last executing test programs: 10m42.295678014s ago: executing program 3 (id=1047): 10m42.201820728s ago: executing program 3 (id=1048): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10m42.093087106s ago: executing program 3 (id=1049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r1, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 10m41.684679943s ago: executing program 3 (id=1051): syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x9, 0x8, 0x300, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 10m40.61754447s ago: executing program 3 (id=1054): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0x64}}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10m40.24539457s ago: executing program 3 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x2, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) sendto$packet(r5, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 10m24.851459155s ago: executing program 32 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x2, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) sendto$packet(r5, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2m41.882427341s ago: executing program 5 (id=2142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r4, 0xc000000, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r5, 0x32dc, 0x0, 0xe, 0x0, 0x0) 2m39.718743972s ago: executing program 5 (id=2149): syz_extract_tcp_res(&(0x7f00000000c0), 0xd7, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001280)={{0x1, 0x1, 0x0, 0x4, 'syz1\x00', 0x6}, 0x1, [0x9, 0x8000000000000001, 0x1ff, 0x4, 0xa, 0x85, 0x2, 0x5, 0x6, 0x4, 0x9, 0x10000, 0xb, 0x3, 0x4, 0xb221, 0xfff, 0x3, 0xb8a1, 0x6, 0xcf0, 0x3, 0x1000, 0x7, 0x9, 0x101, 0x1, 0x40, 0x6, 0x9, 0x100000001, 0x5, 0xfffffffffffffff7, 0x8, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x9, 0xffffffffffffff80, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x82c2, 0x7, 0x4, 0xfd, 0x4, 0xa, 0x7, 0x2, 0x10000, 0x9, 0x0, 0x0, 0x1, 0x10, 0x4, 0x3, 0x9, 0x80000000, 0x8, 0x7, 0x1ff, 0xffffffffffffff01, 0x9, 0x3399, 0x7, 0x87, 0x8, 0x12d2, 0x10, 0x8000, 0x8, 0x2, 0xa1, 0x3f800000000000, 0x1, 0x4, 0x3, 0x3, 0x3, 0x8000, 0x8000000000000000, 0x9, 0xfffffffffffffffd, 0x8, 0x8000000000005, 0x9, 0x0, 0xfffffffffffff1c3, 0x0, 0x3, 0x9, 0x407ff, 0xa24, 0x80000001, 0x7, 0xbf6, 0xc000000001, 0x4000000000006, 0x80, 0x7fb, 0x101, 0x9, 0x400, 0x7f, 0x1, 0x2, 0x0, 0x100, 0x3, 0x8, 0x2e, 0x10, 0x3, 0x1000000000005, 0x1, 0x1, 0x8000000000000005, 0x1, 0x770ea051, 0x7f, 0x6, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[], 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8b5}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 2m38.115737871s ago: executing program 5 (id=2155): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, 0x0, 0x0) 2m35.073458673s ago: executing program 5 (id=2164): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) gettid() r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2, r3, 0x18}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="545370c08a6c6bd97832c8d95c8a25ede73214fa0ed3748e629958970465551ce515081e5f58b0e41d0b42643a0ef89e8d08c6d3c81e5c4d719d6451aa235082f39c01e9b17f803c2f781b7f02de13585f1c986bbae093c8e09e0a322ce60471374e4975ddecb0ca24e7fa5017e2e9b4668d80ebb0b4f0c06a71528dfc63d281dbcf5f9e45296a37a567fccba9e5a6fb86557e6e17f9ebc616a4c1c25543e042d6578ac196895eb73aca69c10577150b1af8ab1afa7ef6f0a682c6bc100c2542e04addd2280b610e89d67e29cb0765d76d", 0xd1}], 0x1, 0x0, 0x0, 0x4004000}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 2m32.159769945s ago: executing program 5 (id=2168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xec06aa4d}], 0x1, 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2m31.908359654s ago: executing program 5 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x8001, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0xffffffff, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x3, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x0, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x40, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0xfffffffe, 0x46, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x81, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000004, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0x9, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0xb, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x8, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2m16.716661368s ago: executing program 33 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x8001, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0xffffffff, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x3, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x0, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x40, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0xfffffffe, 0x46, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x81, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000004, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0x9, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0xb, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x8, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m41.471392278s ago: executing program 6 (id=2315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xec06aa4d}], 0x1, 0x0, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 1m39.992765494s ago: executing program 6 (id=2319): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x40}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) 1m38.371055042s ago: executing program 6 (id=2323): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.341960347s ago: executing program 6 (id=2334): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') 1m28.37186458s ago: executing program 6 (id=2347): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) 1m27.098232568s ago: executing program 6 (id=2350): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x4, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 1m11.707706398s ago: executing program 34 (id=2350): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, &(0x7f0000000000)='discard') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x4, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 9.334612167s ago: executing program 0 (id=2547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000e80)={"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"}) 8.636308351s ago: executing program 0 (id=2548): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x4e20, 0x9d, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x7fff, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@local, 0x1, 0x32}, 0x2, @in6=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0xfffffffffffffff5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) 7.372286244s ago: executing program 7 (id=2557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r2, 0x121, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 7.068769169s ago: executing program 7 (id=2559): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) 6.094435514s ago: executing program 0 (id=2567): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x1, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="b7243da849cdb9c72a0568f98553"}}}}}}, 0x0) 5.809033625s ago: executing program 0 (id=2569): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x6, 0xc052) 5.782600515s ago: executing program 7 (id=2570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 5.613925331s ago: executing program 7 (id=2573): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000240)={0x0, 0xeb81, 0x8, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 5.414869518s ago: executing program 1 (id=2574): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000ec0)="582dd75f55b956e18542a2ca2d272f5b00f204b95b41af7506468da24281fc645eb30023b34cd11279dfc8b99e7bed94dae0a0612ccf84463ce31f0f34b7dea90b0a321a3313265999298a9f38a0ad5f4a4afaeebb7a3a3fcd0192e9295647957b2df4b28a7bb09885421fd8577785d2fc002925cb6af4214746c9b5b35f6dc91267b147ed5b8a202be37c827575649db9b3f5b20577f1d6b3443b0d2b9adcee9f67a967746e5f9acbb1029a5c458b2e8b0b23cb5a41d182b9bef5756a22f7007f4480560caa6e5622496f88568e3a702ccbc91e76c09dc27bdadbff56b5ea89dcf01eb3fc38aed03a22f27dfa20d1eaca2661c360412db1a92d7b6268bd7266f28b74c10a952425aeccd90d02f7a228bb42090cdc2f5a6ac45e5aaa287834ace9eddb81839111de3bc0d1102e8de4283bf629950e6cb6d38cfeef7f2ac4678cd505496f7f21abd3433e8a77bb24abf23a42b7af6e24548ef399c522917806341225ed0d0592575d1d5eb5c80cf57ea4241120dbd0118295b8f357fe3bdff9a406f488d66c47b07f60aff560ccc11716ceac2cd63f4347f2e0041ec57ad3942b86879429852c412ad5c0a9116e0846b89172153028866446bf2afe1b3970dd71f84dbca3aec8f2bcd769c93cab6a149512c3bb3a7ae08a55343190f72e1acff14969e35523e6d9930a6d35c929ebd34d88426857b0b281e11a179e5ff0526a64cd5abccb61ede9a6b1b39cfe27e2ab1207f9dd4ac2e561c82f8d1b6a5eb174de96924cb87a32a662a07bc8e97dfb39db45ce520856c30dfe0779c81322999e2b16d4c4af545402b688b96e984d55fcc4b3a1630923af35cdb2c820894c42f2041f11a10c68c506d9d09563f34ac0d3072716de494eb4075da4ab01f849085adc582435d427a124fc7580adf6792974d485a656b5a5f08ded637fbe2917aa6a232001c760e9659ce11c6ba456662733de7581764fa3bf6b0f2b68aad367b59dc2e685249fabd91ee988de035592be43da712172880ea2ea3a02a11e7c9c183327fcc30ba8960400b638b1b4056d92b888a53e1be9cc14bc8cd7457a616305d973b531a9ddc50f4c4c921db2faa47c80f570f025170c336fa265a62807211fe32a57874feaf4303b83119f1571f89922a0aa60b1c37917f5213d7b7a1e9f678416cb63814f4004934821faf7c234f4846952779725f08206ace3031bd656bfbcef5028626e9e48d4e39a8cd62380ee6aae47291e7d3bc32fca382b3f8c6b7e6dbdf4029761db5f92421d75bb2f852e3195d381ba4340de74b0fa6500d8bae1b549dace16d5d651c3d12bedf77a4ec39ca565d7b035853df4907ae28e36cf6d5c4504638e7be2fa1d896de130b7c8e55ac2d30661f5b12e6fd7dde0dd3f358c6349cff9f8dfcfbf224aeaf702ea3eb42e02d4299a4aecddf7e1ba57772fd901be3f103968a1160e3f924d8056e869aabe6be5ca62d26329550b779138ec6b82ed79432d93d4e0feef470c2ee3d47235b4f5ee12c2cacb7f8670b5a196438cc88a6c098eb5d4a952aaff8e7245a40a72b50c5834ba3102c2e6ad60bf59e7159e5951c30e43f912da28b760800243b801d1c4e82e72255300100471b5f734d4f4cd004093e299b0e225cf450015bd87a55ab28c460bee25e95e9abce689dec92359476a98300e984394fc6969fd4d2db7a669eb3ed73a840b1e769a4c7743bc40c7bcb707e419fa8b17c425ded5d8f7a374835ce2addc30e958c1356ed97ac023c2b2e609da8996d52ae5578ad65768aa60e8f025ae9ecf5dac86caa8211a95a9d84f039b8983b089be134c5faddd560ce034c086890b61821d6afaf753be9e076da4f10a6a0eac8213deea7ae6caabaf5d5f9bb6b5a277ca39f2e92aab80eca55db1b9f9bb59cfcb35bf226aa703d6445130aa257782e966de814509d3a9a9e4e56b3e021180414e0f78cb12bafe639694ca41e9264f2d827d8e5e898823629c2c", 0x57f}], 0x1) 5.114310926s ago: executing program 1 (id=2575): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 4.905348473s ago: executing program 1 (id=2577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x19, 0xa, 0x3, "3205c5460400000000000000022c1e1ed1bf40070719310acaa785fc5824f214", 0x56544943}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0xa) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x600, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x30, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x8, "6e40283ba726"}, @sack_perm={0x4, 0x2}, @generic={0x2, 0xf, "41a947f9c183dddc887bb5cb15"}]}}}}}}}}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)="68821e4ad16dfd0d9c6629ae5deecf50bcb1780048efdb88c02c18005c309faee72e973acffffbeb07", 0x29}, {&(0x7f0000000040)="b6f9789b0d002c94be34a1bcc4dc1d", 0xf}], 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) 4.18935622s ago: executing program 4 (id=2580): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) 4.109465985s ago: executing program 4 (id=2581): openat$sndseq(0xffffffffffffff9c, 0x0, 0x1e2e81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.903100912s ago: executing program 0 (id=2582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010300000000000000000100000038000000030a01020000000000000000010000000900030073797a32000000000c00048008000140000000050900010073797a310000000014000000050a0102000000000000000001002000140000001100010000000000000000000000000a49c4339b03e75051d4a31cf275d6f98565751125e83000ba2f186a615b5c2ae970b3fb62844da5f68878489c8b9c282f88ba6465115e38d019480261d29158ccccf219ab434921dfd554a17767280848183a196e3945049cfa845f4e1d52c35e7151ad75863bc36f38cde5e6aa7e38ca7aa6b409b853ff973934dfa4675294ccc44dce20cd44b4ee8fc8593f5e6b58697c6ca635baf3c28de690e4b912032546ca"], 0x88}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_getattr(r2, &(0x7f00000001c0)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x676, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000006403a00fe8000000000000000000000000000aaff0200000000000000000000000000013a020000000000000710000000010208f264f0000000000000000000000000001d3f000000000000c910fe80000000000000000000000000003403e41d92a4c18076dc3e8b5cf4d1748e997c04e89d8e42e23c093f55ffb5dfbc388d0f455df16428364473db0a19e5a1b6f1d53bde7f3dc68a45e12dfbc91a1e7e64778d8af4db62602587029d16d601a34e6e1725fb2ac11d9602c6af04a26bc40111615c6ad92336ebd4013195beb4f9753dbaa483c11a8d56ee3d0f1a038518a90224810a9fb9f94d365cccd38cc2ff6465b72f6135f05bed081ebbcb5a44268fef15dfb2e9fa58b35e688763843dc522a2e33574e166d0fdbeadb93da3935f4cdc50df81e0d8289ba604df378378b6a64478661193c4ca55706ab65dff8d8419b3bae0b107080000000200b20600c910fe8000000000000000000000000000aaacc7e54c7e96e1edc43259a2442193b667db2838c377612861ff01881f1df9810c01a33f8be9ef68cbc473634fbba2df78a22ba2a91d612773ec421d659479844ab75f8402b7963fa9023ac40b2a14f1312c81f8d1a237f85d59eb125ce5b5d32b4d1a3f5227249db0e5f63559bb7d8ce7b247bb3f5de6d2be4ee23292e8785f004753c5b2953d36b83ab4dd9ce9e8b83310fa50d20139001ea9c43f54eb941b87a799962154d6f0747786032b88d7fc0f9b3c5829298b84ac1e8af0af41a94e09cfa9f1be1a2b0c3a73bfab7ab0da0d072000000001060a56310a0000000000000006000000000000000500000000000000001841000000000000087c1bbb06ddc134fc8f89d8128997a3c95acb15d880007f559b0890be401eb12c384ccf813d57c6160654ce8326de38918ff62d905d0a842e8e6d34649f499af734d409dbc444c2350bd6e9d0ab23379bafaa92d82b348741deb4d64ebe25ba51191337e8b5e0e4d0744f503036b8cd950961a6ef3bf5eb3978b619f6f7c204000009cbc2040000000a0101000740000000000e02220dff0f000000000000ffffff7f0000000008000000000000000400000000000000030000000000000001000000000000003f0000000000000005af7214a04af517426d953e31fbfa9cd2b916681043bc80d35fa2f7674ee8d2f3688d1a5cd542e482b5800ed6edb4a3d9425c976062587fb87c3d78bc9e21fb9aa51d2647a565cfd66c864d1879b496fed78fefd6b463681983a18267bcdc603703ce51aed537a62f44f002a23febf4b4c5a48a6e823d07906eb0aeceb8807fb4a750e8bf4f86925ca129be8d049026afaa439d9ecf1d2ab9188874ddec7b6f551af8468ffe86829d1b7a7a133870d5fec910fe8000000000000000000000000000aaef538ab18d19f0580598a1c10ecbf909594f8f81c4fbd4e7b01c84e9dc3005cab65e73dabba839939da46f267ca6c1f211b908480cff18848535ddc3a6ca9c8c64342f07bf877da0d3514cd8db9c90c677559ce9b7c910fcd4d1ffff0000000000000000000001c91000000000000000000000ffffac1414bb00000000002b2100000000000007200000000006000001060000000000000006000000000000000700000000000000c910fe8800000000000000000000000001010740000000020e40070000001200000000000600000000000000010000000000000001000000000000000000000000000000090000000000000003000000000000000730000000010a04000005000000000000000700000000000000080000000000000003000000000000000200000000000000040108c204000000070638aed66849fb519036ec0432200377d2a85230b22a658224d7b83ffb4e55f78f3399f5e3d5d4ce9d12c48c9be5a493d3531f9986c2def5eae50718000000000408ff01ff0f0000000000000200000000000000c2040000065605020800002b0e010100000000fc02000000000000000000000000000000000000000000000000000000000001fe800000000000000000000000000020fc01000000000000000000000000000120010000000000000000000000000001fc02000000000000000000000000000000000000000000000000000000000001870000000000000001040000000000004004040202600200fc0100000000000000000000000000010000000000000000000000000000000002009078000007d0608cb02bf9ff2f00fc000000000000000000000000000001fe8000000000000000000000000000aa00000400200000008d404d8728348e8a3f8a457d3c13facf28897f3a26d55e7902c49db22e0ad012907f4595964c5b29be23fd9342d15e3c764b7c9ed90a89e74544fc908fa0a3417e621602df81e3e502d97e0928bb9edb8aebd5c2b471d965f44dbc072939b4c2bd8d6ca80e64ae59654000aeff007c0ed3617a3bbba316197eef7b2a3cac43b87bdfbf6fa22d8bdf40f733833d993e5faf23c52b8ee0902ec89dd2bdae9138320528773ed160256584"], 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x51, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070000003bdddeff002959"], 0x0}, 0x0) connect$can_bcm(r3, &(0x7f0000000180), 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x10001, 0x5, 0x20, 0x0, 0x467, 0x9, 0x9, 0x80000001, 0x4, 0x8, 0x7, 0xfffff510, 0x80000001, 0x1, 0x3, 0xfffffffc, 0x7, 0x5, 0xff, 0x7, 0x5487, 0x6, 0x0, 0x4, 0x47e, 0xfffffffc, 0xffffffff, 0xfffffffb, 0x485, 0x3, 0x6b, 0x9a1c, 0x5, 0x4, 0x0, 0x2c2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0x7, 0x0, 0x0, 0xe65, 0x3ff, 0xc, 0x7, 0xf, 0x7, 0x1, 0x775a, 0x8, 0x0, 0x7fff, 0xfffffff7, 0x8000, 0xf79c, 0x5, 0x1ff, 0x1, 0x81, 0xce, 0x1, 0x7, 0x9, 0xc0000000, 0x10, 0x7, 0x6, 0xc, 0x5, 0x4, 0x333, 0x7, 0x4, 0x4, 0xbfb, 0x9, 0x9, 0x7fffffff, 0x0, 0x4, 0x9, 0x2, 0xfffffff7, 0x6, 0x3, 0x2, 0x904, 0x3, 0xa, 0x200, 0x8, 0x1959, 0x8, 0x2, 0x2, 0x6, 0x3, 0x10, 0x7, 0x574, 0x6, 0x6, 0x5f, 0x0, 0x0, 0x2, 0xc, 0x6, 0x800, 0x64af, 0x4, 0x3, 0x8, 0xc7, 0x0, 0x2, 0x7fff, 0x3, 0x9, 0x40, 0x7, 0x9, 0x8, 0x0, 0x4, 0x7, 0x10, 0x9, 0x8, 0x9, 0x1, 0x2, 0x9db, 0x0, 0x80000001, 0x1, 0xf4, 0x8001, 0x1, 0x1, 0xfffffff3, 0x7e3e55a6, 0x6, 0x7, 0x9, 0x4, 0x3, 0x4, 0x2, 0x4, 0xc63b, 0x9c8e, 0xfffffffd, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x2, 0x7, 0xac2, 0x6, 0xde7, 0x78, 0x8, 0x3ff, 0x4, 0x0, 0x3, 0x2, 0x859, 0x800, 0xbde8, 0x5, 0xc00, 0x0, 0x2, 0x1c00, 0x3ff, 0xffff, 0x8, 0x4, 0x7, 0x8001, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x0, 