last executing test programs: 2m41.248445978s ago: executing program 1 (id=8301): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m39.225322656s ago: executing program 1 (id=8307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m38.922768754s ago: executing program 1 (id=8309): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2m38.730423785s ago: executing program 1 (id=8310): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@newtaction={0x15fc, 0x30, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x15e8, 0x1, [@m_simple={0x168, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x4, 0xd0, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x130fe393, 0x7, 0xf, 0x489c}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa4, 0xfffffffe, 0x20000000, 0xffff, 0x1}}]}, {0xf1, 0x6, "b800972c0b92058a8da272fbdb63acb76a632d240b2b117e2d17fea569c03d17df7f7d27e30f59fc51da7287c3bfed7d2ae7a07921ca10e65590231885a5f95b30b7c99a5b4cfd8b07f64123ee8a43672147fa0df4b7dc8c923bd4761745cb9c2b376453783f8a36e0970f279d4ace65d00941ac8951e33a9c3646641898b61f28f4fe8bd3b38736875776e2b761601f1b84af547e1f9c97fbdec88b8f187d54da93fc95c55ea3329ed3c960e2cb521e93bd6fb18606cd9bd333b4626dab2832052c73dff288cbb70841beaf43e510978673af28714634f27fcfd5e188eb6eb15e50c2f7f359d25373937a5b36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xe4, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x10000005, 0x5cab5997, 0x9}, 0x62}}]}, {0x99, 0x6, "0a332bb87cd64978d1145f0e70841a0cc7a770e7c3a10c380a100b2ccc80b7dd97c2e50a2e2755bc3ad0b15e2c2e0aa8dd70e27bc38929d8b3ded0e50a4c85cb010cf6a4036d113b570c2d84f8ea05cf21deca195bf720d576cc39592e83134a5698c162cb2677ef824144274cdae31d070e23abca3d39e79af75919e5c29babfcef116cc3e8147b17ad7c977d2f97203b0392e222"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x68, 0x5, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x18d6}, @TCA_IPT_TARG={0x2a, 0x6, {0xff, 'mangle\x00', 0x6, 0x3}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x134, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x1, 0x7, 0x3d8, 0x4}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xbd, 0x6, "b41d683c66a0a618bd7b6aa9406b4829dcc7c8ccedb0ee12924ce41508fa3add80efc5d431490d395d6ffc4c2b0ba886d79fb930b1cb19fdc34a2b3b0f29d513e2b862b0329da295463b03014278dd7d6da5466e44ed43175da7dbd75e020efb1b53ac84332527f2b253b1945f4b8c91609e1506f9cfb2e5adc49fb7c5738b03a9ba7713c56d39ec77a1a296fe36164054558fddc52252bd85682b358122234ec6a22a2b2104de68a3ec58547890adb8ba4033f1890e42a3d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe4, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0xb9, 0x6, "e5c25b4b5c5610f286c12a0d66de983200faef3c8e9e881c687bb8fa440c9698b0262ac213cbd82775e9b2b470e09f56030b49fa955ab05f05990840bfdd6967340c2ec4af6d4bfd182cc58b42ba820c8280a668b9e98b1d1b2e2c9f9ae014c23787d04988be11b5070503d2c3352c72535b53da01987cb37d9394153677bbcb00118235347d53966c05201ff4cd3b758dfd5fdf283bea420c27f04ce3fbf7c0292989d72ddb967585f2f6fc23e66fbd5afb9dbea6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x10c, 0x13, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x9d, 0x6, "0ab30aa4db86d28ff6be505436653e0326801bc06ec308e325c3fd75ca0a30eeb7722318338079ef41049f9ea31df6b01b973c6c752f28827134a070240bdf183cd619ce9814e1457ec0e25acf01dbf13e51a5884e3a318ac09b837feff47da5745933628993afa96adf5d9e053b18fd416cf9ddee4ed7255f5f9f5775d5a80d774845cb2246b8a01319c5f885affb6532372424a248314f8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x44, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8863}]}, {0xd, 0x6, "7f43c595124430b634"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x130, 0xd, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x5, 0x1, 0x1, 0x5}, 0x4}}]}, {0xdd, 0x6, "812627324e1945f7d5091ac888516fe307dc4bd688fc20fdd4ea56af78fd445699c3f969a2a9ee8514af376ed28e44031a3f62370e7bd8daabd32dea1d138792ab5cb8843b60ebc7fa55c84cc9af72899e37e127b14e954647f95bac7292b90da0061f693f56d31195600256cf4a0699372bcefb1de60553f27aab1dd83d1398d74fa35da352f6e0d04dd967c558297733646b3b80a475f34783b24442d938c0575757ddd34d63eba9cc1bf520bbb212492d31b7731f7d1c39280ffb04ab20db73b607285d66557930fcf37f53ec22d3914f520e924a93c84b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_pedit={0xe98, 0x8, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x0, 0x1, 0xce0691ad9d85df0, 0x6, 0x7f}, 0x2, 0x7, [{0x1, 0x20, 0x6, 0xfffffff8, 0x62df, 0x80000000}, {0xf, 0x0, 0x3, 0x2, 0xbd, 0x10001}, {0x80, 0x1, 0x7, 0xa7a, 0x40, 0x89de}]}, [{0xfffffffd, 0x2, 0xfffffff9, 0xfff, 0xf, 0x5}, {0x7fffffff, 0xd, 0xffffffff, 0x7, 0x10000, 0x5}, {0x5, 0x0, 0x2, 0x1, 0x10001, 0x7}, {0x18236f4, 0x5, 0xb, 0x2, 0x7, 0xffff}, {0x46, 0xbe8, 0x2, 0xe, 0x0, 0xfffffffe}, {0x7b5, 0x80000001, 0x421d, 0x5, 0x929f, 0x6}, {0x7, 0x80, 0x80000001, 0x5, 0x2306, 0x80}, {0x6, 0x7, 0xbd6b, 0x200, 0x8001, 0x400}, {0x2a8, 0x7fffffff, 0x1, 0x3, 0x0, 0x6f34}, {0x5, 0x7fffffff, 0x81, 0x5, 0x9, 0x7f}, {0x835, 0x4, 0x7, 0x7fff, 0x7fff, 0xb}, {0x6, 0x8, 0x6, 0x2, 0x3, 0x9}, {0x2, 0x1800000, 0x7, 0xacd, 0x101, 0x3}, {0x2, 0x401, 0xb, 0xe0000000, 0x8, 0x5}, {0x1ff, 0x9, 0x1, 0xd2, 0x1, 0x7f}, {0x1, 0x17ee, 0x8, 0x0, 0x6}, {0x6b1, 0x6, 0x3d, 0x7, 0x10, 0x1b1}, {0x7, 0x9, 0x10000, 0x1, 0x3, 0x101}, {0x9, 0xfffffffc, 0x7, 0x9, 0x40, 0x10}, {0x9, 0xbf, 0x5, 0x2, 0x8001, 0x7}, {0x3, 0x300000, 0x8, 0xb, 0xf, 0x5}, {0x7, 0x7f, 0x64, 0x8acb, 0x10001, 0x5}, {0x6, 0x7, 0x40, 0x4, 0x81, 0x1}, {0x2, 0x6, 0x800, 0x6, 0x1, 0xffffff8f}, {0x6, 0x3, 0x7fffffff, 0x1, 0x36, 0x2}, {0x80000001, 0x8, 0x1, 0xa3a, 0x1, 0x3}, {0x5, 0x7, 