last executing test programs: 2m43.588068511s ago: executing program 4 (id=515): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x14}, 0x7}], 0x1, 0x2, 0x0) 2m42.43087669s ago: executing program 4 (id=517): syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2m41.365623207s ago: executing program 4 (id=520): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 2m40.294235497s ago: executing program 4 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x44041) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000190001002dbd7000fcdbdf250a001400000001040004000008001e0006000000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20044050) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), 0xc) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) socket(0x10, 0x3, 0x0) 2m33.336168203s ago: executing program 4 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x0) 2m33.335761048s ago: executing program 1 (id=537): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000091441"], 0x18}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9b}], &(0x7f0000000200)='syzkaller\x00', 0x9d, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x10}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x3, 0x10, 0xa}, {0x4, 0x4, 0x1, 0xa}, {0x0, 0x4, 0x5, 0xc}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x120000, 0x0, 0x0, 0x0, 0xe2a}, [@alu={0x4, 0x1, 0xd, 0x1, 0x5, 0x20, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ldst={0x0, 0x2, 0x4, 0xc, 0x0, 0x10, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, &(0x7f0000000600), 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x5, 0x7}, {0x2, 0x4, 0x10, 0xb}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x300fff2) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x801, 0x0, &(0x7f0000000040)=0x2, 0xfffffffc) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x8008550e, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40002100, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffdc}, [@ldst={0x5, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 2m32.002807547s ago: executing program 4 (id=539): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x1, 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x459, 0x10, r2, 0x0) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m26.085850863s ago: executing program 1 (id=548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5}, 0xa0}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xf7fffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(r2, &(0x7f00000013c0)=[{&(0x7f0000001200)='hES', 0x3}, {&(0x7f0000001440)="f6a4380663eb330377c1f477014dabcb3ef9e02318d5c3ae3697c12987ad7de40d2932e384a9040000005873f2", 0x2d}, {0x0}], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x33565348, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000011c0)=[{0xe258, 0x5e, 0x0, 0x7}, {0xf, 0x6, 0x7, 0x4001}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xce22, 0x40, @empty, 0xa28}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xe2102, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 2m24.536686879s ago: executing program 1 (id=552): socket$inet(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r2 = syz_open_dev$I2C(&(0x7f0000000240), 0xfffffffffffff000, 0x80040) shutdown(0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000003c0)={@l2tp={0x2, 0x0, @loopback, 0x4}, {&(0x7f00000002c0)=""/189, 0xbd}, &(0x7f00000001c0), 0x48}, 0xa0) ioctl$I2C_RETRIES(r2, 0x701, 0x7) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) 2m16.775621372s ago: executing program 32 (id=539): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x1, 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x459, 0x10, r2, 0x0) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m14.425138526s ago: executing program 1 (id=561): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c000480"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 2m13.93636656s ago: executing program 1 (id=563): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001bc0)=""/73) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x5, {0x5, 0x11, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x8d, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x8, 0xc, 0x7}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7f, 0xa1, 0x6}]}}) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xb9, 0xb0, 0x83, 0x8, 0x52b, 0x1803, 0x2877, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0x69, 0xf1}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1f, 0xec, 0x2c, 0x8, 0x5da, 0xa0, 0x1fee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xa0, 0x6, 0x0, 0xec, 0x65, 0x68}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x3, 0x50, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0xde, 0xd}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x2, 0x7, 0xe, "bb", "b0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xd8, 0x9, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x22f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x1, 0x5, "d7d6f6997c20"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa0, 0x2, 0x7, {0x7, 0x25, 0x1, 0x82, 0x7, 0xfff4}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x0, 0x60, 0x1, 0xdf, 0x2}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x6, [{0x5a, &(0x7f0000000ac0)=@string={0x5a, 0x3, "72aac8f4d43dd915050c5f1bf7cac920d687140e5be19fed1375f8502c507e13b74bcfe0acf1434fe219f3c57c21148b9aab0df10407d13f8fe4c28de27a5548944b8789111fac2caa31ccd289c2565bda95e80d16cbc62f"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42c}}, {0x7b, &(0x7f0000000c40)=@string={0x7b, 0x3, "88257c3ce90fa69a8c844494aee7b6814e1f5a67dcdd8773e881160f1062ebe89c1b5f3c4cebbed2fdf46bd8acb41081e8f61c5fe94cafd6b346695225a3a7486221e0a2af47eb533d9df76234269e3c1fb1237b130c02005003577ebda9d5de2ebe6d674b8f778ed3396e3679e8407c466bccde50ce464ff5"}}, {0x6a, &(0x7f0000000d40)=@string={0x6a, 0x3, "f38e582c955cfba18652876da4cad7b9776f8ce29b4dedda98791c6c8c6d06fcc5a2e3114f325e4212eb2ab9a93ad61e983f10dbf972e839e182183ca40731f4a3b4cf7b0328476a285e33b2cd019f8776556dc67e5482b5daf7698204b2f4311815259b1f3a6dbb"}}, {0x93, &(0x7f0000000e00)=@string={0x93, 0x3, "a0c50ed9a887a18291a5f8343985d0246e0b20c29631775017baa2d35b6ccd3a8b877d770b72f61d7e2d8f4fc8d0ce270d4536124a9bd08b8bc5e95d139398cde9e324b30ef2ecc8186707476c38307d492052b205a191905b3c01bc354749d04152bfe1286c7482de982c98e341e8d5efe78e3b878f154dd7f1dbbd365c480e17a2bc1be16c65a4203b17eadee5b5d2f5"}}]}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001b40)={0x2c, &(0x7f00000019c0)={0x0, 0x12, 0x43, "49d0c3a248a312e321d2e10b437d73229395d991f0895e540cbc68bbb33c5eb5e5febe19399ec15fe5df53e6350597810beb7ec9f352203fc3ad91bc48c9329a92a27e"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0xd}, 0x0, &(0x7f0000001b00)={0x20, 0x3, 0x1, 0x5}}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001400)={0x2c, &(0x7f0000001000)={0x0, 0x1, 0x1d, {0x1d, 0xe, "e49caac74277a5fbfe6881fd6b0d0f7e50de6a58dac39c920d22ab"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, 0x0, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x8, 0x1, "47875923", "52dcf577"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x4, 0x4, 0x8, 0x6, 0x9}}}, &(0x7f0000002200)={0x84, &(0x7f0000001d40)={0x0, 0xf, 0xce, "3c4f2dd93168c2b85ea89aaf7ba9b39fda06f3a3bdbcb8fa2ed50bd92071a74273dbd8e6ee851702b50f22a561215684c61942e18a27777fe4c45605d1026a308865307127369a9e7aa5a38b0ad11f72f8451488229b23c61d0a39b965b83c5824d723578003fc2c38e860c009758271f5fe21eab48cf0a244eab07d784519d619b862b710fdfb763b267f7e5df1df131f63d1f677d67d4295a39a736f2eb44d2f3cbe9f5ba6a91f71e4b2c356a2b26d266fe9edc79ea91b33399fc766c5f6ecb746021ba39df3eea2b964249b16"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001ec0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x160, 0x4}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "96cc"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000002040)={0x40, 0x13, 0x6, @random="1289bc3c5b14"}, &(0x7f0000002080)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002180)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0xf4}}) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f00000009c0)={0x20, 0xa}, 0x0, 0x0}) 2m11.49363544s ago: executing program 2 (id=566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c", @ANYRES32=r1], 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0xa97) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 2m10.754794962s ago: executing program 1 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3", 0x2}, {&(0x7f0000000040)="5ae7", 0x2}], 0x2) 2m8.355420831s ago: executing program 3 (id=572): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c000480"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 2m7.67632929s ago: executing program 3 (id=573): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 2m7.464942813s ago: executing program 2 (id=574): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x31, 0x2, {0x2, 0xb}}, 0x0}, 0x0) 2m6.442758849s ago: executing program 2 (id=575): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)='A', 0x1) 2m6.385017065s ago: executing program 3 (id=576): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000540)={0x0, 0x1b8e, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x273c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 2m5.912521734s ago: executing program 2 (id=577): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2m5.202647045s ago: executing program 2 (id=578): mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) 2m4.829246186s ago: executing program 2 (id=579): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 2m4.589184873s ago: executing program 3 (id=581): r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x700) read(r0, 0x0, 0x0) 2m4.248231903s ago: executing program 3 (id=583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c", @ANYRES32=r1], 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0xa97) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 1m59.902068937s ago: executing program 3 (id=585): syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) prctl$PR_SET_NAME(0x4, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x10000001}) kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = accept4(r0, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x4001, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2, r7}) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000840)={0x0, "bd901608ba4bab4bf57f6b8681cc246b"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001840)={r12, 0x8, 0x1, [0x10000, 0x152, 0x3, 0x9, 0xffffffffffffffff], [0x0, 0x2, 0xa53, 0x8, 0x10001, 0x7, 0x3ff, 0xffffffff, 0x1, 0x101, 0x0, 0x2000000000002, 0x3, 0x1, 0x22a, 0x80000000, 0x6, 0x244, 0x2, 0xb0d, 0x4, 0x3, 0x8, 0x200, 0x5, 0x40, 0x0, 0x0, 0x0, 0x40, 0x3, 0x9, 0x2, 0x4, 0x7ff, 0x0, 0x8, 0x3, 0xa, 0x7fffffff, 0x6, 0xc8, 0x3, 0x6, 0x2, 0x5e, 0x735, 0x4, 0x101, 0x1, 0x2, 0x7f, 0x0, 0xbd5, 0x9, 0x0, 0x7fffffffffffffff, 0x8, 0x9, 0x800000000000000, 0x4, 0xe, 0x7, 0xfffffffffffffd1b, 0xffffffff, 0x0, 0x4, 0x2f, 0x4, 0x2, 0xfff, 0x2, 0xb, 0xb8, 0x9, 0x2f2a, 0x4, 0x100, 0xa50, 0x800, 0x81, 0x6, 0x7, 0xbd, 0x1, 0x6, 0x0, 0xb3a, 0x940a, 0x1, 0xd49f, 0xe, 0xfffffffffffffffd, 0x6, 0x8, 0x2d1f8955, 0xffffffffffffff09, 0x4, 0x4, 0xeb75, 0xfffffffffffffffc, 0x7f3d, 0xcc, 0x6, 0xfffffffffffffffb, 0xd91, 0xfffffffffffff7fd, 0x5, 0xd, 0x1002, 0x3f9, 0x0, 0x3, 0xca0, 0x1, 0x2, 0xbf, 0x200000000000000, 0xc4, 0x5, 0x8400]}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x8, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x81, 0x7, 0x5c, 0x7, 0x1, 0x81, 0xd}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x1, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1m56.500841523s ago: executing program 0 (id=588): unshare(0x8040600) r0 = syz_open_dev$cec(&(0x7f00000006c0), 0x0, 0x2100) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000740)={'hb.-', 0x7, 0x6, 0x1, 0x7, 0x0, "a2155a66a7e3459e26376cb75d271c", "0015eab1", "e89113d2", "be7fdf47", ["72d1a029d729571562cd6620", "367624832cefadd32632bb4f", "df9eba5e46a37a02e8652859", "f7c70cdb4992dec617bf9d8e"]}) 1m56.344451693s ago: executing program 0 (id=589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4}, 0x3, 0x800}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x3, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0xf4, 0x4, 0x1, 0x2, 0x2, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x7, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setpriority(0x2, 0x0, 0x18000000000) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201da22000000086b1d0101400001020301090289000301f580040904000000010120000a240107000e020102072408020500090c2402020002220106007f3309040100000102000009040101010102000009050109080000610207"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1m55.517754188s ago: executing program 33 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3", 0x2}, {&(0x7f0000000040)="5ae7", 0x2}], 0x2) 1m48.919921758s ago: executing program 34 (id=579): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 1m48.869760575s ago: executing program 0 (id=592): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000003300)=0x5, 0x4) 1m48.589987121s ago: executing program 0 (id=593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m47.55186308s ago: executing program 0 (id=594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c", @ANYRES32=r1], 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0xa97) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 1m44.7841145s ago: executing program 0 (id=595): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x2, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x407, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xe, 0x2, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r8, 0x5}, 0x8) 1m44.656190715s ago: executing program 35 (id=585): syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x79af, 0x400, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) prctl$PR_SET_NAME(0x4, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x10000001}) kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = accept4(r0, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x4001, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2, r7}) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000840)={0x0, "bd901608ba4bab4bf57f6b8681cc246b"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001840)={r12, 0x8, 0x1, [0x10000, 0x152, 0x3, 0x9, 0xffffffffffffffff], [0x0, 0x2, 0xa53, 0x8, 0x10001, 0x7, 0x3ff, 0xffffffff, 0x1, 0x101, 0x0, 0x2000000000002, 0x3, 0x1, 0x22a, 0x80000000, 0x6, 0x244, 0x2, 0xb0d, 0x4, 0x3, 0x8, 0x200, 0x5, 0x40, 0x0, 0x0, 0x0, 0x40, 0x3, 0x9, 0x2, 0x4, 0x7ff, 0x0, 0x8, 0x3, 0xa, 0x7fffffff, 0x6, 0xc8, 0x3, 0x6, 0x2, 0x5e, 0x735, 0x4, 0x101, 0x1, 0x2, 0x7f, 0x0, 0xbd5, 0x9, 0x0, 0x7fffffffffffffff, 0x8, 0x9, 0x800000000000000, 0x4, 0xe, 0x7, 0xfffffffffffffd1b, 0xffffffff, 0x0, 0x4, 0x2f, 0x4, 0x2, 0xfff, 0x2, 0xb, 0xb8, 0x9, 0x2f2a, 0x4, 0x100, 0xa50, 0x800, 0x81, 0x6, 0x7, 0xbd, 0x1, 0x6, 0x0, 0xb3a, 0x940a, 0x1, 0xd49f, 0xe, 0xfffffffffffffffd, 0x6, 0x8, 0x2d1f8955, 0xffffffffffffff09, 0x4, 0x4, 0xeb75, 0xfffffffffffffffc, 0x7f3d, 0xcc, 0x6, 0xfffffffffffffffb, 0xd91, 0xfffffffffffff7fd, 0x5, 0xd, 0x1002, 0x3f9, 0x0, 0x3, 0xca0, 0x1, 0x2, 0xbf, 0x200000000000000, 0xc4, 0x5, 0x8400]}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x8, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x81, 0x7, 0x5c, 0x7, 0x1, 0x81, 0xd}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x1, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1m40.506230569s ago: executing program 5 (id=600): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 1m39.990661893s ago: executing program 5 (id=601): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080041f00070006700000306907864010100ac1414aa072b36ccb56b23bd490a0101000a010100ac14143fffffffff0000000000000000ac1e0101ac14142dac14141a0900000183039300000000000000000000000000000000000100004e2100004e2200000001000000010000000300000000000000010a8fe534069ff8d46d195470afe5d61019472592c30ffe6063910ace3b7fc50ac4702ae0f4e7fd00b3b164f11bc16f525360ae1361f69dc7919bae7cb9f2aa16709fba1f14035e77e6bb49"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) listen(0xffffffffffffffff, 0x47) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) 1m35.785613959s ago: executing program 5 (id=602): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xffffffffffffffa8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c", @ANYRES32=r1], 0x50) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0xa97) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 1m34.401892178s ago: executing program 5 (id=603): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000000600)=[{0x1ff, 0x8000, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}, {0x7ff, 0x7010, 0x0, 0x0}], 0x3}) 1m34.21421784s ago: executing program 5 (id=604): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}]}}}, @IFLA_MASTER={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x8}, 0x0) 1m33.947234162s ago: executing program 5 (id=605): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_open_pts(0xffffffffffffffff, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2033, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m28.641279545s ago: executing program 36 (id=595): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x2, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x407, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xe, 0x2, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r8, 0x5}, 0x8) 1m18.529541019s ago: executing program 37 (id=605): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) syz_open_pts(0xffffffffffffffff, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2033, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m8.411301217s ago: executing program 7 (id=591): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) unshare(0x6020400) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) setpriority(0x2, r1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 1m6.466559832s ago: executing program 7 (id=609): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) fcntl$setsig(r0, 0x404, 0x21) 1m3.429660392s ago: executing program 7 (id=612): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}]}}}, @IFLA_MASTER={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x8}, 0x0) 1m2.908688416s ago: executing program 7 (id=613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r5], 0x10448) mq_open(&(0x7f0000000140)='s(\x00', 0x40, 0x21, &(0x7f00000001c0)={0x6, 0x7ff, 0xa4b, 0xaa}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x1, &(0x7f0000000000)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xdddd1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x7, 0xa, 0x1, 0x4, 0x0, 0x6}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0xfa}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0x80a0000, 0xe, 0x2, 0x2a, 0x2, 0x5, 0xd, 0x1, 0xe, 0x6, 0x4}, {0xf000, 0x0, 0xa, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x0, 0xff, 0x6}, {0x25000, 0x0, 0xd, 0xe, 0x13, 0x40, 0x0, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0xa0040025, 0x0, 0x6000, 0x2a01aa, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) 48.140508127s ago: executing program 8 (id=596): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r0, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 47.52888332s ago: executing program 38 (id=613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r5], 0x10448) mq_open(&(0x7f0000000140)='s(\x00', 0x40, 0x21, &(0x7f00000001c0)={0x6, 0x7ff, 0xa4b, 0xaa}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) io_setup(0x4, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x1, &(0x7f0000000000)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xdddd1000, 0x8, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x7, 0xa, 0x1, 0x4, 0x0, 0x6}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0xfa}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0x80a0000, 0xe, 0x2, 0x2a, 0x2, 0x5, 0xd, 0x1, 0xe, 0x6, 0x4}, {0xf000, 0x0, 0xa, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x0, 0xff, 0x6}, {0x25000, 0x0, 0xd, 0xe, 0x13, 0x40, 0x0, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0xa0040025, 0x0, 0x6000, 0x2a01aa, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) 47.074835125s ago: executing program 9 (id=606): unshare(0x8040600) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000740)={'hb.