0x9, 0x7, 0x8, 0x0, 0x4, 0x8, 0xfffffff8, 0x7, 0x4, 0x800, 0x7, 0x80000001, 0xc, 0x4, 0x9, 0x9980, 0x6, 0x7ff, 0x10000, 0x6, 0x250, 0x9, 0xfffffffb, 0x2, 0x7, 0x4, 0x6, 0xfff, 0x3, 0x2, 0x80000000, 0x1, 0x3, 0xc093, 0x3, 0x6, 0x51d, 0x0, 0x1, 0x8, 0x4, 0x8001, 0x3, 0x8e, 0x3053, 0xc0000, 0x1, 0x0, 0x9, 0x1600, 0x5, 0xf1, 0xf, 0x4, 0x401, 0x6, 0x0, 0x200, 0x0, 0x4, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff8, 0x1, 0x2, 0x5, 0x8, 0x1, 0x0, 0x1, 0x202ed62a, 0x10, 0x9, 0x9, 0x8, 0x9, 0x7, 0x71c, 0x101, 0xfffffff7, 0x0, 0xa5d, 0xffff8000, 0x7f, 0x477b, 0x3, 0x7, 0xb4d8, 0xa0, 0x7ff, 0xffffff7f, 0x22ab, 0x8, 0xd7, 0x3f, 0x3ff, 0x1, 0x2327, 0x80, 0x3, 0xfffffffc, 0x200, 0x8, 0x2, 0xde41, 0x8, 0xc28e, 0x10000, 0xff800000, 0x0, 0x5, 0x9, 0xfffffffc, 0x32b, 0x1, 0xe, 0x4, 0x9, 0x7f5, 0x1, 0x29f, 0x400, 0xffff, 0x6, 0xffffffff, 0x8a, 0x8, 0x7, 0x80000000, 0x0, 0x200, 0x3, 0x2, 0xfff, 0x5, 0x4b1, 0x4, 0x3, 0x1, 0x4, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xfffffffc, 0x10001, 0x1db, 0x40, 0x80000000, 0x9, 0x1, 0x0, 0x15de, 0x2, 0x0, 0x200, 0xd, 0x7, 0x3, 0xfffffff8, 0x1, 0x3, 0x2, 0x8, 0x8, 0xfff, 0x6, 0x7fff, 0x0, 0xffff, 0x3, 0x4, 0x683, 0x8, 0x7, 0x8001, 0x6, 0x7, 0x0, 0x7, 0xffff2294, 0xfffffffa, 0x3, 0xb4, 0x8, 0xfffffff3, 0x5, 0x7fff, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xc18, 0x6, 0x6, 0x22ca21da, 0xffff, 0xb, 0xa, 0x9f5, 0x1, 0x2, 0x0, 0x0, 0x6, 0x80000000, 0xfffffffd, 0x7, 0x81, 0x8d4a, 0x10000, 0x7f, 0xc5e, 0x1ff, 0x800, 0x5, 0x5, 0xb74, 0xa, 0x80e, 0x1, 0x0, 0x9, 0x2454f7e4, 0x4, 0x6, 0x0, 0x5, 0x4, 0x772, 0x10001, 0xff, 0x1, 0x6, 0x2, 0x7, 0xff, 0x401, 0x0, 0x6, 0x7fffffff, 0x40, 0x9, 0xda1, 0x2, 0x200, 0x8, 0x2948, 0xf5e, 0x36bcd671, 0xb07, 0x8, 0x0, 0x8, 0x9, 0xfffffffa, 0x6, 0x1, 0x1c00, 0x7f, 0x7f, 0x5, 0x6, 0xf01, 0x10001, 0x9, 0x0, 0x4, 0x401, 0x1000, 0x4, 0x1000, 0x9, 0x80000000, 0x3, 0xe, 0x80000001, 0x9, 0x7, 0x80000000, 0x8, 0x0, 0x0, 0x1, 0x8, 0x3ff, 0x4, 0x1ff, 0x3, 0xff, 0x4, 0x1, 0xffff, 0x5, 0x4, 0x3, 0x80000001, 0x6, 0x100, 0x0, 0x170, 0x6c00, 0x2, 0x7, 0x4, 0xf61a, 0x28000, 0xd, 0x1, 0x8, 0x1, 0x6, 0x6, 0x0, 0x79ca]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe71, 0x1, 0x0, 0x1, 0x1, {0xc, 0x2, 0x4, 0x9d, 0x400, 0x1e970d41}, {0xf, 0x2, 0x8, 0x5c7b, 0x80, 0x1}, 0x1, 0x3, 0x3}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$can_bcm(r3, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 3.254283715s ago: executing program 7 (id=2583): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) 3.098026393s ago: executing program 1 (id=2584): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) 3.041222832s ago: executing program 7 (id=2585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, 0x0, 0xfffffffffffffd71) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x100, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x7fff) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x1, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]]}, 0x34}}, 0x0) 3.040794124s ago: executing program 4 (id=2586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x800000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3.004561125s ago: executing program 1 (id=2587): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)}, 0x10) 2.941210491s ago: executing program 1 (id=2588): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400), 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x291c, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x5) dup(0xffffffffffffffff) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.893866357s ago: executing program 4 (id=2589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.691880564s ago: executing program 4 (id=2590): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x80}}, 0x0) inotify_add_watch(r3, 0x0, 0xc0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000ff7f0000000000000002000400baed8319fd8c45d30300318f2d5c9250d9351eac7b33bc9c88387896a64716cb9614f3006d84ecad317fd2da293a792f213471679442570e06abd696d4bf2952dc8dd2a66d190d8d5406a509c452000000000000000000000000001f0e5d99d38b64e6d54224721fa03c9d60f296a2cbcc3ffacf6bbf2f8454551c2aa6228545e740b77a701efd47ca9e184b4f39e9a5a7d82b703f58628e11e50ec44551c1518223fa994ec0111202b8211ff23f729a694ee6b9fdb34c36d8c4af30f297f278aa3f8eba0cb0897fdce4637b90cd7495de35650a0f56736e74d4bfb10be5a289c03d4e7d4b0e486476957b6a8c841e27adb050f7c436bee248d32667ef2bc2eb171e6f2ef5cacb553f0d8fd97dd7e81b9953aae325c2b15cc35e4165d998ae58a947f97dda53e1d91cf6c367f4d06f38dcf23bb78e8287774af6fbee90a4", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="040000000000000010000400000000002000040000000000"], 0x34, 0x3) syz_open_dev$dri(0x0, 0x1, 0x2100) close(r0) 2.035426307s ago: executing program 2 (id=2593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000ec0)="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", 0x57f}], 0x1) 1.733086693s ago: executing program 2 (id=2594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="78010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES8=r0, @ANYRES64=r6, @ANYRESOCT], 0x178}}, 0x408c1) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) socket$inet_sctp(0x2, 0x1, 0x84) 1.133644618s ago: executing program 0 (id=2595): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r5) 539.394118ms ago: executing program 2 (id=2596): syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)) 506.305155ms ago: executing program 2 (id=2597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000980)) 440.680235ms ago: executing program 4 (id=2598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x5, 0x2, 0x52, 0x2, 0x3}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r5, 0x0}) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0xfb, 0x70, 0x4, 0x9, "5caa8ba5335ba097cef9ef4931e837cf", "9272d0b82840a66d8bbb26fe8c3bce0d0d08af9662cad52ed07469b8e484112106dcdde722a363edf2546d325b0f08924155070c271974d6170b0ed7cb525e32f944367bad9ae388b03e4a7f35ea3415e72113be50049a9dbddac7"}, 0x70, 0x1) close(0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x40000005, 0x3, 0x0, 0x1, [0x0], [0x4, 0x7, 0x77], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = syz_clone(0x1008000, &(0x7f0000000900)="551330ccc152bb19eb02c3f3523a5800e34921b19d0549aad4c8c7f318f24dfd02d3fc79b468125049e7989a60b817e7996278200f04bf0b9632a39c409dd7bc76fbce4c5c94f607645d53f9265e3c47ff26ba436ce6a3dbcad3d82455c6a0917346c198997cce4f6a0ba75d7518789c2f053646866c2ea568156089c2537d803557bb46b861426b5e264f0ac992cb9a2cbb7315f2314f60649df4e23e437d902bb0cf5825c7cb5ae786d968cba818a52b05a8253789f4e2739fb7f2023d159839b9cd71235105c0816703414aaf6839f2b4fc5ef8a11dc46777fa4a338d00b7b2bde4327a0843289678d570128b9f6e547e4a7dcc76069ba1acb76a20fa1b3f93e18578cc2396b1b0e6237e4f0738b498e13c7c8783c61797d7032e27cb4c062981c88cdf6f6f0822e9f7a2da33fe03f5631d7e1db0ce4e8f23e81015dff07b7fcf627662303c23d80961957cc96dcf4a286cc1dbd7d42872a5e4b854c49c55019c1fa0aeefbcc0ee62c18f8b25714adb1082945f080f01deb1c1c9f36028bfb37f3587ed6fdea86834008293d356e163d4798aa0aea67681241c33823d0c490a186885e1d33a7cbf430bba21d6422468623be1409aebf90a0aa01b699315970b4fc04e05182445e3c91fe7a1373b1dabe60fb08bbdb0e2754b55f2cf639e70a73849bb276a785356884ade025b1a4116c3ab7c7e5bd27f728e219ced627ff6eb51fd4c1a2ea11a0cd73f8ea35a7397700e1b9f6c38ced4e78173a0ca826a6748ce4ce60954bb93d17eba2050af779352c372211acce2ace43cf36d4eef25cc34618e9347f47bc2402a3689e21fab3882a775c56bedd9bceebf1a48eac107c3e37bf52e1497f0c02b359837f3adc4809e224dbda5f8999189b555d981d923741dd88936fd715958e9774c21810b48c1222ba0448bac7a75db0bd141206a90cddd3120d51e96b50ad4d41e4291bf850b70c45cd46c84ae044f98686181c167b66a29fbd45e0fea5604b1681533e130459c429647ba34bd8d5a4452e13b1eb87074672dc811ce280e09c4551e859bfecb2c1a4e3cec76caddf14a6a882280ec45f1e51bd14349b6b9054cf7ed450508aafc937734d50f1015b9c3ca41ccb9f2ad503e803ff072f94f3ceac3be4f33bb5d1b452d45882618220bccc9eeae51672a5036f5ec2a5ef47825b9ac05f9ed5e794a7fde5b0a4e901d6ef8945683fe5f3f1a081f42e8019f8aa3113e6a5022769fa41ff77cb1dbae87972f63c0023fb3ee0167af2d2d1500bb7a81582f0d80dc19d73b56a7e7cbc0e87cd18862007287c79084a20274c7d0527e3ca14d0a8e3adbf549f3fcadf3bf27b0b98c73062e1486a88f640bc328459c661027f487f20c43c6edbe5add6d10c907c67b5c755ba1e3c4d1c983b698dd25c15bc7e6b591001b45eef1cd77b745a93325f8d85b91e508e3949f2f0f26f38920fd058c5f64a454a82cc65c6b2e43c1c4a66760815a9d14fabde27d4df954f4ded9ab6b7907d69d9360ee0bfca0546e9a91dd9322eda46295650155af017a6faa55aacb4ac8937eedfcb27348fcdd670746559a6879e349ca48cbf989ac689cf4ad8638b1f796cf4d35a78c7ab6d6860c17b109edba89be6ef10601d06d6e8006524fb4707ad305b17389c9fa0fc2e4f86defa61f324c117a66cf9e9b628d0013b35a6b82acaa096f064a0df04d83be1299848b0f11511d56eb7707939db3ea5c49f07f20cbaeb2a9f64c0a035db9ce52bbeaa8cdaa662a1b5024bbcc37c6f94154e8fc67bd1cc40e64155530310db831929ce750465edd4d66c310642cc1197d51678997e09d55cc3f690cb4bd2b4221895e864ec71b0e7ea301246b568448732dbb9a42b19f395691049cb10a87af3830bbe68a31784b04c129ffda24af5d33f0b0622e20b9d07de4a1eecc7ade6bba15decd4b360e846309cdf6bdffb6e3b3fe339b9f7023e0dd427da00899c12260bfef52f2a3a4e60ece7498fe73061270cfd5003da917a5049c368e27e98f7a4dcf40fe05d8a5233ca660b428ef88e79ea573e8947dab969159c1d9ec2c7ffcf8a80ade6ae1ebc4118f48330e8fd827d05104d4ae85b0f63d4e6729e242254b19c009f3bfd3b9b01a5823792003183450aaebf728aac33e6572f70b878c1f43cbc9b6e86eee85ad49b0678a1c01848cf4d2e0a6768b21542640627104235472d20ac46eb8ab6745e5314a2d34fa5a9153487de6795a0ae1fc3dfede927c208c0eee8930f6e494640b2015bb358e30480aff1770788a4dbd39f68fa0b61fcde2822bc80bf413289c651d13b114bf04ff68c0a13e31f08bb6b12a65392400c17b891a5fb5f53c851e9dbfbfca9a5d8ea0fb0b2b6859c9413847fcd9713953e2a0a44e62f7eee10cad0b05f1e68fa2583acff79b8bc798569220ef1aa9b106568f2ef43fdb6178c676df5c534a8655c874aa7ee0bbd500b139fab91bc3eae415e43e815bf18f38441fe7444f389651c32c9d69747a6d92d96b23a3221e89e2e811a13f510b2a75bb3ea43510936e158d32f62634389519f8f4b393bd57d8a0c09726785eefb8c7a9783f9e48f60fb80eb1bbc389e439665e103b323c4e8aeec9ac4d3df14b90e084263120f9cb16597661e0f6eaf1ee12a8a2c9217546ed434661daa7e768b7d7679a23fd07f3cd78394b33eab55fec9168f5dcce29c86e3f022688c746f0054cff0a5ab34fd190a94934a845b5a1669576dcafa25c70d5210dc7d1b6f2b59ad21446f970fbb495e9b0159054b09017a8b18991acf3be606e0d1350aec4e6c1d51dba9cede5d7a967e9098e618fde4b8558a4b85cfd5ce44877293499d1d35e7ae7bf076f521937f0f786b31382999aa7dd48bb1dd2772126cb10fbde687a5313b6151284584b0d12c987b61427e588d50c4c97650ffdbfee1185db00049f1a81de0a83fcc6cce7b0c790e92a4d0c7468bee6c6a7c82b3935032871c5b649b7f31778695fac5c52a323195739351af5541fea98292b8057359c412b97df59e073c0f15331ab924771d03a34ba4d5df3d92c8edb866e0c1721ea0c55f8596d0b53d64e2627fb5ec2c9d1556e06adc04a102efb475892e14db03657223276ab85fafa81fcc45d92ff056a18c6e8276a40e78f4e3d8911b2d363cb33415960a5a3404516a6a55e087d646d76d3f2ecf6d74d8ccfe401270ad86ae37324ed16851bd0a4f563772698b972e8733460022b9ca0b22ebce1e08b6d1a909bd4160b717aa655e84eac0362197a619b0896692f12a9a6d6052c2e095163a1f77bf5f0895e4f4ceba9ebb095528862bc04bbbbda9fcbbad8c49ec0b0b1fc950512441bdc44b888a52a15df5e7cfc61a091e54024db915f3b1c8c7d353f3bb4c558a9445f8fb093c31fa9bc9996e568936860cf7573d8687384118883330708f6b392aa05259c516c2d237c7dc426d2a6cfdfdc93d4696412806375864c8b751e9360513ea1cf36601b4023a83bc311164e0d2364be2d9dc4a2720a4ad5456745bfae50df42a782b34b447cde2a0dafff1ef6b94d360c3521e5d06ecd487f8bf63e1ae2f143d657e68233d2b7b4219e8cb8d98f7d1b92ad5498c0e8fcbac739b92a27169cfdb1e6ac9fb79576741d2f21ef85a723192c30e695426b64d0278db149cd7d2b05306342c4ea04d7713a6d30590bd43b0fb6f30547a74794ddcab19756d58f1a54868bc24816b8f7a0a883491994ddb684220143c3fd8d0185480c5c7ffa5f933792a671bf75d78a4708c26ada808fcc359bfd2a292ea67b88a76a43946cffeaf651e2eb704ade6f33fb97f221009f1e6ee4831713f54fb6b2c74e436b85289487ebe2cd722cbfc7296fa5cd57c87a4693c0bacf8946c17bddd8053dae2e6703d87e1ff1f54d0552bca6809b000c0c43b86e365e39b9519400151904f77763c4a10d5b5c49e12e31961ad5f9fcecda2d0272d19e3f14152068ea79c1be2e8414781513a919f552e80124df00a2529256848cff2435b06a69da4051717b502a4b635e43d78cf34be8c93e9e60a435c4547891ff4844ecf5dc4154ae911e7090ef0cb4ac577d6e400107c63ee6f758012bbb07b548a329a225113144575f2506585cd90b4ff0c760a77be6e315f3e829723ddd69ac9eed7e28eee9003d5fca0aed1c8286a615dac4f904eb646fff50479eb6b12aa68a30fb8f6cc801aa373cdde4d7f689ae2df254cbb21368e029aba90425e626ff5aef62ff02de35fd769c2809f72684da7945e05760466b6d9d7da3dadb40f1a3027ed13859c59c332eaa1231df09da6382b63715bad2bbe8e4d40a372e051fdcbfbf677bbc0b39685a4e2b7bfc39d2ecdf62bc50e37a01c8cee193424215dab61c2440282e696a9eaef231d4fe073f4b69b28f957689406f67349d6058998028a7fac094685434dc7a8627072acf78817b16a4a9fde0e0666badedab82b9084418666afbc84080680d0ef5fedda1b3540039a01743415334dd064820848cc0a1925b2b31ce09982de271132fa2a11f2e96a2c5ef635c1a5a4933051aa31087ce4e5d6ea2c4b682ba458e6a9b25417372bd43279b38f0111a3f14f26106d83a4dabbbf3d914bf70e7da883ee196cc58e674317aaa07c5480f7d05695ea5f451ae0920c168ffcb8affda9c689a2bbe2c61eee0ee0434f1b7bd34cec880156321ed58d16ceadc0916276e0c69912211d391097f8791eb61d99031d494be3cb7095b33a1de9a28e9b7aff636e56bc06206d0042276fdceae046aabba36e94334667904ba478fab8f8e37e7caf83e6db3f5ca0ad52b57ae3e4e31c955b32a79fc6eb79691360c9376a19e95efc265c19663213a6b4e6c20a74122bb9f647a8addc6e9046aa27a5894b2ce840751ac7fc8644c94de44f56f6d6a3c63a6c68cc1a2e9631b8b7e064311ed38cbd92312ce5067043d8f5e7669029c7a1246ba25a2da8a179b606939cd7d487140456d4f3a11282a140c626fbff7d464d004fa7cbe0078f6d4f35969940803a8d988f285e02b9b6788cd1ac654643a894f213b1e4b5665b691e9705bcd359ceefa11b2a0779f114fe0ac9c1ffe45e93fd317108e7849112d816b7e8a6f205f4f2d5add8be4c09182a114f93fe19457542d9a10c1acb205094ed55bd0c26be23314bdec16f31d97e82f3ccf02616778720cf10227438d8fb58a7251e862e7a7a87ff4d1b0634ce94d1a53e11a86953f70802832057b9c4c80457b937cd58a46ef15ec746382ca282f9b93ff190498041a022168a94600f10b475572ad4aa44ae5c28baef15b3924657abf357ce7247858e5b985a6ccd794806aa88a26b6e96ba988084498c7562f8a503c77ac7b20b125788865f2dcfbb2ba85403d31795725b7d5e4339d1dde2f0f9999e2bcc5ae624cdcdea2969568fae9c4f770de7cd61e8018babd6160bec823fab985a84bdf4fdb03ed72b978b1edbc0bd485b0de6f2cc3c812f9a75bd02f855efc16864fb82fdd5596b98280366e9aa2637df90a6b9431f195353c80d814f4e93dda8fc27a291601dd3e0279150befb99c26ac0b788ee67f75832538171f983511033c4a3b78d97d14b20d676ca81ceef8ee0a043e4535a76694f367826c50a2bc78622adaf4f1aa4bd6b797e8442de9e223aaa993d0ebe5fb5fd65d3ccafbe173ad21eb98d6133b76b528edc9f0baf6b1cbc9f388c30d48a81f473c30f8ceebb914aacef70c2749ed82cf758d3f34f4f3b6d0412def352cc935e4ba40484798c936ad9ee494885e9c70f53f06424a9b17a026ceb3e62d25fff171e6fd6d37", 0x1000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)="6dd9e1185131c6d3e0603cead5648363f2532593509020713dadcaa0db02c96d4445") r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000400)={0x28, 0x0, 0x2710}, 0x10) sched_getattr(r9, &(0x7f00000003c0)={0x38}, 0x38, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 341.406371ms ago: executing program 2 (id=2599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47d6, 0x0, 0x2, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 2 (id=2600): syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d0000000109021801010400000309"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) kernel console output (not intermixed with test programs): ][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.619769][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.139812][T12530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.554562][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.566095][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.792139][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.800432][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.027285][T12532] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1825'. [ 791.701277][ T30] audit: type=1800 audit(1768211890.252:1503): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1819" name="bus" dev="overlay" ino=1931 res=0 errno=0 [ 792.632990][ T5921] net_ratelimit: 4 callbacks suppressed [ 792.633006][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.646682][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.655374][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.663470][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.792856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.862425][ T5921] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 793.529155][ T5921] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 793.537223][ T5921] usb 5-1: config 0 has no interface number 0 [ 793.582229][ T5921] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 793.606192][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.623790][ T5921] usb 5-1: Product: syz [ 793.638301][ T5921] usb 5-1: Manufacturer: syz [ 793.655874][ T5921] usb 5-1: SerialNumber: syz [ 793.671797][ T5921] usb 5-1: config 0 descriptor?? [ 793.677491][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.685914][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.966085][ T5921] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 794.084181][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.110980][ T5921] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 794.123112][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 794.131431][ T5921] usb 5-1: media controller created [ 795.485941][T12576] binder: 12575:12576 ioctl 400c620e 0 returned -14 [ 795.486093][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.512538][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.534443][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.584651][ T5921] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 795.666173][ T5921] usb 5-1: USB disconnect, device number 28 [ 797.995165][ T8815] net_ratelimit: 5 callbacks suppressed [ 797.995182][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.009433][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.572659][ T9179] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 798.765092][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.773367][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.942356][ T9179] usb 5-1: Using ep0 maxpacket: 16 [ 799.041770][T12616] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 799.815523][ T9179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.852385][ T9179] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 799.855451][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.861446][ T9179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.870061][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.920513][ T9179] usb 5-1: config 0 descriptor?? [ 800.872841][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.882219][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.146522][T12627] binder: 12621:12627 ioctl 400c620e 0 returned -14 [ 801.287170][ T9179] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 802.534282][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.542519][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.690475][ T868] usb 5-1: USB disconnect, device number 29 [ 803.174153][ T9179] net_ratelimit: 2 callbacks suppressed [ 803.174170][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.313741][T12641] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 803.592998][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.601425][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.672836][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.016834][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.157092][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.012740][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.072486][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.232852][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.240954][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.012194][T12652] lo speed is unknown, defaulting to 1000 [ 807.018605][T12652] lo speed is unknown, defaulting to 1000 [ 807.111919][T12652] IPVS: You probably need to specify IP address on multicast interface. [ 807.120311][T12652] IPVS: Error connecting to the multicast addr [ 808.154977][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.161272][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.314272][ T5921] net_ratelimit: 3 callbacks suppressed [ 808.314291][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.328140][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.629185][T12675] lo speed is unknown, defaulting to 1000 [ 808.717039][T12675] lo speed is unknown, defaulting to 1000 [ 809.032796][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.337060][T12684] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 809.354262][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.371218][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.379328][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.984955][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.002801][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.773047][T12707] kthread_run failed with err -4 [ 812.823285][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.831659][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.599328][T12712] lo speed is unknown, defaulting to 1000 [ 813.605719][T12712] lo speed is unknown, defaulting to 1000 [ 813.855291][ T6596] net_ratelimit: 2 callbacks suppressed [ 813.855308][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.873164][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.929269][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.942584][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.950674][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.968685][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.991498][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.967737][T12725] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 815.212367][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.089993][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.115559][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.593439][ T89] net_ratelimit: 5 callbacks suppressed [ 819.593456][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.608412][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.616917][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.627132][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.637338][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.702795][ T3509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.711445][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.751105][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.675650][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.685375][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.055206][T12752] syzkaller0: entered promiscuous mode [ 821.060693][T12752] syzkaller0: entered allmulticast mode [ 821.802377][ T6596] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 822.180737][ T6596] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 822.243471][ T6596] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 822.256835][ T6596] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.271976][ T6596] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 822.284635][ T6596] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 822.295573][ T6596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.309544][ T6596] usb 5-1: config 0 descriptor?? [ 823.636412][T12781] bond1: option mode: unable to set because the bond device has slaves [ 823.690156][T12781] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 823.969500][ T30] audit: type=1400 audit(1768211922.512:1504): avc: denied { connect } for pid=12782 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 824.645782][ T89] net_ratelimit: 20 callbacks suppressed [ 824.645798][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.689168][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.432485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.451846][ T1132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.473056][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.481588][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.691310][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.864788][ T89] usb 5-1: USB disconnect, device number 30 [ 826.552930][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.632873][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.714432][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.135823][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1901'. [ 830.208329][ T9179] net_ratelimit: 7 callbacks suppressed [ 830.208344][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.222353][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.318655][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.327729][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.352688][ T5921] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 830.513806][ T5921] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 830.524932][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.554364][ T5921] usb 1-1: config 0 descriptor?? [ 830.766936][T12868] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1907'. [ 831.895636][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.922446][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.205579][T12876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.222724][T12876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.252425][T12876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.293305][T12877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.068263][ T5921] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 833.102745][ T5921] usb 1-1: USB disconnect, device number 22 [ 835.424597][ T43] net_ratelimit: 18 callbacks suppressed [ 835.424618][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.439818][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.672497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.072132][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.080256][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.080853][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.096425][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.105033][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.173813][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.182070][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.755958][T12928] lo speed is unknown, defaulting to 1000 [ 839.762918][T12928] lo speed is unknown, defaulting to 1000 [ 840.037218][ T89] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 840.605333][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.936059][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.946263][ T89] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 840.955559][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.971822][ T89] usb 1-1: config 0 descriptor?? [ 841.113246][ T5921] net_ratelimit: 6 callbacks suppressed [ 841.113268][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.127361][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.133935][ T30] audit: type=1400 audit(1768211939.692:1505): avc: denied { remount } for pid=12937 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 841.158154][T12938] debugfs: Bad value for 'mode' [ 841.543379][ T89] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 841.701550][ T89] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 841.914038][T12948] Invalid source name [ 841.937921][ T89] cp2112 0003:10C4:EA90.0026: Part Number: 0x82 Device Version: 0xFE [ 842.016460][ T89] cp2112 0003:10C4:EA90.0026: error requesting SMBus config [ 842.125033][ T89] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -32 [ 843.179409][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.187899][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.196274][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.196479][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.213038][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.222029][ T89] usb 1-1: USB disconnect, device number 23 [ 844.078199][T12962] Invalid source name [ 844.444481][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.454882][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.912249][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.658427][ T9] net_ratelimit: 1 callbacks suppressed [ 846.658438][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.674521][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.683362][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.706718][T12979] lo speed is unknown, defaulting to 1000 [ 846.713492][T12979] lo speed is unknown, defaulting to 1000 [ 846.986278][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.994564][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.143488][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.152985][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.192991][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.201245][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.752472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.744351][ T5923] net_ratelimit: 6 callbacks suppressed [ 852.744369][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.758183][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.768588][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.792863][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.801480][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.352415][ T30] audit: type=1400 audit(1768211951.902:1506): avc: denied { create } for pid=13022 comm="syz.2.1962" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 853.422365][ T30] audit: type=1400 audit(1768211951.912:1507): avc: denied { write } for pid=13022 comm="syz.2.1962" name="file0" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 853.516110][ T30] audit: type=1400 audit(1768211951.912:1508): avc: denied { open } for pid=13022 comm="syz.2.1962" path="/384/file0" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 853.582455][ T30] audit: type=1400 audit(1768211952.002:1509): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=2074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 853.771153][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.833048][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.317732][T13035] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 854.793005][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.879561][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.823648][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.850603][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 855.963119][T13046] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 857.757571][ T43] net_ratelimit: 257 callbacks suppressed [ 857.757583][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.772768][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.802450][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.852594][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.103851][T13061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.160754][T13061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.192798][T13061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.452434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.461153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.742561][T13066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.087581][ T30] audit: type=1326 audit(1768211960.632:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 862.298748][ T30] audit: type=1326 audit(1768211960.642:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 862.315388][T13100] netlink: 608 bytes leftover after parsing attributes in process `syz.0.1982'. [ 862.409656][ T30] audit: type=1326 audit(1768211960.642:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 862.462868][T13102] debugfs: Bad value for 'mode' [ 862.470433][ T30] audit: type=1326 audit(1768211960.642:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 862.652637][ T30] audit: type=1326 audit(1768211960.642:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 863.213782][ T43] net_ratelimit: 17 callbacks suppressed [ 863.213817][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.227729][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.245493][ T30] audit: type=1326 audit(1768211960.642:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 863.347638][T13111] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 863.459647][ T30] audit: type=1326 audit(1768211960.642:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e38f749 code=0x7ffc0000 [ 864.233008][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.368507][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.272999][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.282377][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.290785][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.303645][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.317794][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.329792][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.444256][ T30] audit: type=1326 audit(1768211960.642:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f519e3c2005 code=0x7ffc0000 [ 865.525210][ T30] audit: type=1326 audit(1768211960.642:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f519e3c2005 code=0x7ffc0000 [ 865.553376][ T30] audit: type=1326 audit(1768211960.642:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f519e3c2005 code=0x7ffc0000 [ 868.313734][ T9179] net_ratelimit: 9 callbacks suppressed [ 868.313760][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.640325][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.792985][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.802494][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.597125][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.603750][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.840839][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.852088][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.888454][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.896820][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.362581][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.372389][T12710] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 871.627081][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.702376][T12710] usb 5-1: device descriptor read/64, error -71 [ 872.492370][T12710] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 872.518797][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 872.725959][T12710] usb 5-1: device descriptor read/64, error -71 [ 873.274838][T12710] usb usb5-port1: attempt power cycle [ 873.372606][ T5921] net_ratelimit: 3 callbacks suppressed [ 873.372630][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.436645][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.645492][T12710] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 873.674903][T12710] usb 5-1: device descriptor read/8, error -71 [ 874.832656][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.841635][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.851668][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.859934][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.546160][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.913076][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.921333][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.272447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.299094][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 878.299135][ T30] audit: type=1400 audit(1768211976.712:1578): avc: denied { create } for pid=13234 comm="syz.4.