0x4, 0x3, 0x2, 0x401}, {0x6, 0x200, 0x5, 0xdad, 0x8001, 0x5}, {0x6, 0x8, 0x0, 0x8, 0x0, 0x8}, {0x800, 0x7, 0x3, 0x100, 0x1, 0x9}, {0x80000001, 0xb8bc, 0x2, 0x80000000, 0x2, 0x8f}, {0xc04b, 0x6, 0x82, 0x7, 0x8}, {0x5, 0x6, 0xd, 0xb89, 0x2, 0x10}, {0x0, 0x313, 0x2, 0x5, 0x0, 0x1}, {0xfffffffe, 0xee, 0x80000001, 0x2, 0x100}, {0xfe2, 0x7f, 0x5, 0x5, 0x6}, {0x1ca, 0x5f84, 0x2, 0xe2, 0x4, 0xd0d}, {0x2, 0xc1fa, 0x6, 0x5, 0x8, 0x1000}, {0x9, 0xfffffffe, 0xc5ab, 0x7f, 0x3ff, 0x15}, {0x1, 0xae, 0x7, 0x3, 0x7380, 0x2}, {0x0, 0x7fff, 0x81, 0xe3, 0x7ff, 0x3}, {0x38000000, 0xe7d, 0x9, 0x7, 0xffffffff, 0x47}, {0x2dbe, 0x9, 0x3, 0x80, 0xfff, 0xd8d6}, {0x8, 0x4af, 0x4, 0x9, 0x1000, 0xb}, {0x3ff, 0x81, 0x4, 0xf, 0x8, 0x9d2c}, {0x3, 0x3, 0x9, 0x8001, 0x2, 0x1}, {0xcf, 0x946, 0x9, 0x3, 0xffffffff}, {0x6, 0x7ff, 0xc97, 0x40, 0x9, 0x8}, {0x4, 0xffffffff, 0x10000, 0x8, 0x7, 0xfffffff8}, {0xfff, 0x7f, 0x7, 0xffff0235, 0xff, 0x6}, {0x6, 0x183, 0x1, 0x7, 0x800}, {0x1, 0xfffffffb, 0x9e, 0xa4, 0x7ff}, {0x9, 0x7f, 0x9, 0x8, 0x7f, 0x4}, {0x4, 0x8, 0xf, 0x0, 0xb, 0xb}, {0x2, 0x6, 0x2b2, 0x6c, 0x0, 0x3}, {0x6, 0x80000000, 0x4939, 0xb2, 0x3, 0x200}, {0x1, 0x5, 0xb, 0xffffff81, 0x0, 0x8000}, {0x1, 0xc89b, 0xff36, 0x8, 0x9}, {0xe5, 0x7, 0x7, 0x6, 0xfffffff9, 0x9}, {0x80000001, 0x7, 0x5, 0x6, 0x1, 0xfffffc00}, {0x1ff, 0x806, 0xf, 0x8, 0x80, 0x1c}, {0x1, 0x5, 0x4, 0xde9a, 0xfffffffa, 0x81}, {0x803, 0x6, 0x5, 0xa, 0x1000, 0x8}, {0x6, 0x7, 0x7, 0x4, 0x1ff, 0x8}, {0xb005, 0x6, 0x80, 0xfffffffd, 0x40, 0xb}, {0x543, 0x4, 0x1000, 0x1, 0x6, 0x7}, {0x54e7, 0x2, 0x1, 0x9, 0x9, 0x7ff}, {0x1, 0x408000, 0x2f4, 0x800, 0x0, 0x8}, {0x7, 0x70e, 0x10002, 0x3, 0x80000000, 0x1}, {0xafbe, 0x5, 0x7, 0xa, 0x7f}, {0x7, 0x33f, 0x5, 0x10, 0x2c, 0xd}, {0x9, 0x2, 0x6, 0x6, 0x7, 0x8000}, {0x75, 0x4, 0x1bd, 0x0, 0x1, 0x2}, {0x40, 0xfffffff9, 0x7, 0x426, 0x2, 0x5}, {0x200, 0x6, 0x8, 0x2, 0xfffffffa, 0x7ff}, {0x6, 0x65c, 0x3, 0x8, 0x81, 0x6}, {0x1, 0x1, 0x4, 0x9, 0x98e4, 0x5}, {0x76c3, 0x1, 0xfd1, 0x10001, 0x7fffffff}, {0x8, 0xffffffff, 0x400000, 0x5, 0x4, 0x94}, {0x7ff, 0x2e8, 0x5032, 0x10, 0x1, 0x6000}, {0xffffff46, 0x5, 0xd51, 0x9, 0x80000000, 0x1}, {0x7fffffff, 0x1, 0x9, 0xb, 0x7, 0x8}, {0xb, 0x5, 0x1000, 0x9, 0xc2a, 0x7}, {0xfffffff7, 0x7, 0x3, 0x7fff, 0x9, 0x8}, {0x1a, 0x6, 0x0, 0x0, 0x3, 0x1}, {0x8, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x200, 0x5, 0x3, 0x80000001, 0xe0}, {0x4, 0x1c000, 0x8, 0xd, 0x80000000}, {0xeb9, 0x6, 0x0, 0xaa3, 0x2, 0x5}, {0xce85e41, 0x8, 0x200, 0xada0, 0xffffffff, 0x1ff}, {0x3, 0x1, 0xa3f, 0x1ff, 0x1, 0xd36}, {0xa05, 0x4, 0x6, 0x0, 0x7fffffff, 0x664}, {0x8, 0x4, 0x9, 0x9, 0x6, 0x8}, {0x80000000, 0x0, 0x1, 0x1301, 0x10000, 0xbd4}, {0x40, 0x4, 0x0, 0xffff, 0x3, 0x7}, {0x6, 0xabb, 0x7, 0xffffffff, 0xffffffff, 0x7}, {0x41a89c79, 0x7ff, 0x629, 0xf, 0x200, 0xa8fe}, {0x1, 0x7, 0x18dd, 0x3, 0x6, 0xb6}, {0x1d2e, 0x7ff, 0xb7, 0x20000, 0x2, 0x4}, {0x10001, 0xffffffff, 0x1ff, 0x0, 0x9, 0x941}, {0x3, 0x7ff, 0x8, 0x7, 0x400, 0x2}, {0xfffffff8, 0x4fc6e61f, 0xaa, 0xffffffc5, 0x9, 0x6}, {0x3, 0x0, 0xfffffff8, 0x6, 0x9, 0xfff}, {0x80000000, 0x5159, 0xd935, 0x0, 0x100, 0x8}, {0xfffffd36, 0x1, 0x3, 0x2, 0x2, 0x2}, {0x3, 0x3, 0xb7, 0xfffffff6, 0x7, 0xda5f}, {0x7, 0x401, 0x6, 0x9, 0x0, 0x35}, {0x3, 0x3, 0x2, 0x6, 0x9, 0xaeec00}, {0xf442, 0x5, 0x5, 0x3, 0x4c4b, 0xfff}, {0x30e, 0x1, 0x6, 0xfffffffe, 0xb618, 0x9}, {0x4, 0xd, 0xffff, 0x80000000, 0xfffffffc, 0x3}, {0x7, 0xffffd83f, 0x3, 0x2, 0x204, 0x81}, {0x94d, 0x3, 0xc, 0x3, 0x5, 0x1}, {0x0, 0xfffffff9, 0x9, 0x0, 0x9, 0x400}, {0x7, 0x33, 0x0, 0x401, 0xf0, 0x1}, {0x8000, 0x49b6d0ac, 0x1, 0x400, 0x7, 0x7}, {0x8, 0x4, 0x1000, 0x3, 0xfffffffa, 0x3}, {0xfff, 0x3eb, 0x3ff, 0x7, 0x0, 0x2}, {0xf9, 0x0, 0x6, 0x74, 0x5, 0x1}, {0x9, 0x100, 0x1, 0x1, 0x80000001, 0x7f}, {0x8f, 0x6, 0x3, 0x9, 0x7, 0x9}, {0x2, 0x24f, 0xffff, 0x400, 0x7, 0x4}, {0x0, 0x100, 0xc, 0x0, 0x400, 0x3}, {0x7, 0x4e49, 0x1, 0xfffffffd, 0xd, 0x736}, {0x4, 0x3, 0x6, 0xffffffff, 0x9, 0x3b}, {0x6, 0x6, 0x5, 0x6, 0x9, 0x2}, {0x6ee, 0x6, 0x10000, 0x3, 0x8022, 0x2}, {0x8, 0x0, 0x5, 0xc1, 0xc66605a, 0xffff}], [{0x4, 0x1}, {0x8f3c505bfc298fc0}, {0x5, 0x1}, {0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0xdb44b1a973b113d1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x6fa2e32336c43e5f}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x15fc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) io_uring_enter(r0, 0x528, 0x7724, 0x16, 0x0, 0x0) 2m38.405421694s ago: executing program 1 (id=8312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\xfcG\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\xf6\x13\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe\xfd\xf7\xcdp`t\x84\xf2\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\f\x00\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{0x0}], 0x1) 2m37.150910007s ago: executing program 1 (id=8313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m25.190915043s ago: executing program 2 (id=8356): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) 2m25.144895115s ago: executing program 2 (id=8357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 2m23.972225733s ago: executing program 2 (id=8359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) 2m23.750701307s ago: executing program 2 (id=8361): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m23.654758002s ago: executing program 2 (id=8362): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = socket$inet6(0xa, 0x2, 0x0) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r4, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 