-', 0x7, 0x6, 0x1, 0x7, 0x0, "a2155a66a7e3459e26376cb75d271c", "0015eab1", "e89113d2", "be7fdf47", ["72d1a029d729571562cd6620", "367624832cefadd32632bb4f", "df9eba5e46a37a02e8652859", "f7c70cdb4992dec617bf9d8e"]}) 46.366702025s ago: executing program 9 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4) write$uinput_user_dev(r7, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 43.991750091s ago: executing program 9 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x48b, 0x0, 0x8}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x24040054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r5, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) 40.665912401s ago: executing program 9 (id=619): r0 = socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) 40.553393382s ago: executing program 8 (id=620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0xbed5, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22b82, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x10008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x10000815}, 0x840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) openat(r4, &(0x7f0000000100)='./file0\x00', 0x4000, 0x104) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 32.834703359s ago: executing program 6 (id=622): accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x4, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x9, {0x2, 0x8, 0x409, 0x8010002, 0x4, 0x208001, 0x0, 0x0, 0x120, 0x2000, 0xfffffffe, 0x0, 0x0, 0x501, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 32.367690701s ago: executing program 6 (id=623): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8000013, 0x20000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f00000003c0)={0x18, 0x2, {0x3, @empty}}, 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x483, 0x0, 0x0, 0x0) 29.315176485s ago: executing program 6 (id=624): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 25.260903354s ago: executing program 39 (id=619): r0 = socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) 25.260391925s ago: executing program 6 (id=626): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x7}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0xa2, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'q~A'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xfe, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x2, 0x3, 0x3, {0xa, 0x4e20, 0x395d, @mcast1, 0x8}}}, 0x3a) close(0xffffffffffffffff) 25.170132993s ago: executing program 40 (id=620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0xbed5, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22b82, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x10008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x10000815}, 0x840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) openat(r4, &(0x7f0000000100)='./file0\x00', 0x4000, 0x104) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 18.701641065s ago: executing program 6 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e44785ae9d7ff67347c3819271408a4975a52c1ab9b8b4db3945d10328f51895d704dc33a47d3a158da988456d30026b4cf186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf153871fb0d60047868b361ca6aa84dcd0b157653c5e892962c80", 0x69}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7aef9044b6ed4dce53adbaeb7778fc95aee911", 0x76}], 0x2, 0x0, 0x0, 0xfacd05679e69b95}], 0x1, 0x30040803) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) pipe(&(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) pipe(&(0x7f0000000340)) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000000) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r7, 0x29, 0xcf, 0x0, 0x4) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x38, 0x0) 15.13067747s ago: executing program 6 (id=629): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0xcd0, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_POLICE={0xc9c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x60, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf5, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd60, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0x7, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0xe9, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x2, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x0, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0x7, 0x7, {0x5, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x40, 0x0, 0xb, 0x882e, 0x3, 0x3}, 0x0, 0x5204, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$TIOCNXCL(r3, 0x540d) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 0s ago: executing program 41 (id=629): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0xcd0, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_POLICE={0xc9c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x60, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf5, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd60, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0x7, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0xe9, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x2, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x0, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0x7, 0x7, {0x5, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x40, 0x0, 0xb, 0x882e, 0x3, 0x3}, 0x0, 0x5204, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) ioctl$TIOCNXCL(r3, 0x540d) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) kernel console output (not intermixed with test programs): 32kB (UME) 317*64kB (UME) 249*128kB (ME) 78*256kB (UME) 41*512kB (UME) 8*1024kB (UM) 3*2048kB (ME) 281*4096kB (M) = 1305912kB [ 279.304921][ T7514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 279.304969][ T7514] Node 1 Normal: 168*4kB (UME) 53*8kB (UME) 36*16kB (UME) 218*32kB (UME) 84*64kB (UME) 27*128kB (UME) 14*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3894856kB [ 279.305055][ T7514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.305064][ T7514] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.305074][ T7514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.305083][ T7514] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.305091][ T7514] 63943 total pagecache pages [ 279.305097][ T7514] 0 pages in swap cache [ 279.305101][ T7514] Free swap = 124996kB [ 279.305104][ T7514] Total swap = 124996kB [ 279.305108][ T7514] 2097051 pages RAM [ 279.305112][ T7514] 0 pages HighMem/MovableOnly [ 279.305115][ T7514] 423434 pages reserved [ 279.305119][ T7514] 0 pages cma reserved [ 279.525793][ T996] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.645701][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 279.795575][ T996] usb 2-1: Using ep0 maxpacket: 32 [ 279.795652][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 279.803406][ T44] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.803440][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.803474][ T44] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 279.803495][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.859598][ T996] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.859619][ T996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 279.859634][ T996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.859659][ T996] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 279.859671][ T996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.022331][ T996] usb 2-1: config 0 descriptor?? [ 280.025974][ T7513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.027765][ T996] hub 2-1:0.0: USB hub found [ 280.136498][ T44] usb 4-1: config 0 descriptor?? [ 280.295688][ T996] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 280.645072][ T44] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 280.717748][ T996] usbhid 2-1:0.0: can't add hid device: -32 [ 280.717870][ T996] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 280.780185][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.447'. [ 280.817071][ T996] usb 2-1: USB disconnect, device number 22 [ 281.098341][ T44] usb 4-1: USB disconnect, device number 17 [ 281.206662][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.448'. [ 281.285035][ T7525] fido_id[7525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 281.494095][ T7536] Zero length message leads to an empty skb [ 286.245667][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.431658][ T44] usb 4-1: config 0 has no interfaces? [ 286.434434][ T44] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 286.434463][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.434482][ T44] usb 4-1: Product: syz [ 286.434489][ T44] usb 4-1: Manufacturer: syz [ 286.434496][ T44] usb 4-1: SerialNumber: syz [ 286.505311][ T44] usb 4-1: config 0 descriptor?? [ 286.869711][ T7565] syzkaller0: entered promiscuous mode [ 286.869734][ T7565] syzkaller0: entered allmulticast mode [ 286.977123][ T890] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 287.138388][ T890] usb 3-1: Using ep0 maxpacket: 8 [ 287.164835][ T890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.164890][ T890] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.164928][ T890] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.164949][ T890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.178267][ T890] usb 3-1: config 0 descriptor?? [ 287.183622][ T890] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 287.217620][ T7565] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.515877][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.620447][ T5873] usb 4-1: USB disconnect, device number 18 [ 287.667248][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.667287][ T44] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.667311][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.670996][ T44] usb 5-1: config 0 descriptor?? [ 287.688466][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 287.885691][ T5882] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 288.035699][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 288.043622][ T5882] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.043651][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0 [ 288.043708][ T5882] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 288.043720][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.050945][ T5882] usb 1-1: config 0 descriptor?? [ 288.086073][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.087198][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.088146][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.089802][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.096981][ T44] pwc: recv_control_msg error -32 req 04 val 1300 [ 288.098739][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 288.100275][ T44] pwc: recv_control_msg error -32 req 02 val 2000 [ 288.343432][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.467536][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.470564][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 288.472926][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 288.474059][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 288.475256][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 288.475801][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 288.476861][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.516398][ T44] pwc: Registered as video103. [ 288.519500][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 288.552739][ T5882] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 288.561339][ T7585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.561366][ T7585] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 288.759985][ T7585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.760040][ T7585] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 288.802206][ T44] usb 5-1: USB disconnect, device number 17 [ 288.986436][ T5873] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 289.087944][ T5882] usb 1-1: USB disconnect, device number 16 [ 289.096754][ T7585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.096780][ T7585] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 289.145712][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 289.147442][ T5873] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 289.147460][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.169348][ T5873] usb 4-1: config 0 descriptor?? [ 289.305338][ T5873] gspca_main: sunplus-2.14.0 probing 041e:400b [ 289.311472][ T7590] fido_id[7590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 289.577995][ T7585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.578019][ T7585] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 289.712984][ T7585] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.713040][ T7585] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 289.786375][ T5873] gspca_sunplus: reg_r err -71 [ 289.786474][ T5873] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 289.794247][ T5873] usb 4-1: USB disconnect, device number 19 [ 289.850936][ T5882] usb 3-1: USB disconnect, device number 25 [ 291.178527][ T7609] syz.4.471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.178573][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.4.471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 291.178586][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 291.178594][ T7609] Call Trace: [ 291.178599][ T7609] [ 291.178604][ T7609] dump_stack_lvl+0xe8/0x150 [ 291.178624][ T7609] warn_alloc+0x263/0x3e0 [ 291.178642][ T7609] ? stack_trace_save+0xa9/0x100 [ 291.178654][ T7609] ? __pfx_warn_alloc+0x10/0x10 [ 291.178673][ T7609] ? kasan_save_track+0x4f/0x80 [ 291.178686][ T7609] ? kasan_save_track+0x3e/0x80 [ 291.178698][ T7609] ? __kasan_kmalloc+0x93/0xb0 [ 291.178710][ T7609] ? __kmalloc_cache_noprof+0x1f2/0x6b0 [ 291.178725][ T7609] ? xskq_create+0x56/0x170 [ 291.178737][ T7609] ? xsk_setsockopt+0x54c/0x990 [ 291.178747][ T7609] ? do_sock_setsockopt+0x17c/0x1b0 [ 291.178758][ T7609] ? __x64_sys_setsockopt+0x143/0x1b0 [ 291.178767][ T7609] ? do_syscall_64+0xe2/0xf80 [ 291.178783][ T7609] __vmalloc_node_range_noprof+0x132/0x1730 [ 291.178814][ T7609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.178832][ T7609] ? __kasan_kmalloc+0x93/0xb0 [ 291.178849][ T7609] vmalloc_user_noprof+0xad/0xe0 [ 291.178863][ T7609] ? xskq_create+0xbf/0x170 [ 291.178876][ T7609] xskq_create+0xbf/0x170 [ 291.178889][ T7609] xsk_init_queue+0xad/0x110 [ 291.178902][ T7609] xsk_setsockopt+0x54c/0x990 [ 291.178915][ T7609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.178932][ T7609] ? __fget_files+0x2a/0x420 [ 291.178949][ T7609] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.178964][ T7609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.178977][ T7609] do_sock_setsockopt+0x17c/0x1b0 [ 291.178990][ T7609] __x64_sys_setsockopt+0x143/0x1b0 [ 291.179004][ T7609] do_syscall_64+0xe2/0xf80 [ 291.179017][ T7609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.179028][ T7609] ? trace_irq_disable+0x37/0x100 [ 291.179041][ T7609] ? clear_bhb_loop+0x60/0xb0 [ 291.179053][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.179063][ T7609] RIP: 0033:0x7f273432aeb9 [ 291.179073][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.179083][ T7609] RSP: 002b:00007f273257e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.179094][ T7609] RAX: ffffffffffffffda RBX: 00007f27345a5fa0 RCX: 00007f273432aeb9 [ 291.179102][ T7609] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 291.179108][ T7609] RBP: 00007f2734398c1f R08: 0000000000000004 R09: 0000000000000000 [ 291.179115][ T7609] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.179121][ T7609] R13: 00007f27345a6038 R14: 00007f27345a5fa0 R15: 00007ffc7fa68ad8 [ 291.179137][ T7609] [ 291.179141][ T7609] Mem-Info: [ 291.179147][ T7609] active_anon:248 inactive_anon:6587 isolated_anon:0 [ 291.179147][ T7609] active_file:21578 inactive_file:38169 isolated_file:0 [ 291.179147][ T7609] unevictable:1021 dirty:286 writeback:0 [ 291.179147][ T7609] slab_reclaimable:11344 slab_unreclaimable:101526 [ 291.179147][ T7609] mapped:30067 shmem:1359 pagetables:1292 [ 291.179147][ T7609] sec_pagetables:0 bounce:0 [ 291.179147][ T7609] kernel_misc_reclaimable:0 [ 291.179147][ T7609] free:1308036 free_pcp:5629 free_cma:0 [ 291.179176][ T7609] Node 0 active_anon:992kB inactive_anon:26348kB active_file:86112kB inactive_file:152676kB unevictable:2548kB isolated(anon):0kB isolated(file):0kB mapped:120268kB dirty:1144kB writeback:0kB shmem:3900kB kernel_stack:13084kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.179201][ T7609] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.179225][ T7609] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.179256][ T7609] lowmem_reserve[]: 0 2507 2507 2507 2507 [ 291.179274][ T7609] Node 0 DMA32 free:1321932kB boost:0kB min:3932kB low:6472kB high:9012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:992kB inactive_anon:26348kB active_file:86112kB inactive_file:152676kB unevictable:2548kB writepending:1144kB zspages:0kB present:3129332kB managed:2567388kB mlocked:1116kB bounce:0kB free_pcp:22516kB local_pcp:12228kB free_cma:0kB [ 291.179309][ T7609] lowmem_reserve[]: 0 0 0 0 0 [ 291.179325][ T7609] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.179358][ T7609] lowmem_reserve[]: 0 0 0 0 0 [ 291.179374][ T7609] Node 1 Normal free:3894856kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.179405][ T7609] lowmem_reserve[]: 0 0 0 0 0 [ 291.179420][ T7609] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 291.179495][ T7609] Node 0 DMA32: 2330*4kB (UM) 1792*8kB (UME) 1046*16kB (UME) 