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 878.394227][ T5921] net_ratelimit: 2 callbacks suppressed [ 878.394244][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.418040][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.516162][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.524321][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.327729][ T30] audit: type=1400 audit(1768211976.782:1579): avc: denied { write } for pid=13234 comm="syz.4.2022" path="socket:[50091]" dev="sockfs" ino=50091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 879.432601][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.440972][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.461001][T13256] block device autoloading is deprecated and will be removed. [ 880.481003][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.489352][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.586550][ T30] audit: type=1400 audit(1768211979.142:1580): avc: denied { write } for pid=5808 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 880.641595][ T30] audit: type=1400 audit(1768211979.172:1581): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3085 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.132406][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.141006][ T2978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.262138][ T5923] net_ratelimit: 8 callbacks suppressed [ 884.262155][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.276318][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.523459][T13298] debugfs: Bad value for 'mode' [ 885.483399][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.491498][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.491758][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.508188][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.516893][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2043'. [ 885.529339][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.584739][T13303] lo speed is unknown, defaulting to 1000 [ 885.591107][T13303] lo speed is unknown, defaulting to 1000 [ 886.089809][T13315] Invalid source name [ 886.553608][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.561996][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.872680][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.914993][ T7808] net_ratelimit: 8 callbacks suppressed [ 889.915011][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.932917][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.962441][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.972774][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.912572][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.920944][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.996959][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.005377][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.680544][ T1132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.689327][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.042324][ T7808] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 894.323063][ T7808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.845135][ T7808] usb 6-1: config 0 has no interfaces? [ 894.902326][ T7808] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.952498][ T7808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.971073][ T6596] net_ratelimit: 7 callbacks suppressed [ 894.971088][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.984847][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.103485][ T7808] usb 6-1: config 0 descriptor?? [ 895.195639][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.203890][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.352433][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 895.732389][T13391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 895.750491][T13388] binder: 13385:13388 ioctl 400c620e 0 returned -14 [ 896.398947][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.407287][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.441251][T13391] bond_slave_0: entered promiscuous mode [ 896.446939][T13391] bond_slave_1: entered promiscuous mode [ 896.452601][T13391] syz_tun: entered promiscuous mode [ 896.462331][T13391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 896.472827][T13391] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 896.495466][T13391] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 897.534331][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.542577][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.666494][ T5923] usb 6-1: USB disconnect, device number 8 [ 898.655027][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.712448][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.982752][ T5923] net_ratelimit: 5 callbacks suppressed [ 899.982768][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.996894][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.577708][T13434] No control pipe specified [ 901.036349][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.047098][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.315798][T13437] binder: 13436:13437 ioctl 400c620e 0 returned -14 [ 901.682664][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.753362][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.792625][ T868] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 901.913716][T13456] blktrace: Concurrent blktraces are not allowed on loop4 [ 902.838534][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.846924][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.853719][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.892531][ T868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.902319][ T868] usb 5-1: New USB device found, idVendor=846d, idProduct=c626, bcdDevice= 0.00 [ 902.922365][ T868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.960009][ T868] usb 5-1: config 0 descriptor?? [ 903.177581][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 903.704141][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.727925][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.740649][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.756437][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.772552][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 903.772575][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.813355][ T868] hid-generic 0003:846D:C626.0027: unknown main item tag 0x0 [ 903.827937][ T5923] usb 6-1: config 250 has an invalid interface number: 228 but max is 0 [ 903.847239][ T868] hid-generic 0003:846D:C626.0027: hidraw0: USB HID v0.00 Device [HID 846d:c626] on usb-dummy_hcd.4-1/input0 [ 903.932692][ T5923] usb 6-1: config 250 has no interface number 0 [ 903.961345][ T868] usb 5-1: USB disconnect, device number 35 [ 904.064114][ T5923] usb 6-1: New USB device found, idVendor=041e, idProduct=4034, bcdDevice=ff.d7 [ 904.094245][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.103733][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.160997][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.496582][ T6522] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 904.801518][ T5923] usb 6-1: string descriptor 0 read error: -71 [ 904.820614][ T5923] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4034 [ 904.832523][ T5923] gspca_zc3xx: reg_w_i err -71 [ 904.973679][ T6522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.001732][ T6522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.062564][ T6522] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 905.078645][ T6522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.029159][ T8585] net_ratelimit: 6 callbacks suppressed [ 906.029176][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.042999][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.062350][ T5923] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 906.068646][ T5923] gspca_zc3xx 6-1:250.228: probe with driver gspca_zc3xx failed with error -71 [ 906.127766][ T6522] usb 2-1: config 0 descriptor?? [ 906.175684][ T5923] usb 6-1: USB disconnect, device number 9 [ 906.556730][ T6522] usbhid 2-1:0.0: can't add hid device: -71 [ 906.636285][ T6522] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 907.403253][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.411504][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.467502][T13481] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 907.474014][T13481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 907.514837][T13481] vhci_hcd vhci_hcd.0: Device attached [ 907.633656][ T6522] usb 2-1: USB disconnect, device number 26 [ 907.642336][ T5866] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 907.692415][T10197] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 907.782316][T10197] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 907.832542][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 907.842642][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.851125][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.867998][ T5866] usb 5-1: config 250 has an invalid interface number: 228 but max is 0 [ 907.892317][ T5866] usb 5-1: config 250 has no interface number 0 [ 907.903121][ T5866] usb 5-1: New USB device found, idVendor=041e, idProduct=4034, bcdDevice=ff.d7 [ 907.912147][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.980748][ T5866] usb 5-1: string descriptor 0 read error: -71 [ 909.021289][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.022739][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4034 [ 909.030960][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.062696][ T5866] gspca_zc3xx: reg_w_i err -71 [ 909.165187][T13491] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 909.173287][T13491] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 909.182531][T13491] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 909.190384][T13491] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 909.823291][T13484] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 909.829924][T13484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 909.838382][T13484] vhci_hcd vhci_hcd.0: Device attached [ 909.860239][T13498] binder: 13497:13498 ioctl 400c620e 0 returned -14 [ 910.286136][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.308962][ T5866] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 910.323653][ T5866] gspca_zc3xx 5-1:250.228: probe with driver gspca_zc3xx failed with error -71 [ 910.326530][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.368383][T13499] vhci_hcd: connection closed [ 910.368797][T13482] vhci_hcd: connection reset by peer [ 910.379940][ T60] vhci_hcd vhci_hcd.5: stop threads [ 910.400965][ T60] vhci_hcd vhci_hcd.5: release socket [ 910.426054][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 910.426269][ T5866] usb 5-1: USB disconnect, device number 36 [ 910.458171][ T60] vhci_hcd vhci_hcd.5: stop threads [ 910.478142][ T60] vhci_hcd vhci_hcd.5: release socket [ 910.500191][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 911.357280][ T9179] net_ratelimit: 3 callbacks suppressed [ 911.357298][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.371138][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.433352][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.441689][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.701571][T13511] Invalid source name [ 913.053299][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.062514][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.112638][T10197] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 913.392825][ T5923] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 913.544611][ T5923] usb 1-1: no configurations [ 913.549354][ T5923] usb 1-1: can't read configurations, error -22 [ 913.702366][ T5923] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 913.757201][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.765486][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.867091][ T5923] usb 1-1: no configurations [ 913.871704][ T5923] usb 1-1: can't read configurations, error -22 [ 913.902851][ T5923] usb usb1-port1: attempt power cycle [ 914.073044][T13526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.081856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.372947][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 914.413578][ T5923] usb 1-1: no configurations [ 914.418267][ T5923] usb 1-1: can't read configurations, error -22 [ 914.582836][ T5923] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 914.614203][ T5923] usb 1-1: no configurations [ 914.622345][ T5923] usb 1-1: can't read configurations, error -22 [ 914.633824][ T5923] usb usb1-port1: unable to enumerate USB device [ 915.016425][ T30] audit: type=1400 audit(1768212013.572:1582): avc: denied { write } for pid=13532 comm="syz.2.2100" path="socket:[51016]" dev="sockfs" ino=51016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 916.373663][ T6874] net_ratelimit: 7 callbacks suppressed [ 916.373680][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.387456][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.396232][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.405006][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.413583][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.648478][T13551] blktrace: Concurrent blktraces are not allowed on loop4 [ 917.482938][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.491167][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.052478][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.060898][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.563107][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.464059][ T9179] net_ratelimit: 7 callbacks suppressed [ 921.464077][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.477930][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.677318][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.756028][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.080433][ T4132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.729008][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.823104][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.832970][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.845503][ T6522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.046716][T13596] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 923.054758][T13596] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 923.063774][T13596] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 923.071621][T13596] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 923.353345][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.887824][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 927.195619][ T5923] net_ratelimit: 7 callbacks suppressed [ 927.195637][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.209368][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.619298][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.627458][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.667066][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.675319][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.672791][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.752510][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.737430][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.763475][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.034746][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.041006][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.984049][T13670] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 932.793002][ T8585] net_ratelimit: 4 callbacks suppressed [ 932.793019][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.873632][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.181228][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.868230][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.876759][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.946703][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.961466][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.872433][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.959889][T13707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.969497][T13707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.947126][ T868] net_ratelimit: 14 callbacks suppressed [ 937.947144][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.961502][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.982370][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.008480][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'. [ 938.012304][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.312444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.032823][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.041360][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.036376][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 940.072797][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.109313][T13760] syz.0.2166 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=3, oom_score_adj=1000 [ 940.120113][T13760] CPU: 0 UID: 0 PID: 13760 Comm: syz.0.