2m22.113881652s ago: executing program 32 (id=8313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m22.103215532s ago: executing program 2 (id=8370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m19.328503554s ago: executing program 3 (id=8376): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) read$dsp(0xffffffffffffffff, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xf, 0xfffffffffffffffd, 0xb, 0x40, 0x7, 0x3}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0xb}, 0x0, 0x0) 2m18.884199s ago: executing program 0 (id=8377): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2000009]}, 0x8, 0x80800) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 2m18.02294713s ago: executing program 3 (id=8378): syz_open_dev$video4linux(&(0x7f0000000600), 0x14, 0x40080) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) shutdown(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2m16.99543788s ago: executing program 3 (id=8379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 2m16.099258692s ago: executing program 3 (id=8381): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 2m15.998814898s ago: executing program 3 (id=8382): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, &(0x7f0000000440), 0x0, 0x0) 2m15.976813369s ago: executing program 3 (id=8383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m15.714281564s ago: executing program 0 (id=8385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\xfcG\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\xf6\x13\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe\xfd\xf7\xcdp`t\x84\xf2\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\f\x00\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m14.609899138s ago: executing program 0 (id=8386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6d, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2m14.485463256s ago: executing program 0 (id=8387): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {0xffffffffffffffff, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 2m13.240058998s ago: executing program 0 (id=8388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m11.971372652s ago: executing program 0 (id=8390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) 2m6.142864551s ago: executing program 33 (id=8370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 2m0.508697769s ago: executing program 34 (id=8383): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0xa) 1m56.649940143s ago: executing program 35 (id=8390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) 14.388858463s ago: executing program 5 (id=8676): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0x1000, &(0x7f0000002a80)=""/4096}) unshare(0x2c020400) r4 = socket$inet6(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa000000c}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r4, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 12.761191298s ago: executing program 5 (id=8677): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.800148132s ago: executing program 5 (id=8683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}}, 0x0) 10.731909786s ago: executing program 7 (id=8685): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 10.626970902s ago: executing program 5 (id=8686): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, 0x0, 0x66) 10.48541742s ago: executing program 6 (id=8687): shutdown(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 9.951347911s ago: executing program 6 (id=8688): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 9.777212672s ago: executing program 7 (id=8690): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 9.63140252s ago: executing program 4 (id=8691): shutdown(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 7.711827622s ago: executing program 7 (id=8692): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 4.067660523s ago: executing program 5 (id=8693): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.96284708s ago: executing program 7 (id=8694): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socket(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xf, 0xfffffffffffffffd, 0xb, 0x40, 0x7, 0x3}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0xb}, 0x0, 0x0) 3.925956162s ago: executing program 4 (id=8695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d00000000000100000000000000"], 0x38}}, 0x0) 3.886368194s ago: executing program 6 (id=8696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0x7}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004060}, 0x400c044) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.79437393s ago: executing program 4 (id=8697): socket$packet(0x11, 0x3, 0x300) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x0) close(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0xf) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.525254966s ago: executing program 6 (id=8698): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 3.524386676s ago: executing program 7 (id=8706): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xf, 0xfffffffffffffffd, 0xb, 0x40, 0x7, 0x3}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0xb}, 0x0, 0x0) 3.150368537s ago: executing program 7 (id=8699): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002e50c0000040000181100", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0x7, 0x1b, 0x1}, 0x7) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80040}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r3, 