296*32kB (UME) 348*64kB (UME) 264*128kB (ME) 86*256kB (UME) 46*512kB (UME) 11*1024kB (UM) 6*2048kB (ME) 280*4096kB (M) = 1321928kB [ 291.179572][ T7609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.179620][ T7609] Node 1 Normal: 168*4kB (UME) 53*8kB (UME) 36*16kB (UME) 218*32kB (UME) 84*64kB (UME) 27*128kB (UME) 14*256kB (UM) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3894856kB [ 291.179698][ T7609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.179706][ T7609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.179715][ T7609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.179723][ T7609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.179731][ T7609] 61102 total pagecache pages [ 291.179735][ T7609] 0 pages in swap cache [ 291.179739][ T7609] Free swap = 124996kB [ 291.179742][ T7609] Total swap = 124996kB [ 291.179746][ T7609] 2097051 pages RAM [ 291.179750][ T7609] 0 pages HighMem/MovableOnly [ 291.179753][ T7609] 423434 pages reserved [ 291.179757][ T7609] 0 pages cma reserved [ 293.734740][ T7629] netlink: 76 bytes leftover after parsing attributes in process `syz.1.474'. [ 295.465675][ T890] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 295.575684][ T5882] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.625829][ T890] usb 5-1: Using ep0 maxpacket: 16 [ 295.627728][ T890] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.627746][ T890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.627765][ T890] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 295.627777][ T890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.687581][ T890] usb 5-1: config 0 descriptor?? [ 295.765844][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 295.773938][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.773972][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 295.773999][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 295.774040][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.774061][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.787866][ T5882] usb 1-1: config 0 descriptor?? [ 295.817867][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 295.867238][ T5882] hub 1-1:0.0: USB hub found [ 296.033555][ T5882] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 296.591859][ T890] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 296.653050][ T5882] usbhid 1-1:0.0: can't add hid device: -32 [ 296.653169][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 296.749377][ T890] usb 5-1: USB disconnect, device number 18 [ 296.761412][ T5882] usb 1-1: USB disconnect, device number 17 [ 296.983893][ T7662] fido_id[7662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 299.795693][ T5883] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 299.945678][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 299.950032][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.950079][ T5883] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.950103][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.233945][ T5883] usb 1-1: config 0 descriptor?? [ 300.254390][ T5883] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 300.845623][ T5907] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 301.135667][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 301.137929][ T5907] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 301.137956][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.141299][ T5907] usb 2-1: config 0 descriptor?? [ 301.148544][ T5907] gspca_main: sunplus-2.14.0 probing 041e:400b [ 302.009886][ T5907] gspca_sunplus: reg_w_riv err -110 [ 302.009985][ T5907] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 302.578060][ T5883] usb 1-1: USB disconnect, device number 18 [ 303.078636][ T5883] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 303.225641][ T5907] usb 2-1: USB disconnect, device number 23 [ 303.925658][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 304.117925][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.117957][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 304.117983][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.118027][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.118055][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.136525][ T5883] usb 4-1: config 0 descriptor?? [ 304.138544][ T7713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.144660][ T5883] hub 4-1:0.0: USB hub found [ 304.315838][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 304.359905][ T5883] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 304.764882][ T5883] usbhid 4-1:0.0: can't add hid device: -32 [ 304.765003][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 304.852077][ T5883] usb 4-1: USB disconnect, device number 20 [ 305.202729][ T5873] IPVS: starting estimator thread 0... [ 305.292997][ T7738] IPVS: using max 9 ests per chain, 21600 per kthread [ 305.331025][ T7741] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 307.815653][ T890] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 307.976831][ T890] usb 2-1: Using ep0 maxpacket: 32 [ 307.979418][ T890] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 307.979454][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.025885][ T890] usb 2-1: config 0 descriptor?? [ 308.075127][ T890] gspca_main: sunplus-2.14.0 probing 041e:400b [ 308.086772][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.514'. [ 308.903708][ T890] gspca_sunplus: reg_r err -71 [ 308.903769][ T890] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 308.945860][ T890] usb 2-1: USB disconnect, device number 24 [ 312.971824][ T37] audit: type=1326 audit(1770456301.673:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971869][ T37] audit: type=1326 audit(1770456301.683:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971891][ T37] audit: type=1326 audit(1770456301.703:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971912][ T37] audit: type=1326 audit(1770456301.703:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971932][ T37] audit: type=1326 audit(1770456301.703:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971953][ T37] audit: type=1326 audit(1770456301.703:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.971973][ T37] audit: type=1326 audit(1770456301.703:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27342eb78e code=0x7ffc0000 [ 312.971994][ T37] audit: type=1326 audit(1770456301.713:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.972014][ T37] audit: type=1326 audit(1770456301.713:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 312.972035][ T37] audit: type=1326 audit(1770456301.713:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7798 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273432aeb9 code=0x7ffc0000 [ 314.742387][ T7815] netlink: 76 bytes leftover after parsing attributes in process `syz.0.526'. [ 316.715722][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 316.865621][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 316.868420][ T5882] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 316.868450][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.915115][ T5882] usb 2-1: config 0 descriptor?? [ 316.951407][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b [ 317.253517][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254829][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661307][ T5882] gspca_sunplus: reg_w_riv err -110 [ 317.661406][ T5882] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 319.381202][ T5858] usb 2-1: USB disconnect, device number 25 [ 320.122148][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 320.262005][ T7853] futex_wake_op: syz.1.537 tries to shift op by -1; fix this program [ 320.575649][ T5858] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 321.503704][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 321.510952][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 321.513210][ T5858] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.513228][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.513238][ T5858] usb 4-1: Product: syz [ 321.513246][ T5858] usb 4-1: Manufacturer: syz [ 321.513253][ T5858] usb 4-1: SerialNumber: syz [ 321.537996][ T5858] usb 4-1: config 0 descriptor?? [ 321.543420][ T7842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.015777][ T5873] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 327.165692][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 327.172797][ T44] usb 4-1: USB disconnect, device number 21 [ 327.228271][ T5873] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 327.228301][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.649099][ T5873] usb 3-1: config 0 descriptor?? [ 327.805230][ T5873] gspca_main: sunplus-2.14.0 probing 041e:400b [ 328.457316][ T5873] gspca_sunplus: reg_r err -71 [ 328.457414][ T5873] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 328.535744][ T5873] usb 3-1: USB disconnect, device number 26 [ 338.376766][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.397707][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.426108][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.432776][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.433568][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.465652][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.483077][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.483811][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.484964][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.498669][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.548639][ T5873] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 339.763688][ T5873] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.763716][ T5873] usb 2-1: config 0 has no interface number 0 [ 339.763750][ T5873] usb 2-1: config 0 interface 1 has no altsetting 0 [ 339.807000][ T5873] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 339.807032][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.807052][ T5873] usb 2-1: Product: syz [ 339.807065][ T5873] usb 2-1: Manufacturer: syz [ 339.807080][ T5873] usb 2-1: SerialNumber: syz [ 339.878216][ T5873] usb 2-1: config 0 descriptor?? [ 340.230081][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.230586][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.254779][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.255277][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.596623][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.597044][ T5806] Bluetooth: hci5: command tx timeout [ 340.597713][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.669014][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.671521][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.696939][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.697487][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.456274][ T5873] msi2500 2-1:0.1: Registered as swradio24 [ 341.456289][ T5873] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 341.464108][ T5873] usb 2-1: USB disconnect, device number 26 [ 341.568704][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 342.676123][ T5806] Bluetooth: hci5: command tx timeout [ 344.040565][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.054431][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.054674][ T7938] bridge_slave_0: entered allmulticast mode [ 344.084967][ T7938] bridge_slave_0: entered promiscuous mode [ 344.280560][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.338859][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.339115][ T7938] bridge_slave_1: entered allmulticast mode [ 344.341702][ T7938] bridge_slave_1: entered promiscuous mode [ 344.668834][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.757963][ T5806] Bluetooth: hci5: command tx timeout [ 344.787107][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.636504][ T7938] team0: Port device team_slave_0 added [ 345.654157][ T7938] team0: Port device team_slave_1 added [ 346.661215][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.661232][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.661257][ T7938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.739660][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.739677][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.739704][ T7938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.849233][ T5806] Bluetooth: hci5: command tx timeout [ 347.515869][ T7938] hsr_slave_0: entered promiscuous mode [ 347.520735][ T7938] hsr_slave_1: entered promiscuous mode [ 347.528747][ T7938] debugfs: 'hsr0' already exists in 'hsr' [ 347.528776][ T7938] Cannot create hsr debugfs directory [ 348.242081][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 353.829609][ T8035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 354.303098][ T7938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.710276][ T7938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.864323][ T7938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.982003][ T7938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.648007][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.796711][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.856087][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.887847][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.888065][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.924187][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.924424][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.794440][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.923811][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.925267][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.936500][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.045698][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 357.325873][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 357.379390][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.383822][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.383846][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.383883][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.443664][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.443695][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.443715][ T5882] usb 1-1: Product: syz [ 357.443729][ T5882] usb 1-1: Manufacturer: syz [ 357.443743][ T5882] usb 1-1: SerialNumber: syz [ 357.786357][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.788091][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.818219][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.912320][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.936984][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.953620][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.961812][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.964825][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.494443][ T1527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.560103][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.583406][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.845647][ T5907] net_ratelimit: 1 callbacks suppressed [ 360.845666][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.485780][ T5806] Bluetooth: hci4: command tx timeout [ 361.562430][ T7938] veth0_vlan: entered promiscuous mode [ 361.725391][ T7938] veth1_vlan: entered promiscuous mode [ 361.781161][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.679650][ T5882] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 362.840451][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.963303][ T7938] veth0_macvtap: entered promiscuous mode [ 362.991685][ T7938] veth1_macvtap: entered promiscuous mode [ 363.021107][ T5882] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 363.044992][ T5882] usb 1-1: USB disconnect, device number 19 [ 363.209998][ T8038] udevd[8038]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.262561][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.355691][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.383125][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 363.426709][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.454426][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.465414][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.486834][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.556017][ T5806] Bluetooth: hci4: command tx timeout [ 363.875902][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.875949][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.465376][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.499987][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.502410][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.524432][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.525237][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.917216][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.647214][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.647345][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.647607][ T8068] bridge_slave_0: entered allmulticast mode [ 365.650131][ T8068] bridge_slave_0: entered promiscuous mode [ 365.652327][ T5812] Bluetooth: hci4: command tx timeout [ 365.723743][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.723870][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.724117][ T8068] bridge_slave_1: entered allmulticast mode [ 365.770268][ T8068] bridge_slave_1: entered promiscuous mode [ 365.955939][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.155467][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.605786][ T5812] Bluetooth: hci6: command tx timeout [ 366.616124][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.709888][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.915783][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.996415][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.715703][ T5812] Bluetooth: hci4: command tx timeout [ 368.036720][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.267678][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.267700][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.436283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.675667][ T5812] Bluetooth: hci6: command tx timeout [ 368.977470][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.983569][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.984905][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.111668][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.135130][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.156968][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.248507][ T8068] team0: Port device team_slave_0 added [ 369.289341][ T8068] team0: Port device team_slave_1 added [ 