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.120130][T13760] Tainted: [L]=SOFTLOCKUP [ 940.120134][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 940.120141][T13760] Call Trace: [ 940.120145][T13760] [ 940.120149][T13760] dump_stack_lvl+0x16c/0x1f0 [ 940.120169][T13760] dump_header+0x101/0x960 [ 940.120216][T13760] oom_kill_process+0x176/0x910 [ 940.120236][T13760] out_of_memory+0x350/0x1700 [ 940.120255][T13760] ? __lock_acquire+0x436/0x2890 [ 940.120270][T13760] ? __pfx_out_of_memory+0x10/0x10 [ 940.120292][T13760] mem_cgroup_out_of_memory+0x118/0x130 [ 940.120305][T13760] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 940.120319][T13760] ? do_raw_spin_unlock+0x172/0x230 [ 940.120338][T13760] try_charge_memcg+0x695/0xd30 [ 940.120355][T13760] ? __pfx_try_charge_memcg+0x10/0x10 [ 940.120373][T13760] ? memory_min_write+0xc1/0xe0 [ 940.120391][T13760] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 940.120405][T13760] obj_cgroup_charge_account+0x336/0x670 [ 940.120423][T13760] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 940.120444][T13760] __kmalloc_node_track_caller_noprof+0x6e3/0x930 [ 940.120459][T13760] ? copy_array.constprop.0+0x93/0x120 [ 940.120476][T13760] ? krealloc_node_align_noprof+0x2ea/0x3d0 [ 940.120490][T13760] krealloc_node_align_noprof+0x2ea/0x3d0 [ 940.120506][T13760] copy_array.constprop.0+0x93/0x120 [ 940.120521][T13760] copy_verifier_state+0xaf6/0x1030 [ 940.120540][T13760] ? kasan_save_track+0x14/0x30 [ 940.120554][T13760] do_check_common+0x5859/0xc640 [ 940.120577][T13760] ? tp_prog_func_proto+0x90/0xa0 [ 940.120591][T13760] ? __pfx_do_check_common+0x10/0x10 [ 940.120615][T13760] bpf_check+0x8b63/0xcb70 [ 940.120637][T13760] ? __pfx_bpf_check+0x10/0x10 [ 940.120651][T13760] ? rcu_is_watching+0x12/0xc0 [ 940.120662][T13760] ? trace_kmalloc+0x2b/0xb0 [ 940.120675][T13760] ? __kmalloc_noprof+0x35d/0x910 [ 940.120693][T13760] ? lsm_blob_alloc+0x68/0x90 [ 940.120706][T13760] ? lsm_blob_alloc+0x68/0x90 [ 940.120715][T13760] ? __asan_memset+0x23/0x50 [ 940.120725][T13760] ? selinux_bpf_prog_load+0x67/0x170 [ 940.120742][T13760] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 940.120758][T13760] bpf_prog_load+0x114e/0x2cc0 [ 940.120777][T13760] ? __pfx_bpf_prog_load+0x10/0x10 [ 940.120794][T13760] ? avc_has_perm_noaudit+0x149/0x3b0 [ 940.120806][T13760] ? avc_has_perm+0x144/0x1f0 [ 940.120823][T13760] ? selinux_bpf+0xdd/0x130 [ 940.120832][T13760] ? bpf_lsm_bpf+0x9/0x10 [ 940.120845][T13760] __sys_bpf+0x3e72/0x4980 [ 940.120861][T13760] ? futex_private_hash_put+0x160/0x1b0 [ 940.120878][T13760] ? __pfx___sys_bpf+0x10/0x10 [ 940.120893][T13760] ? __pfx_futex_wait+0x10/0x10 [ 940.120911][T13760] ? do_futex+0x122/0x350 [ 940.120936][T13760] ? xfd_validate_state+0x61/0x180 [ 940.120951][T13760] __x64_sys_bpf+0x78/0xc0 [ 940.120967][T13760] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.120982][T13760] do_syscall_64+0xcd/0xf80 [ 940.120999][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.121010][T13760] RIP: 0033:0x7f561318f749 [ 940.121021][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.121032][T13760] RSP: 002b:00007f5613f93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.121043][T13760] RAX: ffffffffffffffda RBX: 00007f56133e6090 RCX: 00007f561318f749 [ 940.121050][T13760] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 940.121057][T13760] RBP: 00007f5613213f91 R08: 0000000000000000 R09: 0000000000000000 [ 940.121063][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.121070][T13760] R13: 00007f56133e6128 R14: 00007f56133e6090 R15: 00007ffc814fc7b8 [ 940.121084][T13760] [ 940.121088][T13760] memory: usage 307188kB, limit 307200kB, failcnt 1815 [ 940.491023][T13760] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 940.499065][T13760] kmem: usage 307068kB, limit 9007199254740988kB, failcnt 0 [ 940.506337][T13760] Memory cgroup stats for /syz0: [ 940.506415][T13760] cache 65536 [ 940.514572][T13760] rss 20480 [ 940.517649][T13760] rss_huge 0 [ 940.520813][T13760] shmem 0 [ 940.523736][T13760] mapped_file 0 [ 940.527161][T13760] dirty 0 [ 940.530073][T13760] writeback 0 [ 940.533351][T13760] workingset_refault_anon 42 [ 940.537908][T13760] workingset_refault_file 2693 [ 940.542719][T13760] swap 331776 [ 940.545971][T13760] swapcached 0 [ 940.549307][T13760] pgpgin 1554402 [ 940.552851][T13760] pgpgout 1554381 [ 940.556451][T13760] pgfault 606975 [ 940.559961][T13760] pgmajfault 49 [ 940.563398][T13760] inactive_anon 0 [ 940.566997][T13760] active_anon 0 [ 940.570423][T13760] inactive_file 61440 [ 940.574381][T13760] active_file 4096 [ 940.578066][T13760] unevictable 0 [ 940.581489][T13760] hierarchical_memory_limit 314572800 [ 940.586857][T13760] hierarchical_memsw_limit 9223372036854771712 [ 940.592984][T13760] total_cache 65536 [ 940.596757][T13760] total_rss 20480 [ 940.600367][T13760] total_rss_huge 0 [ 940.604230][T13760] total_shmem 0 [ 940.607666][T13760] total_mapped_file 0 [ 940.611615][T13760] total_dirty 0 [ 940.615066][T13760] total_writeback 0 [ 940.618839][T13760] total_workingset_refault_anon 42 [ 940.623925][T13760] total_workingset_refault_file 2693 [ 940.629174][T13760] total_swap 331776 [ 940.632984][T13760] total_swapcached 0 [ 940.636842][T13760] total_pgpgin 1554402 [ 940.640877][T13760] total_pgpgout 1554381 [ 940.645007][T13760] total_pgfault 606975 [ 940.649040][T13760] total_pgmajfault 49 [ 940.652997][T13760] total_inactive_anon 0 [ 940.657117][T13760] total_active_anon 0 [ 940.661062][T13760] total_inactive_file 61440 [ 940.665549][T13760] total_active_file 4096 [ 940.669756][T13760] total_unevictable 0 [ 940.673729][T13760] anon_cost 0 [ 940.676981][T13760] file_cost 0 [ 940.680233][T13760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2166,pid=13755,uid=0 [ 940.695053][T13760] Memory cgroup out of memory: Killed process 13755 (syz.0.2166) total-vm:104344kB, anon-rss:1244kB, file-rss:23384kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 941.019131][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.033022][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.003301][T13781] syzkaller0: entered promiscuous mode [ 942.008921][T13781] syzkaller0: entered allmulticast mode [ 942.726123][T13791] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 943.512680][ T7808] net_ratelimit: 9 callbacks suppressed [ 943.512697][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.607600][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.355011][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.363506][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.472842][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.552866][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.635510][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.438673][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.447092][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.439796][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.952522][ C1] net_ratelimit: 3 callbacks suppressed [ 948.952540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.193157][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.230363][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.486934][T13877] binder: BINDER_SET_CONTEXT_MGR already set [ 949.501733][T13877] binder: 13876:13877 ioctl 4018620d 2000000001c0 returned -16 [ 950.472887][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.633513][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.642050][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.119743][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.679612][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.689772][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.542399][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.116125][ T5923] net_ratelimit: 3 callbacks suppressed [ 954.116142][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.149688][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.161279][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.171550][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.574415][T13924] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 955.220267][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.345654][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.465110][T13931] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 956.261398][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.392855][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.082792][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.196783][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.050947][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.060559][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.068502][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.081578][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.090508][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.755831][T13948] lo speed is unknown, defaulting to 1000 [ 958.765802][T13948] lo speed is unknown, defaulting to 1000 [ 959.878903][ T7808] net_ratelimit: 4 callbacks suppressed [ 959.878915][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.893037][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.006668][T13966] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 960.612331][ T5826] Bluetooth: hci4: command tx timeout [ 960.665935][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.748434][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.801789][ T9952] bond0: (slave syz_tun): Releasing backup interface [ 960.953139][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.962636][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.947785][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.042585][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.050859][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.210304][T13948] chnl_net:caif_netlink_parms(): no params data found [ 962.342333][ T9179] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 962.417951][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.435242][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.452204][T13948] bridge_slave_0: entered allmulticast mode [ 962.471405][T13948] bridge_slave_0: entered promiscuous mode [ 962.489242][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.513670][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.521116][ T9179] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.533480][ T9179] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.559545][ T9179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 962.559686][T13948] bridge_slave_1: entered allmulticast mode [ 962.582326][ T9179] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 962.592734][ T9179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.609470][ T9179] usb 1-1: config 0 descriptor?? [ 962.612684][T13948] bridge_slave_1: entered promiscuous mode [ 962.632614][ T5826] Bluetooth: hci4: command tx timeout [ 962.718968][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.756903][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.831107][T13948] team0: Port device team_slave_0 added [ 962.864001][T13948] team0: Port device team_slave_1 added [ 962.944545][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.960038][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.012391][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.029099][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.036332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.174965][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.212378][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.885127][ T9179] usbhid 1-1:0.0: can't add hid device: -71 [ 963.891597][ T9179] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 963.909100][T13990] lo speed is unknown, defaulting to 1000 [ 963.915524][T13990] lo speed is unknown, defaulting to 1000 [ 964.149920][ T9179] usb 1-1: USB disconnect, device number 28 [ 964.561400][T13948] hsr_slave_0: entered promiscuous mode [ 964.581447][T13948] hsr_slave_1: entered promiscuous mode [ 964.590861][T13948] debugfs: 'hsr0' already exists in 'hsr' [ 964.612816][T13948] Cannot create hsr debugfs directory [ 964.712531][ T5826] Bluetooth: hci4: command tx timeout [ 964.801601][T14009] comedi: No check for data length of config insn id -38843711 is implemented [ 964.810623][T14009] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 964.820148][T14009] comedi: Assuming n=419 is correct [ 965.203738][T13414] net_ratelimit: 7 callbacks suppressed [ 965.203756][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.702367][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.051889][T13948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 966.063164][T13948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 966.077543][T13948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 966.100277][T13948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 966.311000][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.338028][T13948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.364907][T13948] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.376454][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.383549][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.864870][ T5826] Bluetooth: hci4: command tx timeout [ 966.874594][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.882730][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.887689][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.897955][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.953771][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.965364][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.085381][T14040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.223390][T14050] syzkaller0: entered promiscuous mode [ 967.252443][T14050] syzkaller0: entered allmulticast mode [ 967.463999][ T5826] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 967.687827][T13948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.759924][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.913327][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.164886][T14092] No control pipe specified [ 970.698642][T13948] veth0_vlan: entered promiscuous mode [ 970.726251][T13948] veth1_vlan: entered promiscuous mode [ 970.760800][T13948] veth0_macvtap: entered promiscuous mode [ 970.776364][T13948] veth1_macvtap: entered promiscuous mode [ 970.836348][ T6874] net_ratelimit: 4 callbacks suppressed [ 970.836366][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.853578][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.909467][T13948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.820699][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.931981][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.940657][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.975402][T13948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.038940][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.049781][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.059031][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.068028][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.470689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.485985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.513186][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.521017][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.067032][T14119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.075583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.253590][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.292518][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.292987][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.370873][T14123] binder: 14120:14123 ioctl 400c620e 0 returned -14 [ 973.609178][T14131] syzkaller0: entered promiscuous mode [ 973.625159][T14131] syzkaller0: entered allmulticast mode [ 973.981266][T14140] No control pipe specified [ 976.000647][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2274'. [ 976.677090][ T6498] net_ratelimit: 6 callbacks suppressed [ 976.677107][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.690988][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.725052][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.742627][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.698046][T14175] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 977.753290][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.614690][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.792864][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.856429][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.865090][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.873715][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.232890][ C1] net_ratelimit: 19 callbacks suppressed [ 982.232907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.264118][T14216] No control pipe specified [ 982.531373][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.539823][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.015947][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.693781][T14227] lo speed is unknown, defaulting to 1000 [ 983.700145][T14227] lo speed is unknown, defaulting to 1000 [ 983.728347][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.736453][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.856540][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.915471][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.642666][T14236] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 984.650614][T14236] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 985.488249][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.497052][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.572727][T14236] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 985.580571][T14236] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 