0x12, 0x0, @val=@tracing={0xffffffffffffffff, 0x34b00000000000}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) gettid() unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.486617896s ago: executing program 6 (id=8700): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x305303, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.178494844s ago: executing program 5 (id=8701): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, 0x0, 0x66) 2.150390906s ago: executing program 6 (id=8702): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.412875808s ago: executing program 4 (id=8703): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x305303, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 1.063428848s ago: executing program 4 (id=8704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=8705): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'caif0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) kernel console output (not intermixed with test programs): 9] usb 4-1: Using ep0 maxpacket: 32 [ 1619.775132][ T5809] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1619.792768][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.819978][ T5809] usb 4-1: config 0 descriptor?? [ 1620.035513][ T5809] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1620.051574][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1620.062075][ T5809] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1620.069435][ T5809] usb 4-1: media controller created [ 1620.107366][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1620.183668][T11137] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 420 seconds [ 1620.194538][T11137] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 420 seconds [ 1620.205954][T11137] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 420 seconds [ 1620.216989][T11137] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 420 seconds [ 1620.280151][T13010] net_ratelimit: 5 callbacks suppressed [ 1620.280166][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.500643][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.838392][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.939407][T30513] syzkaller0: entered promiscuous mode [ 1620.948676][T30513] syzkaller0: entered allmulticast mode [ 1621.099893][ T5809] stb0899_attach: Driver disabled by Kconfig [ 1621.109913][ T5809] az6027: no front-end attached [ 1621.109913][ T5809] [ 1621.133237][ T5809] az6027: usb out operation failed. (-71) [ 1621.139003][ T5809] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1621.170641][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 1621.199253][ T5809] dvb-usb: schedule remote query interval to 400 msecs. [ 1621.215468][ T5809] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1621.243754][ T5809] usb 4-1: USB disconnect, device number 39 [ 1621.307585][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.389100][ T5809] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1621.540463][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.861157][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.229515][T30529] loop5: detected capacity change from 0 to 7 [ 1622.253090][T30529] Dev loop5: unable to read RDB block 7 [ 1622.258731][T30529] loop5: AHDI p1 [ 1622.267726][T30529] loop5: partition table partially beyond EOD, truncated [ 1622.493954][T30537] syzkaller0: entered promiscuous mode [ 1622.499577][T30537] syzkaller0: entered allmulticast mode [ 1622.581787][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.741905][T11137] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 360 seconds [ 1622.753490][T11137] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 360 seconds [ 1622.766288][T11137] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 360 seconds [ 1622.777712][T11137] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 360 seconds [ 1622.791045][ T1191] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1622.823481][ T1191] dvb_usb_az6027: probe of 2-1:0.0 failed with error -110 [ 1622.856838][ T1191] usb 2-1: USB disconnect, device number 34 [ 1622.907798][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.190221][ T5868] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1623.320264][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.391879][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 1623.402325][ T5868] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1623.429888][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.461247][ T5868] usb 4-1: config 0 descriptor?? [ 1623.624652][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.697710][ T5868] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1623.774838][ T5868] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1623.825069][ T5868] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1624.836367][T30564] tipc: Started in network mode [ 1624.880148][T30564] tipc: Node identity 46e2f47ef97f, cluster identity 4711 [ 1624.953298][T30564] tipc: Enabled bearer , priority 0 [ 1624.991182][T30567] syzkaller0: entered promiscuous mode [ 1625.003615][T30567] syzkaller0: entered allmulticast mode [ 1625.072922][T30564] tipc: Resetting bearer [ 1625.097794][T10529] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1625.143730][T30563] tipc: Resetting bearer [ 1625.211084][T30563] tipc: Disabling bearer [ 1625.289912][T10529] usb 2-1: Using ep0 maxpacket: 32 [ 1625.298465][T10529] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1625.307033][T10529] usb 