369.412650][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.412667][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.412692][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.464343][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.464363][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.490902][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.490919][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.490946][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.955885][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.173532][ T8068] hsr_slave_0: entered promiscuous mode [ 370.174974][ T8068] hsr_slave_1: entered promiscuous mode [ 370.190515][ T8068] debugfs: 'hsr0' already exists in 'hsr' [ 370.190545][ T8068] Cannot create hsr debugfs directory [ 370.235740][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.755668][ T5812] Bluetooth: hci6: command tx timeout [ 371.014466][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 371.235672][ T5812] Bluetooth: hci7: command tx timeout [ 371.345996][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.459242][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 371.459263][ T37] audit: type=1326 audit(1770456360.283:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8109 comm="syz.5.599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dc8d0aeb9 code=0x0 [ 372.046813][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.047049][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.047279][ T8081] bridge_slave_0: entered allmulticast mode [ 372.061891][ T8081] bridge_slave_0: entered promiscuous mode [ 372.130672][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.130805][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.131355][ T8081] bridge_slave_1: entered allmulticast mode [ 372.170055][ T8081] bridge_slave_1: entered promiscuous mode [ 372.385902][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.511589][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.559998][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 372.595481][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.835661][ T5812] Bluetooth: hci6: command tx timeout [ 372.888535][ T8081] team0: Port device team_slave_0 added [ 372.934056][ T8081] team0: Port device team_slave_1 added [ 372.959002][ T8068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.995947][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.325729][ T5812] Bluetooth: hci7: command tx timeout [ 373.396410][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.023014][ T8127] netlink: 64 bytes leftover after parsing attributes in process `syz.5.601'. [ 374.190969][ T8068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.482046][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.744581][ T8068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.872403][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.872420][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.872446][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.002573][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.002590][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.002616][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.003512][ T8068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.351182][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.351385][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.351579][ T8094] bridge_slave_0: entered allmulticast mode [ 375.354171][ T8094] bridge_slave_0: entered promiscuous mode [ 375.395712][ T5812] Bluetooth: hci7: command tx timeout [ 375.616622][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.006971][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.007108][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.007307][ T8094] bridge_slave_1: entered allmulticast mode [ 376.011706][ T8094] bridge_slave_1: entered promiscuous mode [ 376.044051][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.115838][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.493162][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.520520][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.550269][ T8081] hsr_slave_0: entered promiscuous mode [ 376.551474][ T8081] hsr_slave_1: entered promiscuous mode [ 376.552167][ T8081] debugfs: 'hsr0' already exists in 'hsr' [ 376.552187][ T8081] Cannot create hsr debugfs directory [ 376.676286][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.914294][ T8094] team0: Port device team_slave_0 added [ 376.959956][ T8094] team0: Port device team_slave_1 added [ 377.390184][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.390202][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.390228][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.464820][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.464837][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.464863][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.485751][ T5812] Bluetooth: hci7: command tx timeout [ 377.731221][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.561037][ T8094] hsr_slave_0: entered promiscuous mode [ 378.593206][ T8094] hsr_slave_1: entered promiscuous mode [ 378.628623][ T8094] debugfs: 'hsr0' already exists in 'hsr' [ 378.628653][ T8094] Cannot create hsr debugfs directory [ 378.680563][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.680633][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.756738][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.075776][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.098299][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.605'. [ 379.613823][ T8148] vlan2: entered promiscuous mode [ 379.614106][ T8148] vlan2: entered allmulticast mode [ 379.614121][ T8148] hsr_slave_1: entered allmulticast mode [ 379.796399][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.836152][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.877528][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.115800][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.916693][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.789212][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.790536][ T8081] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 383.989369][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.350004][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.370534][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.375373][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.398744][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.399970][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.472543][ T8081] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.748002][ T8081] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.004368][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.023274][ T8081] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 385.155889][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.718623][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.036478][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.176925][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.322379][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.322657][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.426851][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.427002][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.516502][ T5806] Bluetooth: hci1: command tx timeout [ 386.524204][ T8094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 386.987588][ T8094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.125174][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.731870][ T8094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.198335][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.205951][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.272779][ T8094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.596068][ T5806] Bluetooth: hci1: command tx timeout [ 388.979104][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.071575][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 389.277888][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.301259][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.490862][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.490996][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.523560][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.538922][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.750078][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.750201][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.750456][ T8153] bridge_slave_0: entered allmulticast mode [ 389.753169][ T8153] bridge_slave_0: entered promiscuous mode [ 389.809097][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.810459][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.810636][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.810853][ T8153] bridge_slave_1: entered allmulticast mode [ 389.865824][ T8153] bridge_slave_1: entered promiscuous mode [ 390.366467][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.439540][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.451043][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.530253][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.589418][ T8153] team0: Port device team_slave_0 added [ 390.617101][ T8153] team0: Port device team_slave_1 added [ 390.683864][ T5806] Bluetooth: hci1: command tx timeout [ 391.048569][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.048731][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.277574][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.395894][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.411998][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.412015][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.412040][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.488603][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.504958][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.505123][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.543501][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.543514][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.543528][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.928351][ T8153] hsr_slave_0: entered promiscuous mode [ 391.929719][ T8153] hsr_slave_1: entered promiscuous mode [ 391.930665][ T8153] debugfs: 'hsr0' already exists in 'hsr' [ 391.930688][ T8153] Cannot create hsr debugfs directory [ 392.446073][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.775719][ T5806] Bluetooth: hci1: command tx timeout [ 393.029183][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.241584][ T8068] veth0_vlan: entered promiscuous mode [ 393.476111][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.549116][ T8068] veth1_vlan: entered promiscuous mode [ 393.817486][ T8153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.153201][ T8153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.295626][ T8153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.365692][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.810156][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.862305][ T8153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 395.123018][ T8068] veth0_macvtap: entered promiscuous mode [ 395.168380][ T8068] veth1_macvtap: entered promiscuous mode [ 395.201397][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.315853][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.418783][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 395.422672][ T5812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 395.423845][ T5812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 395.490360][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.536356][ T5812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 395.537099][ T5812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 395.596419][ T8081] veth0_vlan: entered promiscuous mode [ 395.599282][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.714885][ T1525] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.730040][ T1525] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.749554][ T8081] veth1_vlan: entered promiscuous mode [ 395.751544][ T1525] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.754891][ T1525] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.876491][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.930022][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.467938][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.639417][ T5812] Bluetooth: hci8: command tx timeout [ 397.963708][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.139023][ T8081] veth0_macvtap: entered promiscuous mode [ 398.167777][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.167800][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.218154][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.218934][ T8081] veth1_macvtap: entered promiscuous mode [ 398.444650][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.444672][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.572221][ T8094] veth0_vlan: entered promiscuous mode [ 398.583159][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.623619][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.677042][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.677491][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.736725][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.740566][ T8094] veth1_vlan: entered promiscuous mode [ 398.780406][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.784807][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.914681][ T1525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.929922][ T1525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.933418][ T1525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.970448][ T1525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.997463][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.715911][ T5812] Bluetooth: hci8: command tx timeout [ 399.802810][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 399.861828][ T8094] veth0_macvtap: entered promiscuous mode [ 400.047808][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.101237][ T8094] veth1_macvtap: entered promiscuous mode [ 400.441647][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.547025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.547047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.096639][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.256652][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.256778][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.257058][ T8205] bridge_slave_0: entered allmulticast mode [ 401.262613][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.608'. [ 401.266491][ T8205] bridge_slave_0: entered promiscuous mode [ 401.795802][ T5812] Bluetooth: hci8: command tx timeout [ 402.183110][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.235190][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.235315][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.235701][ T8205] bridge_slave_1: entered allmulticast mode [ 402.238171][ T8205] bridge_slave_1: entered promiscuous mode [ 402.262005][ T8231] futex_wake_op: syz.6.608 tries to shift op by -1; fix this program [ 402.900699][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.142155][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.142177][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.236781][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.420871][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.456966][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.476356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.540639][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.952353][ T5812] Bluetooth: hci8: command tx timeout [ 404.172814][ T1450] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.277722][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.334085][ T1450] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.481503][ T8205] team0: Port device team_slave_0 added [ 404.518674][ T1450] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.566169][ T1450] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.761587][ T8205] team0: Port device team_slave_1 added [ 406.152519][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.348517][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.635392][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.263235][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.263252][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.263279][ T8205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.270792][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.270809][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.270834][ T8205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.477424][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.522926][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.570667][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.086956][ T8205] hsr_slave_0: entered promiscuous mode [ 409.087781][ T8205] hsr_slave_1: entered promiscuous mode [ 409.088342][ T8205] debugfs: 'hsr0' already exists in 'hsr' [ 409.088357][ T8205] Cannot create hsr debugfs directory [ 409.636127][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.684648][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.976942][ T8248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 409.976967][ T8248] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 410.687544][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.708879][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.708899][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.052255][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.840957][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.890289][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.329136][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.604898][ T8248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.604928][ T8248] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 415.895827][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.409573][ T8248] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 416.409605][ T8248] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 416.469577][ T8153] veth0_vlan: entered promiscuous mode [ 416.962342][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.259698][ T8248] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 417.259725][ T8248] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 417.459278][ T8205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.729599][ T8153] veth1_vlan: entered promiscuous mode [ 417.997895][ T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.097263][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.118874][ T8248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.118899][ T8248] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 419.158711][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.444594][ T8153] veth0_macvtap: entered promiscuous mode [ 419.585113][ T8153] veth1_macvtap: entered promiscuous mode [ 419.763378][ T8248] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 419.763410][ T8248] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 419.917681][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.923185][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.980964][ T162] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.981016][ T162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.981051][ T162] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.981086][ T162] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.201516][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.315878][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.796888][ T5812] Bluetooth: hci8: command 0x0c1a tx timeout [ 422.458911][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.481749][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.055853][ T1527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.055873][ T1527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.865761][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.192954][ T1525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.192976][ T1525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.636301][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.636322][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.070869][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.091184][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.571062][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.147165][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.065791][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.616'. [ 427.752151][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.059063][ T5806] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 428.064440][ T5806] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 428.088614][ T5806] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 428.090444][ T5806] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 428.114266][ T5806] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 428.701341][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.755949][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.796492][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.290459][ T5812] Bluetooth: hci9: command tx timeout [ 430.846463][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.715863][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.876851][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.358340][ T5812] Bluetooth: hci9: command tx timeout [ 432.916758][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.956364][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.516562][ T5812] Bluetooth: hci9: command tx timeout [ 434.605645][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.782090][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.806494][ T8317] program syz.6.