987.675977][T14273] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.686604][T14164] net_ratelimit: 8 callbacks suppressed [ 987.686616][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.707644][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.718890][T14272] Invalid source name [ 987.742795][T14273] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 987.757164][T14273] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.793249][T14273] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 988.713265][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.721974][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.414210][T14292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 989.456005][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 990.495922][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.504184][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.515194][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.523738][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.536494][ T6873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.549845][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.242854][T14319] comedi: No check for data length of config insn id -38843711 is implemented [ 992.251749][T14319] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 992.261198][T14319] comedi: Assuming n=419 is correct [ 992.487326][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.986659][ T5929] net_ratelimit: 7 callbacks suppressed [ 992.986676][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.000715][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.060536][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.512713][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.521165][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.962606][T14340] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 993.993843][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.073441][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.402529][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.411096][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.523381][ T30] audit: type=1400 audit(1768212094.882:1583): avc: denied { egress } for pid=14353 comm="syz.2.2326" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 996.547815][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.556353][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.633024][ T30] audit: type=1400 audit(1768212094.882:1584): avc: denied { sendto } for pid=14353 comm="syz.2.2326" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 996.701389][ T30] audit: type=1400 audit(1768212095.132:1585): avc: denied { recv } for pid=5797 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.28 dest=50234 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 998.531253][T14384] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 999.424297][ T8585] net_ratelimit: 8 callbacks suppressed [ 999.424321][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.439154][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.524914][T14390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 999.533132][T14390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 999.543137][T14390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 999.551061][T14390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 999.679426][T14396] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 999.691127][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.494722][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.685632][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.693783][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.694129][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.353174][T14406] No control pipe specified [ 1001.762901][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.771213][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.712949][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.036661][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 1005.093721][T14433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1005.371704][ T8585] net_ratelimit: 5 callbacks suppressed [ 1005.371720][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.385868][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.552568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.649212][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.662895][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.671207][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.481327][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.771983][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.801738][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.810285][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.969006][ T9179] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1008.142418][ T9179] usb 2-1: Using ep0 maxpacket: 32 [ 1008.149287][ T9179] usb 2-1: config 250 has an invalid interface number: 228 but max is 0 [ 1008.804902][ T9179] usb 2-1: config 250 has no interface number 0 [ 1008.812486][ T9179] usb 2-1: New USB device found, idVendor=041e, idProduct=4034, bcdDevice=ff.d7 [ 1008.821662][ T9179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.715092][ T9179] usb 2-1: string descriptor 0 read error: -71 [ 1009.733486][ T9179] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4034 [ 1009.750967][ T9179] gspca_zc3xx: reg_w_i err -71 [ 1010.424436][T14468] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1010.916348][ T868] net_ratelimit: 7 callbacks suppressed [ 1010.916366][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.942756][ T9179] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1011.178512][ T9179] gspca_zc3xx 2-1:250.228: probe with driver gspca_zc3xx failed with error -71 [ 1011.235308][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.243752][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.316518][ T9179] usb 2-1: USB disconnect, device number 27 [ 1011.748138][T14476] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1012.313254][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.321492][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.754716][T14480] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1012.773126][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 1012.782421][T14480] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1012.800281][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.842756][T14480] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1012.873836][T14480] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1013.649087][T14492] lo speed is unknown, defaulting to 1000 [ 1013.669072][T14492] lo speed is unknown, defaulting to 1000 [ 1014.096828][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.108923][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.112552][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.174311][ T30] audit: type=1400 audit(1768212112.732:1586): avc: denied { create } for pid=14490 comm="syz.4.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1014.302841][ T30] audit: type=1400 audit(1768212112.752:1587): avc: denied { bind } for pid=14490 comm="syz.4.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.149098][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.169059][ T30] audit: type=1400 audit(1768212112.752:1588): avc: denied { connect } for pid=14490 comm="syz.4.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.227376][ T30] audit: type=1400 audit(1768212112.762:1589): avc: denied { write } for pid=14490 comm="syz.4.2356" path="socket:[57564]" dev="sockfs" ino=57564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1015.532118][T14511] No control pipe specified [ 1015.946080][ T6596] net_ratelimit: 1 callbacks suppressed [ 1015.946099][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.163729][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.228354][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.511130][T14516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.519574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.192840][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.200991][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.353419][T14525] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1017.551527][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.717548][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.705968][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.871239][T14542] lo speed is unknown, defaulting to 1000 [ 1019.891333][T14542] lo speed is unknown, defaulting to 1000 [ 1020.837316][T14553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1021.432897][ T7808] net_ratelimit: 6 callbacks suppressed [ 1021.432913][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.447204][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.993308][T10197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.263285][T13736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1022.274067][T13736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1022.282666][T13736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1022.303823][T13736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1022.311163][T13736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1022.348531][T14564] lo speed is unknown, defaulting to 1000 [ 1022.356630][T14564] lo speed is unknown, defaulting to 1000 [ 1023.310167][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.319602][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.580049][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.842317][T10197] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1024.258407][T10197] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 1024.260139][T14564] chnl_net:caif_netlink_parms(): no params data found [ 1024.269468][T10197] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.286417][T10197] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1024.296410][T10197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.304478][T10197] usb 5-1: Product: syz [ 1024.308752][T10197] usb 5-1: Manufacturer: syz [ 1024.318617][T10197] usb 5-1: SerialNumber: syz [ 1024.318682][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.333380][T10197] usb 5-1: config 0 descriptor?? [ 1024.341134][T10197] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1024.392863][T13736] Bluetooth: hci5: command tx timeout [ 1024.399406][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.550984][T10197] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1024.586715][T10197] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1024.623334][T10197] usb 5-1: USB disconnect, device number 37 [ 1024.640634][T14250] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.736132][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.752404][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.761234][T14564] bridge_slave_0: entered allmulticast mode [ 1024.811904][T14564] bridge_slave_0: entered promiscuous mode [ 1024.873154][T14250] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.896491][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.913818][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.927370][T14564] bridge_slave_1: entered allmulticast mode [ 1024.935401][T14564] bridge_slave_1: entered promiscuous mode [ 1024.985419][T14250] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.033044][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.353667][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.856564][T14609] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1025.864528][T14609] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1025.873837][T14609] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1025.881739][T14609] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1026.193295][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.324046][T14615] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1027.033283][ T5873] net_ratelimit: 1 callbacks suppressed [ 1027.033324][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.048098][T13736] Bluetooth: hci5: command tx timeout [ 1027.173867][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.233510][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.242167][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.291746][T14250] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.605019][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.651557][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1027.726288][T14564] team0: Port device team_slave_0 added [ 1027.755636][T14564] team0: Port device team_slave_1 added [ 1027.856876][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.872296][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.938678][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.965775][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.974724][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.001714][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.083427][T14637] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1028.091944][T14637] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1028.102519][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.110947][T14637] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1028.118953][T14637] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1028.314685][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.322797][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.322940][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.483096][T14250] bridge_slave_1: left allmulticast mode [ 1028.488761][T14250] bridge_slave_1: left promiscuous mode [ 1028.519587][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.599695][ T30] audit: type=1400 audit(1768212127.122:1590): avc: denied { create } for pid=14641 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1028.710069][T14250] bridge_slave_0: left allmulticast mode [ 1028.771760][T14250] bridge_slave_0: left promiscuous mode [ 1028.824795][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.952516][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.125074][T13736] Bluetooth: hci5: command tx timeout [ 1029.352647][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.300401][T13736] Bluetooth: hci5: command tx timeout [ 1031.851359][T14673] /dev/nullb0: Can't open blockdev [ 1031.868635][T14250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.885175][T14250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.898799][T14250] bond0 (unregistering): Released all slaves [ 1031.922023][T14564] hsr_slave_0: entered promiscuous mode [ 1031.935046][T14564] hsr_slave_1: entered promiscuous mode [ 1031.945835][T14564] debugfs: 'hsr0' already exists in 'hsr' [ 1031.951642][T14564] Cannot create hsr debugfs directory [ 1032.500918][T13736] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1032.595364][T14250] hsr_slave_0: left promiscuous mode [ 1032.618794][T14250] hsr_slave_1: left promiscuous mode [ 1032.629473][T14250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.640840][T14250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.652989][T14250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.662401][T14250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.740682][T14693] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1032.748788][T14693] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1032.758645][T14693] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1032.767207][T14693] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1032.792559][T14250] veth1_macvtap: left promiscuous mode [ 1032.801133][T14250] veth0_macvtap: left promiscuous mode [ 1032.807043][T14250] veth1_vlan: left promiscuous mode [ 1032.872794][ T43] net_ratelimit: 10 callbacks suppressed [ 1032.872809][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.892058][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.901874][T14250] veth0_vlan: left promiscuous mode [ 1033.365945][T14699] No control pipe specified [ 1033.809021][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.948851][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.957952][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.969160][T14703] binder: 14702:14703 ioctl 4018620d 0 returned -22 [ 1034.072438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.152971][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.964931][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.528485][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.351088][T14720] syz.0.2424 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1036.362892][T14720] CPU: 1 UID: 0 PID: 14720 Comm: syz.0.2424 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.362911][T14720] Tainted: [L]=SOFTLOCKUP [ 1036.362915][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.362922][T14720] Call Trace: [ 1036.362926][T14720] [ 1036.362931][T14720] dump_stack_lvl+0x16c/0x1f0 [ 1036.362952][T14720] dump_header+0x101/0x960 [ 1036.362972][T14720] oom_kill_process+0x176/0x910 [ 1036.362992][T14720] out_of_memory+0x350/0x1700 [ 1036.363010][T14720] ? __lock_acquire+0x436/0x2890 [ 1036.363025][T14720] ? __pfx_out_of_memory+0x10/0x10 [ 1036.363047][T14720] mem_cgroup_out_of_memory+0x118/0x130 [ 1036.363060][T14720] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1036.363074][T14720] ? do_raw_spin_unlock+0x172/0x230 [ 1036.363092][T14720] try_charge_memcg+0x695/0xd30 [ 1036.363115][T14720] ? __pfx_try_charge_memcg+0x10/0x10 [ 1036.363131][T14720] ? memory_min_write+0xc1/0xe0 [ 