2-1: config 0 has no interface number 0 [ 1625.339255][T10529] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1625.356119][T10529] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1625.376353][T10529] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1625.388342][T10529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.396642][T10529] usb 2-1: Product: syz [ 1625.403017][T10529] usb 2-1: Manufacturer: syz [ 1625.407768][T10529] usb 2-1: SerialNumber: syz [ 1625.416474][T10529] usb 2-1: config 0 descriptor?? [ 1625.429257][T10529] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1625.636868][T10529] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 1625.666798][T10529] quatech2: probe of 2-1:0.51 failed with error -90 [ 1625.700369][ T5809] net_ratelimit: 4 callbacks suppressed [ 1625.700381][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.842390][ T5809] usb 2-1: USB disconnect, device number 35 [ 1625.940313][T23158] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 420 seconds [ 1625.940385][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.959592][T11137] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 360 seconds [ 1625.970380][T11137] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 360 seconds [ 1626.025350][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.344116][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.586441][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.614986][T30584] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8272'. [ 1626.740727][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.074716][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.398485][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.780381][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.224657][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.500742][ T10] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 330 seconds [ 1628.512056][T29993] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 330 seconds [ 1629.060082][T10529] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1629.261885][T10529] usb 2-1: Using ep0 maxpacket: 32 [ 1629.271613][T10529] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1629.304913][T10529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.326182][T10529] usb 2-1: config 0 descriptor?? [ 1629.591826][T10529] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1629.670375][T30625] loop5: detected capacity change from 0 to 7 [ 1629.688553][T30625] Dev loop5: unable to read RDB block 7 [ 1629.729925][T30625] loop5: AHDI p1 p2 p3 [ 1629.734174][T30625] loop5: partition table partially beyond EOD, truncated [ 1629.748712][T30626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8285'. [ 1629.760200][T30625] loop5: p1 size 100663304 extends beyond EOD, truncated [ 1629.789454][T30625] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1630.430357][T29993] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 330 seconds [ 1630.535879][T30639] syzkaller0: entered promiscuous mode [ 1630.542062][T30639] syzkaller0: entered allmulticast mode [ 1630.730523][T30642] loop5: detected capacity change from 0 to 7 [ 1630.739418][T30642] Dev loop5: unable to read RDB block 7 [ 1630.746039][T30642] loop5: unable to read partition table [ 1630.752638][T30642] loop5: partition table beyond EOD, truncated [ 1630.760846][T30642] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1630.901060][ T5809] net_ratelimit: 6 callbacks suppressed [ 1630.901076][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.068302][T11137] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 360 seconds [ 1631.079549][T11137] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 360 seconds [ 1631.091155][T11137] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 360 seconds [ 1631.110144][T11137] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 360 seconds [ 1631.380567][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.941076][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.340677][T29993] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 420 seconds [ 1632.351517][T29993] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 420 seconds [ 1632.363275][T29993] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 420 seconds [ 1632.374294][T29993] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 420 seconds [ 1632.420195][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.506080][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.521192][T30667] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8297'. [ 1632.983200][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.460160][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.468412][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.020678][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.500390][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.359956][ T1191] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1635.573605][ T1191] usb 1-1: Using ep0 maxpacket: 32 [ 1635.611849][ T1191] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1635.657195][ T1191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.693334][ T1191] usb 1-1: config 0 descriptor?? [ 1635.947639][ T1191] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1636.100373][ T5822] net_ratelimit: 4 callbacks suppressed [ 