffffffffffffda RBX: 00007f656ddb6160 RCX: 00007f656db8e969 [ 837.336159][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 837.371645][ T31] RBP: 00007f656ddb6160 R08: 0000000000000000 R09: 0000000000000000 [ 837.380030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.388547][ T31] R13: 0000000000000000 R14: 00007f656ddb6160 R15: 00007ffd230b1098 [ 837.398815][ T31] [ 837.401975][ T31] [ 837.401975][ T31] Showing all locks held in the system: [ 837.410200][T12837] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 837.438896][ T31] 1 lock held by ksoftirqd/0/15: [ 837.443906][ T31] 1 lock held by khungtaskd/31: [ 837.493625][T12858] syz.7.1716 (12858): drop_caches: 2 [ 837.545285][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 837.565141][ T31] 6 locks held by kworker/u8:11/3494: [ 837.570821][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 837.590821][ T31] #1: ffffc9000c917c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 837.607644][ T31] #2: ffffffff8f2dbb50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 837.619431][ T31] #3: ffff88805e08c0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 837.635447][ T31] #4: ffff888035824250 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 837.646798][ T31] #5: ffffffff8f2e8688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 837.656528][ T31] 2 locks held by getty/5582: [ 837.661334][ T31] #0: ffff88814c9ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 837.673064][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 837.683897][ T31] 1 lock held by syz-executor/5820: [ 837.689462][ T31] #0: ffff8880521cc0e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 837.700040][ T31] 2 locks held by kworker/1:5/5887: [ 837.705264][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 837.717127][ T31] #1: ffffc900053e7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 837.730679][ T31] 1 lock held by syz.6.1436/11440: [ 837.735835][ T31] #0: ffff8880521cc0e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 837.747824][ T31] 1 lock held by syz.0.1507/11816: [ 837.755025][ T31] #0: ffff8880521cc0e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 837.765472][ T31] 3 locks held by syz-executor/12491: [ 837.771230][ T31] #0: ffffffff8ea820e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 837.782895][ T31] #1: ffffffff8f2e8688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 837.792528][ T31] #2: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 837.803545][ T31] 4 locks held by syz-executor/12771: [ 837.809057][ T31] #0: ffff88807ce60d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 837.819174][ T31] #1: ffff88807ce60078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 837.829034][ T31] #2: ffffffff8f44e008 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 837.840440][ T31] #3: ffff88803229e338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 837.852403][ T31] 1 lock held by syz.7.1716/12858: [ 837.857534][ T31] #0: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 837.869025][ T31] [ 837.871398][ T31] ============================================= [ 837.871398][ T31] [ 837.885596][ T31] NMI backtrace for cpu 1 [ 837.885614][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 837.885652][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.885665][ T31] Call Trace: [ 837.885672][ T31] [ 837.885681][ T31] dump_stack_lvl+0x189/0x250 [ 837.885710][ T31] ? __wake_up_klogd+0xd9/0x110 [ 837.885735][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.885762][ T31] ? __pfx__printk+0x10/0x10 [ 837.885805][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 837.885829][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 837.885846][ T31] ? _printk+0xcf/0x120 [ 837.885880][ T31] ? __pfx__printk+0x10/0x10 [ 837.885912][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 837.885935][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 837.885958][ T31] watchdog+0xfee/0x1030 [ 837.885985][ T31] ? watchdog+0x1de/0x1030 [ 837.886017][ T31] kthread+0x711/0x8a0 [ 837.886043][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.886065][ T31] ? __pfx_kthread+0x10/0x10 [ 837.886094][ T31] ? __pfx_kthread+0x10/0x10 [ 837.886115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 837.886137][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.886161][ T31] ? __pfx_kthread+0x10/0x10 [ 837.886182][ T31] ret_from_fork+0x4b/0x80 [ 837.886199][ T31] ? __pfx_kthread+0x10/0x10 [ 837.886221][ T31] ret_from_fork_asm+0x1a/0x30 [ 837.886266][ T31] [ 837.886273][ T31] Sending NMI from CPU 1 to CPUs 0: [ 838.035634][ C0] NMI backtrace for cpu 0 [ 838.035651][ C0] CPU: 0 UID: 0 PID: 12302 Comm: kworker/u8:16 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 838.035673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.035685][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 838.035716][ C0] RIP: 0010:unwind_next_frame+0x39e/0x2390 [ 838.035738][ C0] Code: 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6 44 24 01 83 e0 07 0f 84 75 15 00 00 <83> f8 01 4c 8b 7c 24 48 48 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 [ 838.035761][ C0] RSP: 0018:ffffc900044fe978 EFLAGS: 00000202 [ 838.035775][ C0] RAX: 0000000000000002 RBX: ffffffff8ffa0f9c RCX: ffffffff8ffa0fa0 [ 838.035789][ C0] RDX: ffffffff90a8ec74 RSI: ffffffff90a8ec74 RDI: ffffffff8bc12060 [ 838.035801][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000000 [ 838.035812][ C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: ffffffff90a8ec78 [ 838.035824][ C0] R13: ffffffff90a8ec79 R14: ffffc900044fea48 R15: ffffffff8ffa0f9c [ 838.035837][ C0] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 838.035851][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.035862][ C0] CR2: 00005654631b8000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 838.035877][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.035887][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 838.035898][ C0] Call Trace: [ 838.035904][ C0] [ 838.035916][ C0] ? unwind_next_frame+0xa5/0x2390 [ 838.035936][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 838.035959][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 838.035977][ C0] arch_stack_walk+0x11c/0x150 [ 838.036001][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 838.036030][ C0] stack_trace_save+0x9c/0xe0 [ 838.036047][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 838.036069][ C0] kasan_save_stack+0x3e/0x60 [ 838.036091][ C0] ? kasan_save_stack+0x3e/0x60 [ 838.036112][ C0] ? kasan_record_aux_stack+0xbc/0xd0 [ 838.036130][ C0] ? kvfree_call_rcu+0xbb/0x410 [ 838.036145][ C0] ? cfg80211_update_known_bss+0x634/0x1330 [ 838.036166][ C0] ? __cfg80211_bss_update+0x147/0x2120 [ 838.036185][ C0] ? cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 838.036204][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 838.036223][ C0] ? cfg80211_inform_bss_frame_data+0x362/0x700 [ 838.036243][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 838.036286][ C0] ? __phys_addr+0xba/0x170 [ 838.036308][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 838.036328][ C0] kvfree_call_rcu+0xbb/0x410 [ 838.036349][ C0] cfg80211_update_known_bss+0x634/0x1330 [ 838.036369][ C0] ? cmp_bss+0x8b3/0xe80 [ 838.036392][ C0] ? cmp_bss+0x8b3/0xe80 [ 838.036411][ C0] __cfg80211_bss_update+0x147/0x2120 [ 838.036434][ C0] ? do_raw_spin_lock+0x121/0x290 [ 838.036454][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.036472][ C0] ? trace_kmalloc+0x1f/0xd0 [ 838.036497][ C0] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 838.036520][ C0] cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 838.036546][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 838.036582][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 838.036605][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 838.036641][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 838.036677][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 838.036717][ C0] cfg80211_inform_bss_frame_data+0x362/0x700 [ 838.036744][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 838.036767][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 838.036786][ C0] ? sta_info_get+0x4f/0x2a0 [ 838.036813][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 838.036836][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 838.036870][ C0] ? __lock_acquire+0xaac/0xd20 [ 838.036894][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 838.036914][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 838.036933][ C0] ? __lock_acquire+0xaac/0xd20 [ 838.036960][ C0] ? __lock_acquire+0xaac/0xd20 [ 838.037000][ C0] ieee80211_iface_work+0x806/0xfe0 [ 838.037035][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 838.037060][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 838.037087][ C0] process_scheduled_works+0xade/0x17a0 [ 838.037133][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 838.037167][ C0] worker_thread+0x8a0/0xda0 [ 838.037184][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 838.037207][ C0] ? __kthread_parkme+0x7b/0x200 [ 838.037228][ C0] kthread+0x711/0x8a0 [ 838.037249][ C0] ? __pfx_worker_thread+0x10/0x10 [ 838.037263][ C0] ? __pfx_kthread+0x10/0x10 [ 838.037392][ C0] ? __pfx_kthread+0x10/0x10 [ 838.037419][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.037438][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.037459][ C0] ? __pfx_kthread+0x10/0x10 [ 838.037478][ C0] ret_from_fork+0x4b/0x80 [ 838.037495][ C0] ? __pfx_kthread+0x10/0x10 [ 838.037514][ C0] ret_from_fork_asm+0x1a/0x30 [ 838.037561][ C0] [ 838.530858][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 838.537832][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 838.549663][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.559737][ T31] Call Trace: [ 838.563030][ T31] [ 838.565989][ T31] dump_stack_lvl+0x99/0x250 [ 838.570606][ T31] ? __asan_memcpy+0x40/0x70 [ 838.575215][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.580460][ T31] ? __pfx__printk+0x10/0x10 [ 838.585095][ T31] panic+0x2db/0x790 [ 838.589024][ T31] ? __pfx_panic+0x10/0x10 [ 838.593463][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 838.598890][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 838.604289][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 838.610477][ T31] watchdog+0x102d/0x1030 [ 838.614833][ T31] ? watchdog+0x1de/0x1030 [ 838.619281][ T31] kthread+0x711/0x8a0 [ 838.623404][ T31] ? __pfx_watchdog+0x10/0x10 [ 838.628104][ T31] ? __pfx_kthread+0x10/0x10 [ 838.632718][ T31] ? __pfx_kthread+0x10/0x10 [ 838.637331][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.642555][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.647778][ T31] ? __pfx_kthread+0x10/0x10 [ 838.652402][ T31] ret_from_fork+0x4b/0x80 [ 838.656824][ T31] ? __pfx_kthread+0x10/0x10 [ 838.661429][ T31] ret_from_fork_asm+0x1a/0x30 [ 838.666229][ T31] [ 838.669581][ T31] Kernel Offset: disabled [ 838.673911][ T31] Rebooting in 86400 seconds..