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.996895][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.718455][ T8308] tipc: Started in network mode [ 435.718486][ T8308] tipc: Node identity 7f000001, cluster identity 4711 [ 435.719846][ T8308] tipc: Enabling of bearer rejected, failed to enable media [ 436.595947][ T5812] Bluetooth: hci9: command tx timeout [ 436.671603][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.795818][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.795887][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.617153][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 439.896678][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.048821][ T8331] loop2: detected capacity change from 0 to 7 [ 440.128517][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.128589][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.238486][ T8331] Dev loop2: unable to read RDB block 7 [ 440.238537][ T8331] loop2: unable to read partition table [ 440.238778][ T8331] loop2: partition table beyond EOD, truncated [ 440.238796][ T8331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.699456][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.699655][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.699930][ T8290] bridge_slave_0: entered allmulticast mode [ 440.703118][ T8290] bridge_slave_0: entered promiscuous mode [ 440.739531][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.739884][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.740177][ T8290] bridge_slave_1: entered allmulticast mode [ 440.745110][ T8290] bridge_slave_1: entered promiscuous mode [ 440.834315][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.838024][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.863646][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.919898][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.920160][ T8290] team0: Port device team_slave_0 added [ 441.980544][ T8290] team0: Port device team_slave_1 added [ 441.991743][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.090616][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.090633][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.090658][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.092985][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.093008][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.093033][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.176635][ T8290] hsr_slave_0: entered promiscuous mode [ 442.178093][ T8290] hsr_slave_1: entered promiscuous mode [ 442.179053][ T8290] debugfs: 'hsr0' already exists in 'hsr' [ 442.179083][ T8290] Cannot create hsr debugfs directory [ 442.996338][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.036362][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.246119][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.246353][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.356373][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.316063][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.433264][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.888004][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.007858][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.015858][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.040144][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.056217][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.442208][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.079389][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.094079][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.111292][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.115819][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.127738][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.265810][ T6925] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 449.266083][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 449.501550][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.645676][ T6925] usb 7-1: device descriptor read/64, error -32 [ 449.905705][ T6925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 450.150621][ T6925] usb 7-1: Using ep0 maxpacket: 16 [ 450.159640][ T6925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 450.159689][ T6925] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 450.201618][ T5806] Bluetooth: hci2: command tx timeout [ 450.516313][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.623558][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.235713][ T5806] Bluetooth: hci3: command tx timeout [ 451.458075][ T8352] chnl_net:caif_netlink_parms(): no params data found [ 451.682109][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.279404][ T5806] Bluetooth: hci2: command tx timeout [ 452.778864][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.315662][ T5806] Bluetooth: hci3: command tx timeout [ 453.557289][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.560711][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.800388][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.904538][ T6925] usb 7-1: string descriptor 0 read error: -71 [ 453.904710][ T6925] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.904734][ T6925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.913877][ T6925] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 453.913903][ T6925] usb 7-1: no configuration chosen from 1 choice [ 453.985758][ T6925] usb 7-1: USB disconnect, device number 3 [ 454.291783][ T8357] chnl_net:caif_netlink_parms(): no params data found [ 454.355095][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.355234][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.355878][ T5806] Bluetooth: hci2: command tx timeout [ 454.356093][ T8352] bridge_slave_0: entered allmulticast mode [ 454.358645][ T8352] bridge_slave_0: entered promiscuous mode [ 454.384270][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.384417][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.384944][ T8352] bridge_slave_1: entered allmulticast mode [ 454.388480][ T8352] bridge_slave_1: entered promiscuous mode [ 454.851160][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.059387][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.087968][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.395764][ T5806] Bluetooth: hci3: command tx timeout [ 455.891155][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.382447][ T8352] team0: Port device team_slave_0 added [ 456.435717][ T5806] Bluetooth: hci2: command tx timeout [ 456.599876][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.804178][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.804311][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.804606][ T8357] bridge_slave_0: entered allmulticast mode [ 456.808859][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.831698][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 456.840440][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 456.847175][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 456.847906][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.902326][ T8357] bridge_slave_0: entered promiscuous mode [ 456.916602][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.928528][ T8352] team0: Port device team_slave_1 added [ 456.942572][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.942706][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.942996][ T8357] bridge_slave_1: entered allmulticast mode [ 456.977570][ T8357] bridge_slave_1: entered promiscuous mode [ 457.354212][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.354228][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.354255][ T8352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.400702][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.400719][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.400745][ T8352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.485720][ T5806] Bluetooth: hci3: command tx timeout [ 457.549029][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.713733][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.956514][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.915935][ T5806] Bluetooth: hci6: command tx timeout [ 458.978543][ T8357] team0: Port device team_slave_0 added [ 458.996372][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.197858][ T8352] hsr_slave_0: entered promiscuous mode [ 459.199418][ T8352] hsr_slave_1: entered promiscuous mode [ 459.200444][ T8352] debugfs: 'hsr0' already exists in 'hsr' [ 459.200468][ T8352] Cannot create hsr debugfs directory [ 459.262517][ T8357] team0: Port device team_slave_1 added [ 459.635813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.055366][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.106607][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.106618][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.106633][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.018202][ T5806] Bluetooth: hci6: command tx timeout [ 461.129215][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.356599][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.413497][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.413514][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.413541][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.775688][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.076214][ T5806] Bluetooth: hci6: command tx timeout [ 463.156655][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.273803][ T8357] hsr_slave_0: entered promiscuous mode [ 463.274677][ T8357] hsr_slave_1: entered promiscuous mode [ 463.275253][ T8357] debugfs: 'hsr0' already exists in 'hsr' [ 463.275267][ T8357] Cannot create hsr debugfs directory [ 463.496283][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.516074][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.155846][ T5806] Bluetooth: hci6: command tx timeout [ 465.556288][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.005781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.378758][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 466.596114][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.723472][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.723698][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.724230][ T8381] bridge_slave_0: entered allmulticast mode [ 466.763715][ T8381] bridge_slave_0: entered promiscuous mode [ 466.774674][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.774818][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.775112][ T8381] bridge_slave_1: entered allmulticast mode [ 466.802764][ T8381] bridge_slave_1: entered promiscuous mode [ 466.895195][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.920602][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.990016][ T8381] team0: Port device team_slave_0 added [ 466.994406][ T8381] team0: Port device team_slave_1 added [ 467.061897][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.061916][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.061942][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.064358][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.064372][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.064397][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.636098][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.676063][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.075920][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.219934][ T8381] hsr_slave_0: entered promiscuous mode [ 469.221114][ T8381] hsr_slave_1: entered promiscuous mode [ 469.221898][ T8381] debugfs: 'hsr0' already exists in 'hsr' [ 469.221917][ T8381] Cannot create hsr debugfs directory [ 469.715963][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.756207][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.796753][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.117354][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.755999][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.836166][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.430182][ T5812] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 473.464516][ T5812] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 473.486755][ T5812] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 473.487919][ T5812] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 473.489076][ T5812] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 473.876056][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.996103][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.249804][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.555826][ T5812] Bluetooth: hci10: command tx timeout [ 476.040298][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.076079][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.428745][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 477.647206][ T5812] Bluetooth: hci10: command tx timeout [ 477.669792][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.670008][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.670682][ T8399] bridge_slave_0: entered allmulticast mode [ 477.673467][ T8399] bridge_slave_0: entered promiscuous mode [ 477.722492][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.722636][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.722929][ T8399] bridge_slave_1: entered allmulticast mode [ 477.750685][ T8399] bridge_slave_1: entered promiscuous mode [ 477.834189][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.852001][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.934849][ T8399] team0: Port device team_slave_0 added [ 477.946908][ T8399] team0: Port device team_slave_1 added [ 478.039117][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.039135][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.039160][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.041547][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.041560][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.041585][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.116074][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.276018][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.280624][ T8399] hsr_slave_0: entered promiscuous mode [ 478.282171][ T8399] hsr_slave_1: entered promiscuous mode [ 478.283242][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 478.283266][ T8399] Cannot create hsr debugfs directory [ 479.191279][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.725812][ T5812] Bluetooth: hci10: command tx timeout [ 480.196134][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.199501][ T5079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.201794][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.234647][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.237331][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.316236][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.798732][ T5812] Bluetooth: hci10: command tx timeout [ 482.276170][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.358539][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.338131][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.358723][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.360401][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.407207][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.099771][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.106582][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.135212][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.144400][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.145171][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.646846][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.953421][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 487.208238][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.208450][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.208687][ T8410] bridge_slave_0: entered allmulticast mode [ 487.211415][ T8410] bridge_slave_0: entered promiscuous mode [ 487.215061][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.215200][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.215417][ T8410] bridge_slave_1: entered allmulticast mode [ 487.289102][ T8410] bridge_slave_1: entered promiscuous mode [ 487.359552][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.375949][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.402857][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.454346][ T8410] team0: Port device team_slave_0 added [ 487.470313][ T8410] team0: Port device team_slave_1 added [ 487.540833][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.540849][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.540874][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.543279][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.543294][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.543319][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.715799][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.777423][ T8410] hsr_slave_0: entered promiscuous mode [ 487.780008][ T8410] hsr_slave_1: entered promiscuous mode [ 487.781100][ T8410] debugfs: 'hsr0' already exists in 'hsr' [ 487.781123][ T8410] Cannot create hsr debugfs directory [ 488.284840][ T5806] Bluetooth: hci4: command tx timeout [ 488.757175][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.032561][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.367205][ T5806] Bluetooth: hci4: command tx timeout [ 490.443453][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.295783][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.356433][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.435974][ T5806] Bluetooth: hci4: command tx timeout [ 492.466130][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.431897][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.480865][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.443808][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.516007][ T5806] Bluetooth: hci4: command tx timeout [ 495.476522][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.517649][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.517681][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.556300][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.721274][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.556109][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.796340][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.836680][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.562839][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.563614][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.563679][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.885833][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.596702][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.965908][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.036300][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.076052][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.636349][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.115907][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.155887][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.195986][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.676641][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.990747][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.009538][ T5806] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 509.030073][ T8437] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 509.031375][ T8437] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 509.045853][ T8437] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 509.059973][ T8437] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 509.062596][ T8437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.108472][ T8430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.110253][ T8430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.116392][ T8430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.236023][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.003853][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 510.276140][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.279920][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 510.441287][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.441412][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.441631][ T8429] bridge_slave_0: entered allmulticast mode [ 510.444338][ T8429] bridge_slave_0: entered promiscuous mode [ 510.459108][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.459517][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.459770][ T8429] bridge_slave_1: entered allmulticast mode [ 510.462314][ T8429] bridge_slave_1: entered promiscuous mode [ 510.643301][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.692401][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.692748][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.692868][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.693088][ T8433] bridge_slave_0: entered allmulticast mode [ 510.696969][ T8433] bridge_slave_0: entered promiscuous mode [ 510.719232][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.719427][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.719645][ T8433] bridge_slave_1: entered allmulticast mode [ 510.722521][ T8433] bridge_slave_1: entered promiscuous mode [ 511.061342][ T8429] team0: Port device team_slave_0 added [ 511.098073][ T8429] team0: Port device team_slave_1 added [ 511.130091][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.134784][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.156038][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.165931][ T5812] Bluetooth: hci0: command tx timeout [ 511.166306][ T5812] Bluetooth: hci11: command tx timeout [ 511.242935][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.242953][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.242980][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.245482][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.245496][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.248223][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.251850][ T8433] team0: Port device team_slave_0 added [ 511.267139][ T8433] team0: Port device team_slave_1 added [ 511.315949][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.377880][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.377898][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.377922][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.381548][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.381563][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.381587][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.407352][ T8429] hsr_slave_0: entered promiscuous mode [ 511.408982][ T8429] hsr_slave_1: entered promiscuous mode [ 511.409996][ T8429] debugfs: 'hsr0' already exists in 'hsr' [ 511.410018][ T8429] Cannot create hsr debugfs directory [ 511.533081][ T8433] hsr_slave_0: entered promiscuous mode [ 511.534700][ T8433] hsr_slave_1: entered promiscuous mode [ 511.536622][ T8433] debugfs: 'hsr0' already exists in 'hsr' [ 511.536656][ T8433] Cannot create hsr debugfs directory [ 511.723523][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.356303][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.235988][ T8430] Bluetooth: hci11: command tx timeout [ 513.236021][ T8430] Bluetooth: hci0: command tx timeout [ 513.396271][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.436051][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.756234][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.324101][ T5812] Bluetooth: hci0: command tx timeout [ 515.324138][ T5812] Bluetooth: hci11: command tx timeout [ 515.475975][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.517157][ T5812] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 515.541555][ T5812] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 515.542810][ T5812] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 515.544508][ T5812] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 515.545251][ T5812] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 516.428583][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 516.515995][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.399351][ T5812] Bluetooth: hci11: command tx timeout [ 517.399400][ T5812] Bluetooth: hci0: command tx timeout [ 517.565903][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.715907][ T8430] Bluetooth: hci12: command tx timeout [ 517.796235][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.605820][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.801225][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.801427][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.801960][ T8452] bridge_slave_0: entered allmulticast mode [ 518.804712][ T8452] bridge_slave_0: entered promiscuous mode [ 518.847062][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.847253][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.847579][ T8452] bridge_slave_1: entered allmulticast mode [ 518.850297][ T8452] bridge_slave_1: entered promiscuous mode [ 518.961256][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.983456][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.060735][ T8452] team0: Port device team_slave_0 added [ 519.065166][ T8452] team0: Port device team_slave_1 added [ 519.138459][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.138476][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.138501][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.141040][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.141054][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.141080][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.413174][ T8452] hsr_slave_0: entered promiscuous mode [ 519.414816][ T8452] hsr_slave_1: entered promiscuous mode [ 519.429728][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 519.429756][ T8452] Cannot create hsr debugfs directory [ 519.636008][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.795819][ T8430] Bluetooth: hci12: command tx timeout [ 520.676051][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.765819][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.836337][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.715978][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.876199][ T8430] Bluetooth: hci12: command tx timeout [ 522.766408][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.796009][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.875970][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.876663][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.891193][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.926355][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.965641][ T8430] Bluetooth: hci12: command tx timeout [ 524.836009][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.882395][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.917860][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.996102][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.957928][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.035895][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.035998][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.145761][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.355966][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.376211][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.380920][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.419353][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.215727][ T1798] net_ratelimit: 1 callbacks suppressed [ 532.215747][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.075828][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.265916][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.829682][ T5812] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 533.857173][ T5812] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 533.858533][ T5812] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 533.859751][ T5812] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 533.860560][ T5812] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 534.276143][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.316358][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.956358][ T5812] Bluetooth: hci13: command tx timeout [ 536.115905][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.366335][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.586630][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 536.782483][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.782692][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.782936][ T8464] bridge_slave_0: entered allmulticast mode [ 536.810517][ T8464] bridge_slave_0: entered promiscuous mode [ 536.814298][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.814447][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.814668][ T8464] bridge_slave_1: entered allmulticast mode [ 536.868753][ T8464] bridge_slave_1: entered promiscuous mode [ 536.941312][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.968550][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.065434][ T8464] team0: Port device team_slave_0 added [ 537.106280][ T8464] team0: Port device team_slave_1 added [ 537.159328][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.159345][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.159370][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.161791][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.161805][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.161830][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.351090][ T8464] hsr_slave_0: entered promiscuous mode [ 537.352785][ T8464] hsr_slave_1: entered promiscuous mode [ 537.353899][ T8464] debugfs: 'hsr0' already exists in 'hsr' [ 537.353923][ T8464] Cannot create hsr debugfs directory [ 537.420233][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.039287][ T5812] Bluetooth: hci13: command tx timeout [ 538.435986][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.155920][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.483613][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.956546][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.116591][ T5812] Bluetooth: hci13: command tx timeout [ 540.516022][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.555918][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.195804][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.196142][ T5812] Bluetooth: hci13: command tx timeout [ 542.596163][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.636025][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.676029][ T1798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.237840][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.726157][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.264936][ T8205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.765792][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.361306][ T8430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.382837][ T8430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.384125][ T8430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.385433][ T8430] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.408396][ T8430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.805916][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.276518][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.836608][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.490018][ T8430] Bluetooth: hci5: command tx timeout [ 549.556020][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.677398][ T8476] chnl_net:caif_netlink_parms(): no params data found [ 549.885790][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.913506][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.913716][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.913980][ T8476] bridge_slave_0: entered allmulticast mode [ 549.945227][ T8476] bridge_slave_0: entered promiscuous mode [ 549.970598][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.970801][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.971065][ T8476] bridge_slave_1: entered allmulticast mode [ 549.973817][ T8476] bridge_slave_1: entered promiscuous mode [ 550.053685][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.068700][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.257478][ T8476] team0: Port device team_slave_0 added [ 550.261672][ T8476] team0: Port device team_slave_1 added [ 550.918864][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.315884][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.555786][ T8430] Bluetooth: hci5: command tx timeout [ 551.956159][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.016757][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.016774][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.016800][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.019251][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.019265][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.019290][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.205319][ T8476] hsr_slave_0: entered promiscuous mode [ 552.213297][ T8476] hsr_slave_1: entered promiscuous mode [ 552.214420][ T8476] debugfs: 'hsr0' already exists in 'hsr' [ 552.214444][ T8476] Cannot create hsr debugfs directory [ 553.007282][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.635848][ T8430] Bluetooth: hci5: command tx timeout [ 554.036149][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.355953][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.841240][ T8430] Bluetooth: hci9: command 0x0406 tx timeout [ 555.076021][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.715921][ T8430] Bluetooth: hci5: command tx timeout [ 556.126172][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.157663][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.395856][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.196037][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.156069][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.236097][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.276025][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.435859][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.318927][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.356562][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.004700][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.004769][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.411503][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.475874][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.436158][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.485826][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.517559][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.517886][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.556085][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.596274][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.755925][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.860667][ T5812] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 568.891967][ T5812] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 568.922555][ T5812] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 568.923795][ T5812] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 568.924567][ T5812] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 569.555833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.636022][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.107891][ T5812] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 570.131730][ T5812] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 570.133066][ T5812] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 570.134346][ T5812] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 570.135197][ T5812] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 570.735846][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.809926][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 570.950815][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 570.995831][ T8430] Bluetooth: hci14: command tx timeout [ 571.305425][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.313271][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.313649][ T8492] bridge_slave_0: entered allmulticast mode [ 571.344670][ T8492] bridge_slave_0: entered promiscuous mode [ 571.419968][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.420117][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.420366][ T8492] bridge_slave_1: entered allmulticast mode [ 571.423063][ T8492] bridge_slave_1: entered promiscuous mode [ 571.537704][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.537836][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.538173][ T8499] bridge_slave_0: entered allmulticast mode [ 571.539790][ T8499] bridge_slave_0: entered promiscuous mode [ 571.825934][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.931801][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.948944][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.029924][ T8492] team0: Port device team_slave_0 added [ 572.034465][ T8492] team0: Port device team_slave_1 added [ 572.090062][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.090080][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.090105][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.092634][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.092649][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.092674][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.276181][ T8430] Bluetooth: hci15: command tx timeout [ 572.855987][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.906212][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.075963][ T8430] Bluetooth: hci14: command tx timeout [ 573.895818][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.356469][ T8430] Bluetooth: hci15: command tx timeout [ 574.698848][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.698977][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.699229][ T8499] bridge_slave_1: entered allmulticast mode [ 574.701935][ T8499] bridge_slave_1: entered promiscuous mode [ 574.889761][ T8492] hsr_slave_0: entered promiscuous mode [ 574.891525][ T8492] hsr_slave_1: entered promiscuous mode [ 574.892688][ T8492] debugfs: 'hsr0' already exists in 'hsr' [ 574.892712][ T8492] Cannot create hsr debugfs directory [ 574.937008][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.966053][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.006702][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.156086][ T8430] Bluetooth: hci14: command tx timeout [ 575.316232][ T8435] Bluetooth: hci3: command 0x0406 tx timeout [ 575.316562][ T8435] Bluetooth: hci2: command 0x0406 tx timeout [ 575.554831][ T8499] team0: Port device team_slave_0 added [ 575.567986][ T8499] team0: Port device team_slave_1 added [ 575.671625][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.671643][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.671668][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.736935][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.736952][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.736978][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.916486][ T8499] hsr_slave_0: entered promiscuous mode [ 575.918265][ T8499] hsr_slave_1: entered promiscuous mode [ 575.919343][ T8499] debugfs: 'hsr0' already exists in 'hsr' [ 575.919366][ T8499] Cannot create hsr debugfs directory [ 575.956183][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.066109][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.436389][ T8437] Bluetooth: hci15: command tx timeout [ 576.734883][ T5812] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 576.767875][ T5812] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 576.769122][ T5812] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 576.791774][ T5812] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 576.792623][ T5812] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 577.076210][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.241873][ T8437] Bluetooth: hci14: command tx timeout [ 577.784748][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 577.975078][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.975289][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.992173][ T8514] bridge_slave_0: entered allmulticast mode [ 577.995049][ T8514] bridge_slave_0: entered promiscuous mode [ 578.016563][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.016760][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.017055][ T8514] bridge_slave_1: entered allmulticast mode [ 578.019875][ T8514] bridge_slave_1: entered promiscuous mode [ 578.116010][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.136284][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.143738][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.516116][ T8437] Bluetooth: hci15: command tx timeout [ 578.916014][ T8437] Bluetooth: hci16: command tx timeout [ 580.426178][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.444580][ T8437] Bluetooth: hci6: command 0x0406 tx timeout [ 580.454859][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.454932][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.454993][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.935342][ T8514] team0: Port device team_slave_0 added [ 580.951525][ T8514] team0: Port device team_slave_1 added [ 580.995859][ T8437] Bluetooth: hci16: command tx timeout [ 581.038633][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.038651][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.038676][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.041485][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.041500][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.041524][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.372820][ T8514] hsr_slave_0: entered promiscuous mode [ 581.374651][ T8514] hsr_slave_1: entered promiscuous mode [ 581.391744][ T8514] debugfs: 'hsr0' already exists in 'hsr' [ 581.391774][ T8514] Cannot create hsr debugfs directory [ 581.710013][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.780326][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.075933][ T5812] Bluetooth: hci16: command tx timeout [ 583.481364][ T996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.796104][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.860215][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.156515][ T5812] Bluetooth: hci16: command tx timeout [ 585.875980][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.036107][ T38] INFO: task kworker/u8:6:162 blocked for more than 143 seconds. [ 586.036139][ T38] Not tainted syzkaller #0 [ 586.036149][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.036158][ T38] task:kworker/u8:6 state:D stack:19064 pid:162 tgid:162 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 586.036211][ T38] Workqueue: netns cleanup_net [ 586.036255][ T38] Call Trace: [ 586.036265][ T38] [ 586.036279][ T38] __schedule+0x1472/0x4fe0 [ 586.036320][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 586.036351][ T38] ? __pfx___schedule+0x10/0x10 [ 586.036373][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 586.036408][ T38] rt_mutex_schedule+0x76/0xf0 [ 586.036432][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 586.036463][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 586.036484][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 586.036506][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 586.036526][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.036557][ T38] ? devlink_pernet_pre_exit+0x117/0x3f0 [ 586.036585][ T38] ? devlink_pernet_pre_exit+0x117/0x3f0 [ 586.036614][ T38] ? devlink_pernet_pre_exit+0x117/0x3f0 [ 586.036635][ T38] mutex_lock_nested+0x168/0x1d0 [ 586.036653][ T38] ? devlinks_xa_find_get+0x2b/0x310 [ 586.036678][ T38] devlink_pernet_pre_exit+0x117/0x3f0 [ 586.036704][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 586.036733][ T38] ? class_remove_file_ns+0x124/0x160 [ 586.036756][ T38] ops_undo_list+0x187/0x940 [ 586.036784][ T38] ? rt_spin_unlock+0x1d0/0x200 [ 586.036804][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 586.036826][ T38] ? rt_spin_unlock+0x14f/0x200 [ 586.036849][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.036870][ T38] cleanup_net+0x4e5/0x7b0 [ 586.036897][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 586.036924][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 586.036943][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 586.036963][ T38] process_scheduled_works+0xaec/0x17a0 [ 586.037014][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 586.037031][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 586.037058][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.037081][ T38] ? schedule+0x90/0x360 [ 586.037110][ T38] worker_thread+0xda6/0x1360 [ 586.037153][ T38] kthread+0x726/0x8b0 [ 586.037178][ T38] ? __pfx_worker_thread+0x10/0x10 [ 586.037196][ T38] ? __pfx_kthread+0x10/0x10 [ 586.037214][ T38] ? rt_spin_unlock+0x14f/0x200 [ 586.037238][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.037255][ T38] ? __pfx_kthread+0x10/0x10 [ 586.037277][ T38] ret_from_fork+0x51b/0xa40 [ 586.037299][ T38] ? __pfx_[ 586.037299][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 586.037317][ T38] ? __switch_to+0xc82/0x1410 [ 586.037346][ T38] ? __pfx_kthread+0x10/0x10 [ 586.037368][ T38] ret_from_fork_asm+0x1a/0x30 [ 586.037408][ T38] [ 586.037552][ T38] INFO: task syz.2.579:8009 blocked for more than 143 seconds. [ 586.037566][ T38] Not tainted syzkaller #0 [ 586.037575][ T38] Blocked by coredump. [ 586.037581][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.037590][ T38] task:syz.2.579 state:D stack:23320 pid:8009 tgid:8007 ppid:5803 task_flags:0x40054c flags:0x00080003 [ 586.037642][ T38] Call Trace: [ 586.037649][ T38] [ 586.037660][ T38] __schedule+0x1472/0x4fe0 [ 586.037709][ T38] ? __pfx___schedule+0x10/0x10 [ 586.037744][ T38] rt_mutex_schedule+0x76/0xf0 [ 586.037767][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 586.037803][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 586.041436][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 586.041471][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 586.041503][ T38] ? rcu_barrier+0x4c/0x580 [ 586.041531][ T38] ? rcu_barrier+0x4c/0x580 [ 586.041560][ T38] ? rcu_barrier+0x4c/0x580 [ 586.041613][ T38] mutex_lock_nested+0x168/0x1d0 [ 586.041632][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.041655][ T38] rcu_barrier+0x4c/0x580 [ 586.041688][ T38] netdev_run_todo+0x2e0/0xde0 [ 586.041716][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 586.041735][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 586.041766][ T38] ? netdev_state_change+0x1ca/0x220 [ 586.041785][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 586.041809][ T38] tun_chr_close+0x13f/0x1c0 [ 586.041836][ T38] __fput+0x45e/0xa80 [ 586.041867][ T38] task_work_run+0x1d9/0x270 [ 586.041894][ T38] ? __pfx_task_work_run+0x10/0x10 [ 586.041916][ T38] ? do_exit+0x696/0x2320 [ 586.041939][ T38] ? do_exit+0x696/0x2320 [ 586.041965][ T38] do_exit+0x69b/0x2320 [ 586.041996][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.042019][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.042044][ T38] ? __pfx_do_exit+0x10/0x10 [ 586.042063][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 586.042081][ T38] ? reacquire_held_locks+0x104/0x190 [ 586.042102][ T38] ? rt_spin_lock+0x1e0/0x400 [ 586.042132][ T38] do_group_exit+0x21b/0x2d0 [ 586.042155][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.042177][ T38] get_signal+0x125c/0x1310 [ 586.042215][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 586.042242][ T38] ? __x64_sys_sendmsg+0x275/0x2a0 [ 586.042262][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 586.042306][ T38] exit_to_user_mode_loop+0x86/0x480 [ 586.042327][ T38] ? rcu_is_watching+0x15/0xb0 [ 586.042352][ T38] do_syscall_64+0x2b7/0xf80 [ 586.042374][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.042392][ T38] ? trace_irq_disable+0x37/0x100 [ 586.042414][ T38] ? clear_bhb_loop+0x60/0xb0 [ 586.042436][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.042455][ T38] RIP: 0033:0x7f08c85daeb9 [ 586.042472][ T38] RSP: 002b:00007f08c6836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.042492][ T38] RAX: 0000000000000024 RBX: 00007f08c8855fa0 RCX: 00007f08c85daeb9 [ 586.042506][ T38] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000005 [ 586.042518][ T38] RBP: 00007f08c8648c1f R08: 0000000000000000 R09: 0000000000000000 [ 586.042531][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.042542][ T38] R13: 00007f08c8856038 R14: 00007f08c8855fa0 R15: 00007fffa76fb888 [ 586.042573][ T38] [ 586.042583][ T38] INFO: task syz.3.585:8030 blocked for more than 143 seconds. [ 586.042596][ T38] Not tainted syzkaller #0 [ 586.042605][ T38] Blocked by coredump. [ 586.042611][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.042620][ T38] task:syz.3.585 state:D stack:23704 pid:8030 tgid:8030 ppid:5808 task_flags:0x40044c flags:0x00080003 [ 586.042671][ T38] Call Trace: [ 586.042678][ T38] [ 586.042689][ T38] __schedule+0x1472/0x4fe0 [ 586.042738][ T38] ? __pfx___schedule+0x10/0x10 [ 586.042774][ T38] rt_mutex_schedule+0x76/0xf0 [ 586.042797][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 586.042833][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 586.042855][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 586.042876][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 586.042905][ T38] ? rcu_barrier+0x4c/0x580 [ 586.042937][ T38] ? rcu_barrier+0x4c/0x580 [ 586.042965][ T38] ? rcu_barrier+0x4c/0x580 [ 586.042993][ T38] mutex_lock_nested+0x168/0x1d0 [ 586.043011][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.043034][ T38] rcu_barrier+0x4c/0x580 [ 586.043067][ T38] netdev_run_todo+0x2e0/0xde0 [ 586.043093][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 586.043113][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 586.043143][ T38] ? netdev_state_change+0x1ca/0x220 [ 586.043162][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 586.043185][ T38] tun_chr_close+0x13f/0x1c0 [ 586.043207][ T38] __fput+0x45e/0xa80 [ 586.043242][ T38] task_work_run+0x1d9/0x270 [ 586.043267][ T38] ? __pfx_task_work_run+0x10/0x10 [ 586.043289][ T38] ? do_exit+0x696/0x2320 [ 586.043311][ T38] ? do_exit+0x696/0x2320 [ 586.043337][ T38] do_exit+0x69b/0x2320 [ 586.043361][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.043383][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.043407][ T38] ? __pfx_do_exit+0x10/0x10 [ 586.043426][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 586.043445][ T38] ? reacquire_held_locks+0x104/0x190 [ 586.043465][ T38] ? rt_spin_lock+0x1e0/0x400 [ 586.043495][ T38] do_group_exit+0x21b/0x2d0 [ 586.043523][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.043545][ T38] get_signal+0x125c/0x1310 [ 586.043583][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 586.043611][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 586.043655][ T38] exit_to_user_mode_loop+0x86/0x480 [ 586.043675][ T38] ? rcu_is_watching+0x15/0xb0 [ 586.043700][ T38] do_syscall_64+0x2b7/0xf80 [ 586.043727][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.043744][ T38] ? trace_irq_disable+0x37/0x100 [ 586.043765][ T38] ? clear_bhb_loop+0x60/0xb0 [ 586.043787][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.043805][ T38] RIP: 0033:0x7f9756d8aeb9 [ 586.043820][ T38] RSP: 002b:00007fff69ea12a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 586.043838][ T38] RAX: 0000000000000000 RBX: 00007f9757007da0 RCX: 00007f9756d8aeb9 [ 586.043851][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 586.043863][ T38] RBP: 00007f9757007da0 R08: 0000000000000006 R09: 0000000000000000 [ 586.043875][ T38] R10: 00007f9757007cb0 R11: 0000000000000246 R12: 00000000000565da [ 586.043888][ T38] R13: 00007f975700618c R14: 00000000000565a7 R15: 00007f9757006180 [ 586.043918][ T38] [ 586.043962][ T38] INFO: task syz.9.619:8301 blocked for more than 143 seconds. [ 586.043975][ T38] Not tainted syzkaller #0 [ 586.043991][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.044000][ T38] task:syz.9.619 state:D stack:23704 pid:8301 tgid:8301 ppid:8153 task_flags:0x400040 flags:0x00080002 [ 586.044051][ T38] Call Trace: [ 586.044057][ T38] [ 586.044068][ T38] __schedule+0x1472/0x4fe0 [ 586.044117][ T38] ? __pfx___schedule+0x10/0x10 [ 586.044153][ T38] rt_mutex_schedule+0x76/0xf0 [ 586.044176][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 586.044216][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 586.044238][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 586.044258][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 586.044276][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 586.044310][ T38] ? rcu_barrier+0x4c/0x580 [ 586.044337][ T38] ? rcu_barrier+0x4c/0x580 [ 586.044365][ T38] ? rcu_barrier+0x4c/0x580 [ 586.044385][ T38] mutex_lock_nested+0x168/0x1d0 [ 586.044403][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.044426][ T38] rcu_barrier+0x4c/0x580 [ 586.044449][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.044471][ T38] ? rt_write_unlock+0x190/0x230 [ 586.044496][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 586.044520][ T38] kvm_arch_destroy_vm+0x23c/0x280 [ 586.044545][ T38] kvm_put_kvm+0x6ca/0xa80 [ 586.044576][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 586.044598][ T38] kvm_vm_release+0x46/0x50 [ 586.044618][ T38] __fput+0x45e/0xa80 [ 586.044648][ T38] task_work_run+0x1d9/0x270 [ 586.044673][ T38] ? __pfx_task_work_run+0x10/0x10 [ 586.044721][ T38] exit_to_user_mode_loop+0xed/0x480 [ 586.044741][ T38] ? rcu_is_watching+0x15/0xb0 [ 586.044766][ T38] do_syscall_64+0x2b7/0xf80 [ 586.044788][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.044805][ T38] ? trace_irq_disable+0x37/0x100 [ 586.044825][ T38] ? clear_bhb_loop+0x60/0xb0 [ 586.044847][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.044869][ T38] RIP: 0033:0x7fc276f3aeb9 [ 586.044885][ T38] RSP: 002b:00007ffeb33df798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 586.044904][ T38] RAX: 0000000000000000 RBX: 00007fc2771b7da0 RCX: 00007fc276f3aeb9 [ 586.044917][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 586.044928][ T38] RBP: 00007fc2771b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 586.044941][ T38] R10: 00007fc2771b7cb0 R11: 0000000000000246 R12: 000000000006a316 [ 586.044953][ T38] R13: 00007fc2771b663c R14: 000000000006a2e4 R15: 00007fc2771b6630 [ 586.044989][ T38] [ 586.044997][ T38] INFO: task syz.8.620:8303 blocked for more than 143 seconds. [ 586.045009][ T38] Not tainted syzkaller #0 [ 586.045019][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.045027][ T38] task:syz.8.620 state:D stack:24824 pid:8303 tgid:8303 ppid:8094 task_flags:0x400040 flags:0x00080002 [ 586.045082][ T38] Call Trace: [ 586.045088][ T38] [ 586.045099][ T38] __schedule+0x1472/0x4fe0 [ 586.045147][ T38] ? __pfx___schedule+0x10/0x10 [ 586.045183][ T38] rt_mutex_schedule+0x76/0xf0 [ 586.045206][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 586.045242][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 586.045264][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 586.045284][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 586.045302][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 586.045335][ T38] ? rcu_barrier+0x4c/0x580 [ 586.045362][ T38] ? rcu_barrier+0x4c/0x580 [ 586.045390][ T38] ? rcu_barrier+0x4c/0x580 [ 586.045411][ T38] mutex_lock_nested+0x168/0x1d0 [ 586.045428][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.045452][ T38] rcu_barrier+0x4c/0x580 [ 586.045479][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.045502][ T38] ? rt_write_unlock+0x190/0x230 [ 586.325668][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 586.325714][ T38] kvm_arch_destroy_vm+0x23c/0x280 [ 586.325741][ T38] kvm_put_kvm+0x6ca/0xa80 [ 586.325772][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 586.325795][ T38] kvm_vm_release+0x46/0x50 [ 586.325815][ T38] __fput+0x45e/0xa80 [ 586.325844][ T38] task_work_run+0x1d9/0x270 [ 586.325871][ T38] ? __pfx_task_work_run+0x10/0x10 [ 586.325903][ T38] exit_to_user_mode_loop+0xed/0x480 [ 586.325925][ T38] ? rcu_is_watching+0x15/0xb0 [ 586.325950][ T38] do_syscall_64+0x2b7/0xf80 [ 586.325975][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.325993][ T38] ? trace_irq_disable+0x37/0x100 [ 586.326014][ T38] ? clear_bhb_loop+0x60/0xb0 [ 586.326036][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.326054][ T38] RIP: 0033:0x7f7e44d9aeb9 [ 586.326070][ T38] RSP: 002b:00007fffc67bdaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 586.326091][ T38] RAX: 0000000000000000 RBX: 00007f7e45017da0 RCX: 00007f7e44d9aeb9 [ 586.326104][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 586.326116][ T38] RBP: 00007f7e45017da0 R08: 0000000000000006 R09: 0000000000000000 [ 586.326128][ T38] R10: 00007f7e45017cb0 R11: 0000000000000246 R12: 0000000000069b17 [ 586.326140][ T38] R13: 00007f7e4501609c R14: 00000000000699fc R15: 00007fffc67bdc00 [ 586.326171][ T38] [ 586.326248][ T38] [ 586.326248][ T38] Showing all locks held in the system: [ 586.326257][ T38] 6 locks held by kworker/0:1/10: [ 586.326269][ T38] 4 locks held by pr/legacy/17: [ 586.326282][ T38] 1 lock held by khungtaskd/38: [ 586.326292][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 586.326350][ T38] 4 locks held by kworker/u8:6/162: [ 586.326361][ T38] #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 586.326409][ T38] #1: ffffc90003b37bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 586.326468][ T38] #2: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 586.326515][ T38] #3: ffff88805a68a0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 586.326586][ T38] 1 lock held by klogd/5158: [ 586.326598][ T38] 2 locks held by getty/5559: [ 586.326608][ T38] #0: ffff88823bf460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 586.326657][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 586.326709][ T38] 5 locks held by syz-executor/5786: [ 586.326726][ T38] 2 locks held by kworker/0:6/5907: [ 586.326738][ T38] 1 lock held by syz.2.579/8009: [ 586.326748][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.326797][ T38] 1 lock held by syz.3.585/8030: [ 586.326807][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.326855][ T38] 1 lock held by syz-executor/8068: [ 586.326865][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.326913][ T38] 1 lock held by syz-executor/8081: [ 586.326923][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.326969][ T38] 1 lock held by syz.0.595/8095: [ 586.326979][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.327028][ T38] 1 lock held by syz.5.605/8150: [ 586.327038][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.327087][ T38] 7 locks held by syz-executor/8205: [ 586.327098][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.327146][ T38] #1: ffff888033cfcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.327195][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.327247][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.327295][ T38] #4: ffff88805a68a0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 586.327345][ T38] #5: ffff88805a6a4300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 586.327391][ T38] #6: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.327439][ T38] 4 locks held by syz-executor/8290: [ 586.327450][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.327497][ T38] #1: ffff888033aca878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.327545][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.327596][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.327644][ T38] 1 lock held by syz.9.619/8301: [ 586.327655][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.327708][ T38] 1 lock held by syz.8.620/8303: [ 586.327719][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.327766][ T38] 4 locks held by syz-executor/8352: [ 586.327778][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.327826][ T38] #1: ffff88807ecf1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.327873][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.327924][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.327970][ T38] 4 locks held by syz-executor/8357: [ 586.327981][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.328029][ T38] #1: ffff888087c18478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.328076][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.328124][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.328170][ T38] 4 locks held by syz-executor/8381: [ 586.328181][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.328228][ T38] #1: ffff888084013078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.328276][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.328327][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.328374][ T38] 1 lock held by syz.6.629/8385: [ 586.328384][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 586.328432][ T38] 4 locks held by syz-executor/8399: [ 586.328442][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.328505][ T38] #1: ffff88803ae3c478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.328552][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.328604][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.328652][ T38] 4 locks held by syz-executor/8410: [ 586.328663][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.328716][ T38] #1: ffff888086567c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.328763][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.328815][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.328862][ T38] 4 locks held by syz-executor/8429: [ 586.328873][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.328921][ T38] #1: ffff888050a86078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.328967][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329012][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329049][ T38] 4 locks held by syz-executor/8433: [ 586.329057][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329092][ T38] #1: ffff88805375d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.329127][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329164][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329201][ T38] 4 locks held by syz-executor/8452: [ 586.329209][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329242][ T38] #1: ffff88805bc95478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.329279][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329317][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329355][ T38] 4 locks held by syz-executor/8464: [ 586.329363][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329398][ T38] #1: ffff888054e67878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.329438][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329485][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329527][ T38] 4 locks held by syz-executor/8476: [ 586.329536][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329579][ T38] #1: ffff8880546d7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.329625][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329677][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329732][ T38] 4 locks held by syz-executor/8492: [ 586.329743][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329789][ T38] #1: ffff8880945f2c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.329836][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.329886][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.329935][ T38] 4 locks held by syz-executor/8499: [ 586.329944][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.329999][ T38] #1: ffff88809db7bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.330045][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.330097][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.330145][ T38] 4 locks held by syz-executor/8514: [ 586.330156][ T38] #0: ffff88803319c480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 586.330204][ T38] #1: ffff88805b9dfc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 586.330251][ T38] #2: ffff8881433fb788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 586.330301][ T38] #3: ffffffff8e7aad18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 586.330349][ T38] [ 586.330354][ T38] ============================================= [ 586.330354][ T38] [ 586.330374][ T38] NMI backtrace for cpu 1 [ 586.330393][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 586.330414][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.330425][ T38] Call Trace: [ 586.330432][ T38] [ 586.330440][ T38] dump_stack_lvl+0xe8/0x150 [ 586.330464][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 586.330484][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 586.330506][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 586.330527][ T38] sys_info+0x135/0x170 [ 586.330543][ T38] watchdog+0xf90/0xfe0 [ 586.330570][ T38] ? watchdog+0x209/0xfe0 [ 586.330599][ T38] kthread+0x726/0x8b0 [ 586.330623][ T38] ? __pfx_watchdog+0x10/0x10 [ 586.330644][ T38] ? __pfx_kthread+0x10/0x10 [ 586.330663][ T38] ? rt_spin_unlock+0x14f/0x200 [ 586.330686][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.330711][ T38] ? __pfx_kthread+0x10/0x10 [ 586.330733][ T38] ret_from_fork+0x51b/0xa40 [ 586.330754][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 586.330771][ T38] ? __switch_to+0xc82/0x1410 [ 586.330799][ T38] ? __pfx_kthread+0x10/0x10 [ 586.330821][ T38] ret_from_fork_asm+0x1a/0x30 [ 586.330857][ T38] [ 586.330865][ T38] Sending NMI from CPU 1 to CPUs 0: [ 586.330896][ C0] NMI backtrace for cpu 0 [ 586.330915][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 586.330932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.330949][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 586.330969][ C0] RIP: 0010:lock_acquire+0xf8/0x330 [ 586.330986][ C0] Code: ff 05 1c d6 86 10 45 31 c9 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 <6a> 00 6a 00 55 ff 74 24 30 e8 ba 02 00 00 48 83 c4 28 48 c7 c7 ca [ 586.331000][ C0] RSP: 0018:ffffc900000f66a0 EFLAGS: 00000046 [ 586.331012][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 586.331022][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8838cb8 [ 586.331032][ C0] RBP: ffffffff8b0fcb67 R08: 0000000000000001 R09: 0000000000000001 [ 586.331042][ C0] R10: dffffc0000000000 R11: fffffbfff1e8fc8f R12: 0000000000000000 [ 586.331053][ C0] R13: ffff8880b8838cb8 R14: 0000000000000001 R15: 0000000000000046 [ 586.331063][ C0] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 586.331075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.331086][ C0] CR2: 00007fedc15f26f1 CR3: 000000003b948000 CR4: 00000000003526f0 [ 586.331100][ C0] Call Trace: [ 586.331106][ C0] [ 586.331117][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 586.331135][ C0] ? rt_spin_lock+0x157/0x400 [ 586.331149][ C0] rt_spin_lock+0x157/0x400 [ 586.331165][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 586.331180][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 586.331194][ C0] ? __alloc_skb+0x193/0x390 [ 586.331215][ C0] napi_skb_cache_get+0xbf/0x410 [ 586.331233][ C0] ? __alloc_skb+0x193/0x390 [ 586.331251][ C0] __alloc_skb+0x1a7/0x390 [ 586.331270][ C0] synproxy_send_client_synack+0x172/0xe30 [ 586.331295][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 586.331314][ C0] ? audit_ip6+0x200/0x430 [ 586.331330][ C0] ? synproxy_pernet+0x45/0x270 [ 586.331347][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 586.331364][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 586.331379][ C0] ? nf_ip_checksum+0x13c/0x510 [ 586.331396][ C0] nft_synproxy_do_eval+0x305/0x580 [ 586.331413][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 586.331428][ C0] ? data_push_tail+0x5ff/0x670 [ 586.331449][ C0] nft_do_chain+0x45e/0x1990 [ 586.331468][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 586.331485][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 586.331516][ C0] nft_do_chain_inet+0x29d/0x380 [ 586.331530][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 586.331547][ C0] ? NF_HOOK+0x9e/0x3c0 [ 586.331562][ C0] ? NF_HOOK+0x9e/0x3c0 [ 586.331575][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 586.331590][ C0] nf_hook_slow+0xc5/0x220 [ 586.331609][ C0] NF_HOOK+0x21f/0x3c0 [ 586.331624][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 586.331639][ C0] ? NF_HOOK+0x9e/0x3c0 [ 586.331652][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 586.331665][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 586.331681][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 586.331696][ C0] ? skb_dst+0x4f/0xd0 [ 586.331710][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 586.331726][ C0] NF_HOOK+0x336/0x3c0 [ 586.331739][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.331757][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 586.331771][ C0] ? NF_HOOK+0x9e/0x3c0 [ 586.331784][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 586.331799][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 586.331815][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 586.331828][ C0] ? process_backlog+0x271/0xc60 [ 586.331846][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 586.331859][ C0] process_backlog+0x569/0xc60 [ 586.331883][ C0] __napi_poll+0xae/0x530 [ 586.331901][ C0] net_rx_action+0x696/0xe00 [ 586.331923][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 586.331946][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 586.331967][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 586.331990][ C0] handle_softirqs+0x1de/0x640 [ 586.332007][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 586.332023][ C0] wg_packet_decrypt_worker+0x2f8/0xd30 [ 586.332042][ C0] ? wg_packet_decrypt_worker+0xde/0xd30 [ 586.332059][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 586.332077][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 586.332093][ C0] ? rcu_is_watching+0x15/0xb0 [ 586.332110][ C0] ? trace_pelt_se_tp+0x39/0x120 [ 586.332124][ C0] ? __update_load_avg_se+0x79a/0xbe0 [ 586.332143][ C0] ? update_se+0x91/0x5e0 [ 586.332163][ C0] ? look_up_lock_class+0x57/0x110 [ 586.332180][ C0] ? register_lock_class+0x31/0x2e0 [ 586.332197][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 586.332217][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 586.332232][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 586.332246][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 586.332263][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 586.332276][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 586.332290][ C0] process_scheduled_works+0xaec/0x17a0 [ 586.332313][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 586.332326][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 586.332345][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.332362][ C0] ? schedule+0x90/0x360 [ 586.332381][ C0] worker_thread+0xda6/0x1360 [ 586.332401][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 586.332418][ C0] kthread+0x726/0x8b0 [ 586.332434][ C0] ? __pfx_worker_thread+0x10/0x10 [ 586.332448][ C0] ? __pfx_kthread+0x10/0x10 [ 586.332462][ C0] ? rt_spin_unlock+0x14f/0x200 [ 586.332478][ C0] ? rt_spin_unlock+0x160/0x200 [ 586.332491][ C0] ? __pfx_kthread+0x10/0x10 [ 586.332507][ C0] ret_from_fork+0x51b/0xa40 [ 586.332522][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 586.332535][ C0] ? __switch_to+0xc82/0x1410 [ 586.332554][ C0] ? __pfx_kthread+0x10/0x10 [ 586.332570][ C0] ret_from_fork_asm+0x1a/0x30 [ 586.332593][ C0] [ 586.332899][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 586.332917][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 586.332938][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.332947][ T38] Call Trace: [ 586.332953][ T38] [ 586.332961][ T38] vpanic+0x1e0/0x670 [ 586.332987][ T38] panic+0xc5/0xd0 [ 586.333007][ T38] ? __pfx_panic+0x10/0x10 [ 586.333038][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 586.333061][ T38] watchdog+0xfda/0xfe0 [ 586.333088][ T38] ? watchdog+0x209/0xfe0 [ 586.333121][ T38] kthread+0x726/0x8b0 [ 586.333144][ T38] ? __pfx_watchdog+0x10/0x10 [ 586.333165][ T38] ? __pfx_kthread+0x10/0x10 [ 586.333183][ T38] ? rt_spin_unlock+0x14f/0x200 [ 586.333206][ T38] ? rt_spin_unlock+0x160/0x200 [ 586.333223][ T38] ? __pfx_kthread+0x10/0x10 [ 586.333245][ T38] ret_from_fork+0x51b/0xa40 [ 586.333265][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 586.333283][ T38] ? __switch_to+0xc82/0x1410 [ 586.333309][ T38] ? __pfx_kthread+0x10/0x10 [ 586.333331][ T38] ret_from_fork_asm+0x1a/0x30 [ 586.333367][ T38] [ 586.333898][ T38] Kernel Offset: disabled