1636.100386][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.190051][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.534997][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.580202][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.708086][T30702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.715885][T30702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.140403][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.226055][T30702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.281249][T30702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.466060][T11137] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 360 seconds [ 1637.477423][T11137] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 360 seconds [ 1637.490689][T11137] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 360 seconds [ 1637.502418][T11137] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 360 seconds [ 1637.637745][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.085874][T30702] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.094903][T30702] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.105836][T30702] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.115762][T30702] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.192032][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.561655][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8314'. [ 1638.590763][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.640742][T30731] loop5: detected capacity change from 0 to 7 [ 1638.660256][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.692251][T30731] Dev loop5: unable to read RDB block 7 [ 1638.697897][T30731] loop5: AHDI p1 p2 p3 [ 1638.722308][T30731] loop5: partition table partially beyond EOD, truncated [ 1638.753082][T30731] loop5: p1 size 100663304 extends beyond EOD, truncated [ 1638.810611][T30731] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1639.220247][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.391127][T11137] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 420 seconds [ 1639.402367][T11137] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 420 seconds [ 1641.316971][ T5822] net_ratelimit: 4 callbacks suppressed [ 1641.316993][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.740281][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.748803][ T6594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.759205][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.768025][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.781153][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.338962][T30761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.346638][T30761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.354603][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.647071][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.820378][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.223376][T11137] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 450 seconds [ 1643.380411][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.534168][T30761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.598346][T30761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.183813][T30761] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.201358][T30761] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.210745][T30761] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.220079][T30761] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.379954][T30819] loop5: detected capacity change from 0 to 7 [ 1646.469412][T30819] Dev loop5: unable to read RDB block 7 [ 1646.480097][T30819] loop5: AHDI p1 p2 p3 [ 1646.484326][T30819] loop5: partition table partially beyond EOD, truncated [ 1646.492231][T30819] loop5: p1 start 7562610 is beyond EOD, truncated [ 1646.498805][T30819] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1646.501674][T30772] net_ratelimit: 12 callbacks suppressed [ 1646.501731][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.980200][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.080758][T10044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.091319][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.100578][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.540232][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.020120][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.580236][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.740379][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.964881][T30850] syzkaller0: entered promiscuous mode [ 1648.970672][T30850] syzkaller0: entered allmulticast mode [ 1649.060356][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.266426][T11137] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 450 seconds [ 1650.280040][T11137] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 450 seconds [ 1650.291548][T11137] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 450 seconds [ 1650.303000][T11137] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 450 seconds [ 1651.780138][T30772] net_ratelimit: 5 callbacks suppressed [ 1651.780153][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.780406][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.180307][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.820389][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.839027][T11137] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 390 seconds [ 1652.850054][T11137] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 390 seconds [ 1652.861249][T11137] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 