1036.363149][T14720] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1036.363163][T14720] obj_cgroup_charge_account+0x336/0x670 [ 1036.363182][T14720] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1036.363203][T14720] __kmalloc_cache_noprof+0x5cc/0x800 [ 1036.363213][T14720] ? krealloc_node_align_noprof+0x269/0x3d0 [ 1036.363227][T14720] ? copy_verifier_state+0xc1b/0x1030 [ 1036.363244][T14720] ? __asan_memcpy+0x3c/0x60 [ 1036.363257][T14720] ? copy_verifier_state+0xc1b/0x1030 [ 1036.363272][T14720] copy_verifier_state+0xc1b/0x1030 [ 1036.363288][T14720] ? kasan_save_track+0x14/0x30 [ 1036.363303][T14720] do_check_common+0x5859/0xc640 [ 1036.363325][T14720] ? tp_prog_func_proto+0x90/0xa0 [ 1036.363341][T14720] ? __pfx_do_check_common+0x10/0x10 [ 1036.363361][T14720] bpf_check+0x8b63/0xcb70 [ 1036.363382][T14720] ? __pfx_bpf_check+0x10/0x10 [ 1036.363396][T14720] ? rcu_is_watching+0x12/0xc0 [ 1036.363407][T14720] ? trace_kmalloc+0x2b/0xb0 [ 1036.363421][T14720] ? __kmalloc_noprof+0x35d/0x910 [ 1036.363439][T14720] ? lsm_blob_alloc+0x68/0x90 [ 1036.363453][T14720] ? lsm_blob_alloc+0x68/0x90 [ 1036.363462][T14720] ? __asan_memset+0x23/0x50 [ 1036.363472][T14720] ? selinux_bpf_prog_load+0x67/0x170 [ 1036.363489][T14720] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 1036.363505][T14720] bpf_prog_load+0x114e/0x2cc0 [ 1036.363524][T14720] ? __pfx_bpf_prog_load+0x10/0x10 [ 1036.363541][T14720] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1036.363554][T14720] ? avc_has_perm+0x144/0x1f0 [ 1036.363570][T14720] ? selinux_bpf+0xdd/0x130 [ 1036.363580][T14720] ? bpf_lsm_bpf+0x9/0x10 [ 1036.363592][T14720] __sys_bpf+0x3e72/0x4980 [ 1036.363608][T14720] ? futex_private_hash_put+0x160/0x1b0 [ 1036.363625][T14720] ? __pfx___sys_bpf+0x10/0x10 [ 1036.363641][T14720] ? __pfx_futex_wait+0x10/0x10 [ 1036.363659][T14720] ? do_futex+0x122/0x350 [ 1036.363682][T14720] ? __pfx___x64_sys_futex+0x10/0x10 [ 1036.363698][T14720] ? xfd_validate_state+0x61/0x180 [ 1036.363713][T14720] __x64_sys_bpf+0x78/0xc0 [ 1036.363729][T14720] ? lockdep_hardirqs_on+0x7c/0x110 [ 1036.363745][T14720] do_syscall_64+0xcd/0xf80 [ 1036.363761][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.363773][T14720] RIP: 0033:0x7f561318f749 [ 1036.363783][T14720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.363795][T14720] RSP: 002b:00007f5613fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.363806][T14720] RAX: ffffffffffffffda RBX: 00007f56133e5fa0 RCX: 00007f561318f749 [ 1036.363813][T14720] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1036.363820][T14720] RBP: 00007f5613213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1036.363826][T14720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.363833][T14720] R13: 00007f56133e6038 R14: 00007f56133e5fa0 R15: 00007ffc814fc7b8 [ 1036.363847][T14720] [ 1036.363851][T14720] memory: usage 307200kB, limit 307200kB, failcnt 2330 [ 1036.714988][ T9179] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1036.724318][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.854458][T14720] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 1036.862696][T14720] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 1036.869985][T14720] Memory cgroup stats for /syz0: [ 1036.870060][T14720] cache 106496 [ 1036.878480][T14720] rss 4096 [ 1036.881474][T14720] rss_huge 0 [ 1036.884653][T14720] shmem 0 [ 1036.887561][T14720] mapped_file 0 [ 1036.890986][T14720] dirty 0 [ 1036.893911][T14720] writeback 0 [ 1036.897166][T14720] workingset_refault_anon 128 [ 1036.901808][T14720] workingset_refault_file 5124 [ 1036.906563][T14720] swap 180224 [ 1036.909818][T14720] swapcached 40960 [ 1036.913524][T14720] pgpgin 1748346 [ 1036.917060][T14720] pgpgout 1748310 [ 1036.920661][T14720] pgfault 685901 [ 1036.924195][T14720] pgmajfault 99 [ 1036.927640][T14720] inactive_anon 4096 [ 1036.931500][T14720] active_anon 36864 [ 1036.935291][T14720] inactive_file 0 [ 1036.938895][T14720] active_file 106496 [ 1036.942766][T14720] unevictable 0 [ 1036.946193][T14720] hierarchical_memory_limit 314572800 [ 1036.951531][T14720] hierarchical_memsw_limit 9223372036854771712 [ 1036.957673][T14720] total_cache 106496 [ 1036.961824][T14720] total_rss 4096 [ 1036.965367][T14720] total_rss_huge 0 [ 1036.969056][T14720] total_shmem 0 [ 1036.972502][T14720] total_mapped_file 0 [ 1036.976450][T14720] total_dirty 0 [ 1036.979876][T14720] total_writeback 0 [ 1036.983677][T14720] total_workingset_refault_anon 128 [ 1036.988840][T14720] total_workingset_refault_file 5124 [ 1036.994104][T14720] total_swap 180224 [ 1036.997879][T14720] total_swapcached 40960 [ 1037.002090][T14720] total_pgpgin 1748346 [ 1037.006143][T14720] total_pgpgout 1748310 [ 1037.010263][T14720] total_pgfault 685901 [ 1037.014316][T14720] total_pgmajfault 99 [ 1037.018271][T14720] total_inactive_anon 4096 [ 1037.022662][T14720] total_active_anon 36864 [ 1037.026958][T14720] total_inactive_file 0 [ 1037.031094][T14720] total_active_file 106496 [ 1037.035500][T14720] total_unevictable 0 [ 1037.039449][T14720] anon_cost 0 [ 1037.042719][T14720] file_cost 0 [ 1037.045976][T14720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2424,pid=14719,uid=0 [ 1037.060793][T14720] Memory cgroup out of memory: Killed process 14719 (syz.0.2424) total-vm:102032kB, anon-rss:1224kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1037.513897][ T9179] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1037.542407][ T9179] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1037.551429][ T9179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.647603][ T9179] usb 2-1: config 0 descriptor?? [ 1037.654671][T14250] team0 (unregistering): Port device team_slave_1 removed [ 1037.708560][T14250] team0 (unregistering): Port device team_slave_0 removed [ 1038.601674][ T868] net_ratelimit: 6 callbacks suppressed [ 1038.601691][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.792912][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.873414][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.920611][T14743] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1038.928636][T14743] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1038.937855][T14743] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1038.945768][T14743] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1039.399845][ T43] usb 2-1: USB disconnect, device number 28 [ 1039.842627][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.920197][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.491290][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.499650][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.780133][T14765] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1040.788235][T14765] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1040.797186][T14564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1040.802176][T14765] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1040.811774][T14765] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1040.954243][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.073235][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.116363][T14564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1041.156459][T14564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1041.243044][T14564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1041.426559][T14779] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1041.546866][T14779] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1041.732432][T14423] Bluetooth: hci5: command 0x0405 tx timeout [ 1042.029361][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.803742][T14779] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1042.832728][T14779] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1042.876940][T14564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.070035][T14790] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1043.293324][T14564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.445250][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.452412][T12419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.258160][T12710] net_ratelimit: 4 callbacks suppressed [ 1044.258173][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.272158][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.298896][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.306104][T12419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.532363][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.540552][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.322417][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.553834][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.556124][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.570001][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.570207][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.801693][T14564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.592790][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.752477][T14564] veth0_vlan: entered promiscuous mode [ 1047.783403][T14564] veth1_vlan: entered promiscuous mode [ 1047.874219][T14564] veth0_macvtap: entered promiscuous mode [ 1047.881989][T14564] veth1_macvtap: entered promiscuous mode [ 1047.914193][T14564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.954980][T14564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.103014][T14587] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.112900][T14587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.153648][T14587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.182325][T14587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.042519][T14253] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.822558][ T5936] net_ratelimit: 4 callbacks suppressed [ 1049.822575][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.933060][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.966516][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.032422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.154074][T14253] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.196238][T14587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.215167][T14587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.324729][T14253] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.352544][ T9179] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1050.595156][ T9179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1050.601788][ T9179] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1050.644303][ T9179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.706262][ T9179] usb 1-1: config 0 descriptor?? [ 1050.843707][T14253] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.980973][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.996486][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.115047][ T9179] video4linux radio48: keene_cmd_set failed (-71) [ 1052.253626][ T9179] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1052.265487][ T9179] usb 1-1: USB disconnect, device number 29 [ 1052.341279][T14253] bridge_slave_1: left allmulticast mode [ 1052.367079][T14253] bridge_slave_1: left promiscuous mode [ 1052.407336][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.447359][T14253] bridge_slave_0: left allmulticast mode [ 1052.462251][T14253] bridge_slave_0: left promiscuous mode [ 1052.484156][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.606528][T14253] bond_slave_0: left promiscuous mode [ 1052.628142][T14253] bond_slave_1: left promiscuous mode [ 1053.329192][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.345276][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.916157][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.922589][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.393046][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.527178][T14892] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1054.639190][ T30] audit: type=1400 audit(1768212153.172:1591): avc: denied { read } for pid=14885 comm="syz.7.2462" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1055.078921][ T30] audit: type=1400 audit(1768212153.182:1592): avc: denied { open } for pid=14885 comm="syz.7.2462" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1055.083945][ T30] audit: type=1400 audit(1768212153.232:1593): avc: denied { ioctl } for pid=14885 comm="syz.7.2462" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1055.294498][T14253] dvmrp1 (unregistering): left allmulticast mode [ 1055.457119][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.838589][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.130949][T14253] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1056.131754][T14253] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1056.147584][T14253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.153680][T14253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.154528][T14253] bond0 (unregistering): Released all slaves [ 1056.169667][T14909] blktrace: Concurrent blktraces are not allowed on loop4 [ 1056.393689][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.483696][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.670580][T14253] bond1 (unregistering): Released all slaves [ 1057.501689][T14253] IPVS: stopping master sync thread 11115 ... [ 1057.536505][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.983273][T14253] hsr_slave_0: left promiscuous mode [ 1058.036864][T14924] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2471'. [ 1058.046717][T14924] unsupported nlmsg_type 40 [ 1058.567595][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.589559][T14253] hsr_slave_1: left promiscuous mode [ 1058.597173][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.605803][T14253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.757481][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.767241][T14253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.031211][T14253] dummy0: left allmulticast mode [ 1059.060669][T14253] veth1_macvtap: left promiscuous mode [ 1059.145898][T14253] veth0_macvtap: left promiscuous mode [ 1059.414233][T14253] veth1_vlan: left promiscuous mode [ 1059.444586][T14253] veth0_vlan: left promiscuous mode [ 1059.473995][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.027379][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.095552][T14962] blktrace: Concurrent blktraces are not allowed on loop4 [ 1061.210323][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.218707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.155096][ T7808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.517786][T14988] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1062.525843][T14988] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1062.535951][T14988] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1062.543875][T14988] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1062.563292][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.393378][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.559378][T14253] team0 (unregistering): Port device team_slave_1 removed [ 1064.005442][T14253] team0 (unregistering): Port device team_slave_0 removed [ 1064.477269][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.448123][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.513497][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.600349][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.659665][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.687032][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.915771][T15025] blktrace: Concurrent blktraces are not allowed on loop4 [ 1068.634393][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.716639][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.327202][T15040] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1069.336236][T15040] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1069.345503][T15040] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1069.353590][T15040] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1069.792789][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.905628][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.673801][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.013441][T15052] 9p: Could not find request transport: fd0x0000000000000005 [ 1072.053640][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.372843][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.713132][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.721238][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.877135][T15081] blktrace: Concurrent blktraces are not allowed on loop4 [ 1075.035632][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.060231][T14253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.082434][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.093969][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.006727][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.382487][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.459056][T15095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.467576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.728514][T15099] batadv0: entered promiscuous mode [ 1077.752385][T15099] vlan2: entered promiscuous mode [ 1077.762511][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.393856][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.644046][ T30] audit: type=1400 audit(1768212177.162:1594): avc: denied { connect } for pid=15105 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1078.691046][ T30] audit: type=1400 audit(1768212177.172:1595): avc: denied { write } for pid=15105 comm="syz.1.