390 seconds [ 1652.872619][T11137] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 390 seconds [ 1653.227101][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.399722][T13043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1653.421633][T13043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1653.431445][T13043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1653.464586][T13043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1653.481550][T13043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1653.488852][T13043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1653.827424][T30909] chnl_net:caif_netlink_parms(): no params data found [ 1653.860350][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.039910][T30909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.116345][T30909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.135728][T30909] bridge_slave_0: entered allmulticast mode [ 1654.161189][T30909] bridge_slave_0: entered promiscuous mode [ 1654.187891][T30909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.211373][T30909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.233291][T30909] bridge_slave_1: entered allmulticast mode [ 1654.260356][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.272204][T30909] bridge_slave_1: entered promiscuous mode [ 1654.439375][T30909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.494551][T30909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.605596][T30909] team0: Port device team_slave_0 added [ 1654.635645][T30909] team0: Port device team_slave_1 added [ 1654.726896][T30909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.740384][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.769023][T30909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.820320][T30909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.830395][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.879665][T30909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.900362][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.916727][T30909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.958645][T30909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.041170][T30909] hsr_slave_0: entered promiscuous mode [ 1655.068353][T30909] hsr_slave_1: entered promiscuous mode [ 1655.088183][T30909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1655.107052][T30909] Cannot create hsr debugfs directory [ 1655.403285][T30909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1655.431712][T30909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1655.470858][T30909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1655.493782][T30909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1655.540089][ T5781] Bluetooth: hci0: command tx timeout [ 1655.664226][T30909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.714234][T30909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.737229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.744388][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.823738][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.831010][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.040940][T23158] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 450 seconds [ 1656.052144][T11137] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 390 seconds [ 1656.063764][T11137] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 390 seconds [ 1656.358414][T30909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.980655][T30773] net_ratelimit: 5 callbacks suppressed [ 1656.980668][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.103801][T30909] veth0_vlan: entered promiscuous mode [ 1657.136393][T30909] veth1_vlan: entered promiscuous mode [ 1657.190821][T30909] veth0_macvtap: entered promiscuous mode [ 1657.216093][T30909] veth1_macvtap: entered promiscuous mode [ 1657.239681][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.258904][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.278350][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.289390][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.314927][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.332415][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.349235][T30909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.376159][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.396106][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.409502][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.426508][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.436923][T30909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.454044][T30909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.467968][T30909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.471317][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.507985][T30909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.517378][T30909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.530336][T30909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.539170][T30909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.621191][ T5781] Bluetooth: hci0: command tx timeout [ 1657.757517][T10044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.776624][T10044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.835938][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.854357][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.862797][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.030452][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.507548][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.592745][T29993] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 