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1079.092922][T15115] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2513'. [ 1079.122760][ T30] audit: type=1400 audit(1768212177.642:1596): avc: denied { nlmsg_read } for pid=15114 comm="syz.7.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1079.512907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.610233][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.632929][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.793870][T14813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.803131][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.313994][ T30] audit: type=1400 audit(1768212179.872:1597): avc: denied { append } for pid=15143 comm="syz.4.2528" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1081.937166][ T30] audit: type=1400 audit(1768212179.882:1598): avc: denied { bind } for pid=15143 comm="syz.4.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1082.265880][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1082.333521][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1082.348883][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1082.421108][T15159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1082.510965][ T30] audit: type=1400 audit(1768212181.062:1599): avc: denied { connect } for pid=15164 comm="syz.1.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1082.582518][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1082.647622][ T30] audit: type=1400 audit(1768212181.202:1600): avc: denied { bind } for pid=15167 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.717339][T15172] pim6reg: entered allmulticast mode [ 1082.727778][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1082.739289][ T30] audit: type=1400 audit(1768212181.232:1601): avc: denied { setopt } for pid=15167 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.760228][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 1082.763273][T15174] binder_alloc: 15167: pid 15167 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1082.782726][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1082.865505][ T5873] usb 3-1: config 0 has no interfaces? [ 1082.877229][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1082.888681][T13414] net_ratelimit: 3 callbacks suppressed [ 1082.888695][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.915315][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.954654][ T5873] usb 3-1: config 0 descriptor?? [ 1083.262318][T15161] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1083.884379][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.922525][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.051326][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.651591][T15223] loop5: detected capacity change from 0 to 4095 [ 1085.722932][T15225] random: crng reseeded on system resumption [ 1085.790541][T15226] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 1085.802711][ T30] audit: type=1400 audit(1768212184.272:1602): avc: denied { read write } for pid=15220 comm="syz.1.2552" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1085.845714][ T30] audit: type=1400 audit(1768212184.282:1603): avc: denied { ioctl open } for pid=15220 comm="syz.1.2552" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1085.915833][ T5812] usb 3-1: USB disconnect, device number 29 [ 1085.943467][ T5873] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1086.072944][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.128000][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1086.145903][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1086.177974][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1086.249963][ T5873] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1086.274668][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.329805][ T5873] usb 1-1: Product: syz [ 1086.371654][ T5873] usb 1-1: Manufacturer: syz [ 1086.382114][ T5873] usb 1-1: SerialNumber: syz [ 1086.388611][ T30] audit: type=1400 audit(1768212184.942:1604): avc: denied { read } for pid=15235 comm="syz.4.2556" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1086.556559][ T5873] usb 1-1: config 0 descriptor?? [ 1086.575805][ T30] audit: type=1400 audit(1768212184.942:1605): avc: denied { open } for pid=15235 comm="syz.4.2556" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1086.610469][ T30] audit: type=1400 audit(1768212184.942:1606): avc: denied { ioctl } for pid=15235 comm="syz.4.2556" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1086.637636][ T5873] usb 1-1: no audio or video endpoints found [ 1086.723199][ T30] audit: type=1400 audit(1768212185.262:1607): avc: denied { map } for pid=15240 comm="syz.2.2558" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1086.764386][T15246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1086.894979][ T5873] usb 1-1: USB disconnect, device number 30 [ 1086.908459][ T30] audit: type=1400 audit(1768212185.462:1608): avc: denied { write } for pid=15244 comm="syz.1.2560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1086.963288][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.097080][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.107576][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.116647][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.125810][T15253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.285890][ T30] audit: type=1326 audit(1768212185.462:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15244 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff18f749 code=0x7ffc0000 [ 1087.326176][ T30] audit: type=1326 audit(1768212185.462:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15244 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aff18f749 code=0x7ffc0000 [ 1087.356930][ T30] audit: type=1326 audit(1768212185.462:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15244 comm="syz.1.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5aff18f749 code=0x7ffc0000 [ 1087.648075][T15268] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1088.317877][ T5923] net_ratelimit: 4 callbacks suppressed [ 1088.317902][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.333233][T14578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.341641][T13414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.358142][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.472287][ T5812] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1088.722554][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 1088.733644][ T5812] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.746812][ T5812] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.776897][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1088.814348][ T5812] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1088.856387][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.870787][ T5812] usb 1-1: config 0 descriptor?? [ 1089.487080][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.543069][ T5812] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 1089.571802][ T5812] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 1089.595614][ T5812] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 1089.622719][ T5812] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 1089.654385][ T5812] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 1089.656773][T15305] lo speed is unknown, defaulting to 1000 [ 1089.669703][ T5812] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1089.764354][T15305] lo speed is unknown, defaulting to 1000 [ 1089.866150][ T5812] usb 1-1: USB disconnect, device number 31 [ 1090.192181][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.393766][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.569426][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.672399][ T5812] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1090.862305][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 1090.873875][ T5812] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.976185][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1091.042520][ T5812] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1091.092256][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.103917][ T5812] usb 1-1: config 0 descriptor?? [ 1091.266367][ T5929] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1091.452337][ T5929] usb 8-1: Using ep0 maxpacket: 8 [ 1091.481188][ T5929] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1091.492558][ T5929] usb 8-1: config 2 has no interface number 0 [ 1091.504293][ T5929] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1091.514845][ T5929] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1091.524106][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.532215][ T5929] usb 8-1: Product: syz [ 1091.536444][ T5929] usb 8-1: Manufacturer: syz [ 1091.541368][ T5929] usb 8-1: SerialNumber: syz [ 1091.587130][ T5929] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1091.595760][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.602612][ T9179] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1091.623338][ T5812] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf4 found [ 1091.637008][ T5812] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf3 found [ 1091.766102][ T9179] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.779449][ T9179] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1091.897815][ T5812] usb 1-1: USB disconnect, device number 32 [ 1091.953909][ T9179] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.997458][ T9179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.025246][T15342] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1092.039041][ T9179] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.660269][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.695386][ T8585] usb 5-1: USB disconnect, device number 38 [ 1092.742346][T15357] could not allocate digest TFM handle sha3-512-generic [ 1093.301765][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1093.301777][ T30] audit: type=1400 audit(1768212191.852:1652): avc: denied { write } for pid=15370 comm="syz.2.2597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1093.702384][ T5812] net_ratelimit: 1 callbacks suppressed [ 1093.702397][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.729460][ T30] audit: type=1400 audit(1768212192.162:1653): avc: denied { append } for pid=15373 comm="syz.4.2598" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1093.949169][ T9179] usb 8-1: USB disconnect, device number 2 [ 1093.955123][ T3509] ================================================================== [ 1093.963164][ T3509] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x880/0x8a0 [ 1093.970948][ T3509] Read of size 8 at addr ffff88803c1d0008 by task kworker/u8:12/3509 [ 1093.978981][ T3509] [ 1093.981288][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.981305][ T3509] Tainted: [L]=SOFTLOCKUP [ 1093.981309][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.981317][ T3509] Workqueue: events_unbound linkwatch_event [ 1093.981335][ T3509] Call Trace: [ 1093.981339][ T3509] [ 1093.981343][ T3509] dump_stack_lvl+0x116/0x1f0 [ 1093.981360][ T3509] print_report+0xcd/0x630 [ 1093.981375][ T3509] ? __virt_addr_valid+0x81/0x610 [ 1093.981385][ T3509] ? __phys_addr+0xe8/0x180 [ 1093.981395][ T3509] ? __linkwatch_run_queue+0x880/0x8a0 [ 1093.981410][ T3509] kasan_report+0xe0/0x110 [ 1093.981424][ T3509] ? __linkwatch_run_queue+0x880/0x8a0 [ 1093.981441][ T3509] __linkwatch_run_queue+0x880/0x8a0 [ 1093.981457][ T3509] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1093.981475][ T3509] linkwatch_event+0x8f/0xc0 [ 1093.981490][ T3509] ? __pfx_linkwatch_event+0x10/0x10 [ 1093.981505][ T3509] ? rcu_is_watching+0x12/0xc0 [ 1093.981516][ T3509] process_one_work+0x9ba/0x1b20 [ 1093.981533][ T3509] ? __pfx_process_one_work+0x10/0x10 [ 1093.981548][ T3509] ? assign_work+0x1a0/0x250 [ 1093.981561][ T3509] worker_thread+0x6c8/0xf10 [ 1093.981577][ T3509] ? __pfx_worker_thread+0x10/0x10 [ 1093.981591][ T3509] kthread+0x3c5/0x780 [ 1093.981603][ T3509] ? __pfx_kthread+0x10/0x10 [ 1093.981616][ T3509] ? rcu_is_watching+0x12/0xc0 [ 1093.981625][ T3509] ? __pfx_kthread+0x10/0x10 [ 1093.981638][ T3509] ret_from_fork+0x983/0xb10 [ 1093.981650][ T3509] ? __pfx_ret_from_fork+0x10/0x10 [ 1093.981662][ T3509] ? __switch_to+0x7af/0x10d0 [ 1093.981678][ T3509] ? __pfx_kthread+0x10/0x10 [ 1093.981690][ T3509] ret_from_fork_asm+0x1a/0x30 [ 1093.981710][ T3509] [ 1093.981713][ T3509] [ 1094.149486][ T3509] The buggy address belongs to the physical page: [ 1094.155883][ T3509] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c1d6000 pfn:0x3c1d0 [ 1094.165937][ T3509] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1094.173061][ T3509] raw: 00fff00000000000 ffffea0001056b08 ffffea000207fc08 0000000000000000 [ 1094.181633][ T3509] raw: ffff88803c1d6000 0000000000000000 00000000ffffffff 0000000000000000 [ 1094.190196][ T3509] page dumped because: kasan: bad access detected [ 1094.196592][ T3509] page_owner tracks the page as freed [ 1094.201941][ T3509] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 15376, tgid 15375 (syz.2.2599), ts 1093420980893, free_ts 1093790482839 [ 1094.223820][ T3509] post_alloc_hook+0x1af/0x220 [ 1094.228595][ T3509] get_page_from_freelist+0xd0b/0x31a0 [ 1094.234055][ T3509] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1094.239945][ T3509] alloc_pages_mpol+0x1fb/0x550 [ 1094.244793][ T3509] ___kmalloc_large_node+0x10c/0x150 [ 1094.250077][ T3509] __kmalloc_large_node_noprof+0x1c/0x70 [ 1094.255708][ T3509] __kvmalloc_node_noprof.cold+0xf/0x8e [ 1094.261253][ T3509] alloc_netdev_mqs+0xd7/0x1550 [ 1094.266105][ T3509] __tun_chr_ioctl+0x193e/0x4880 [ 1094.271038][ T3509] __x64_sys_ioctl+0x18e/0x210 [ 1094.275792][ T3509] do_syscall_64+0xcd/0xf80 [ 1094.280291][ T3509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.286175][ T3509] page last free pid 15376 tgid 15375 stack trace: [ 1094.292660][ T3509] __free_frozen_pages+0x7df/0x1170 [ 1094.297857][ T3509] device_release+0xa4/0x240 [ 1094.302443][ T3509] kobject_put+0x1ef/0x6f0 [ 1094.306860][ T3509] netdev_run_todo+0x7da/0x12a0 [ 1094.311713][ T3509] tun_chr_close+0xea/0x230 [ 1094.316214][ T3509] __fput+0x402/0xb70 [ 1094.320185][ T3509] task_work_run+0x150/0x240 [ 1094.324772][ T3509] do_exit+0x87f/0x2bd0 [ 1094.328920][ T3509] do_group_exit+0xd3/0x2a0 [ 1094.333414][ T3509] get_signal+0x2671/0x26d0 [ 1094.337919][ T3509] arch_do_signal_or_restart+0x8f/0x7e0 [ 1094.343464][ T3509] exit_to_user_mode_loop+0x8c/0x540 [ 1094.348747][ T3509] do_syscall_64+0x4ee/0xf80 [ 1094.353342][ T3509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.359235][ T3509] [ 1094.361547][ T3509] Memory state around the buggy address: [ 1094.367164][ T3509] ffff88803c1cff00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1094.375212][ T3509] ffff88803c1cff80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1094.383259][ T3509] >ffff88803c1d0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1094.391305][ T3509] ^ [ 1094.395619][ T3509] ffff88803c1d0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1094.403669][ T3509] ffff88803c1d0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1094.411719][ T3509] ================================================================== [ 1094.469290][ T30] audit: type=1400 audit(1768212193.012:1654): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1094.531473][ T30] audit: type=1400 audit(1768212193.012:1655): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.553551][ T3509] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1094.560746][ T3509] CPU: 0 UID: 0 PID: 3509 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.571833][ T3509] Tainted: [L]=SOFTLOCKUP [ 1094.576145][ T3509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.586173][ T3509] Workqueue: events_unbound linkwatch_event [ 1094.592049][ T3509] Call Trace: [ 1094.595305][ T3509] [ 1094.598207][ T3509] dump_stack_lvl+0x3d/0x1f0 [ 1094.602774][ T3509] vpanic+0x640/0x6f0 [ 1094.606727][ T3509] panic+0xca/0xd0 [ 1094.610417][ T3509] ? __pfx_panic+0x10/0x10 [ 1094.614830][ T3509] ? __linkwatch_run_queue+0x880/0x8a0 [ 1094.620293][ T3509] ? preempt_schedule_common+0x44/0xc0 [ 1094.625750][ T3509] ? preempt_schedule_thunk+0x16/0x30 [ 1094.631123][ T3509] ? check_panic_on_warn+0x1f/0xb0 [ 1094.636229][ T3509] check_panic_on_warn+0xab/0xb0 [ 1094.641164][ T3509] end_report+0x107/0x160 [ 1094.645488][ T3509] kasan_report+0xee/0x110 [ 1094.649888][ T3509] ? __linkwatch_run_queue+0x880/0x8a0 [ 1094.655341][ T3509] __linkwatch_run_queue+0x880/0x8a0 [ 1094.660610][ T3509] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1094.666403][ T3509] linkwatch_event+0x8f/0xc0 [ 1094.670978][ T3509] ? __pfx_linkwatch_event+0x10/0x10 [ 1094.676249][ T3509] ? rcu_is_watching+0x12/0xc0 [ 1094.680991][ T3509] process_one_work+0x9ba/0x1b20 [ 1094.685919][ T3509] ? __pfx_process_one_work+0x10/0x10 [ 1094.691278][ T3509] ? assign_work+0x1a0/0x250 [ 1094.695849][ T3509] worker_thread+0x6c8/0xf10 [ 1094.700425][ T3509] ? __pfx_worker_thread+0x10/0x10 [ 1094.705522][ T3509] kthread+0x3c5/0x780 [ 1094.709573][ T3509] ? __pfx_kthread+0x10/0x10 [ 1094.714150][ T3509] ? rcu_is_watching+0x12/0xc0 [ 1094.718897][ T3509] ? __pfx_kthread+0x10/0x10 [ 1094.723477][ T3509] ret_from_fork+0x983/0xb10 [ 1094.728049][ T3509] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.733139][ T3509] ? __switch_to+0x7af/0x10d0 [ 1094.737798][ T3509] ? __pfx_kthread+0x10/0x10 [ 1094.742370][ T3509] ret_from_fork_asm+0x1a/0x30 [ 1094.747123][ T3509] [ 1094.750390][ T3509] Kernel Offset: disabled [ 1094.754688][ T3509] Rebooting in 86400 seconds..