360 seconds [ 1658.604177][ T10] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 360 seconds [ 1659.066407][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.239982][T30772] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1659.308692][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.390096][T30772] usb 5-1: device descriptor read/64, error -71 [ 1659.540567][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.670011][T30772] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1659.706603][ T5781] Bluetooth: hci0: command tx timeout [ 1659.860198][T30772] usb 5-1: device descriptor read/64, error -71 [ 1659.988509][T30772] usb usb5-port1: attempt power cycle [ 1660.103204][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.430678][T30772] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1660.470571][T30772] usb 5-1: device descriptor read/8, error -71 [ 1660.500254][ T10] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 360 seconds [ 1660.585326][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.760236][T30772] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1660.798949][T30772] usb 5-1: device descriptor read/8, error -71 [ 1660.920352][T30772] usb usb5-port1: unable to enumerate USB device [ 1661.141456][T11137] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 390 seconds [ 1661.152417][T11137] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 390 seconds [ 1661.164389][T11137] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 390 seconds [ 1661.175486][T11137] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 390 seconds [ 1661.780572][ T5781] Bluetooth: hci0: command tx timeout [ 1662.180112][T30772] net_ratelimit: 3 callbacks suppressed [ 1662.180124][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.350281][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.426408][ T10] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 450 seconds [ 1662.440990][ T10] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 450 seconds [ 1662.452499][ T10] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 450 seconds [ 1662.463555][ T10] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 450 seconds [ 1662.661164][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.220110][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.711965][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.940171][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.260208][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.340471][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.749146][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.990767][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.397350][T31023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.405001][T31023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.888984][T31023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.945307][T31023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1667.388985][T31023] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.398085][T30772] net_ratelimit: 6 callbacks suppressed [ 1667.398098][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.413116][T31023] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.422310][T31023] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.431288][T31023] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.560253][T11137] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 390 seconds [ 1667.572117][T11137] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 390 seconds [ 1667.583171][T11137] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 390 seconds [ 1667.594227][T11137] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 390 seconds [ 1667.866528][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.920230][T20222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1668.069946][T20222] usb 5-1: device descriptor read/64, error -71 [ 1668.352560][T20222] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1668.420479][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.428635][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.520280][T20222] usb 5-1: device descriptor read/64, error -71 [ 1668.640525][T20222] usb usb5-port1: attempt power cycle [ 1668.824068][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.830798][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.910275][T30773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.016849][T13043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1669.050540][T13043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1669.070282][T13043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1669.078406][T13043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1669.086368][T13043] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1669.093656][T20222] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1669.111782][T13043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1669.150793][T20222] usb 5-1: device descriptor read/8, error -71 [ 1669.439949][T20222] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1669.461172][T11137] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 450 seconds [ 1669.466545][T31028] chnl_net:caif_netlink_parms(): no params data found [ 1669.472245][T11137] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 450 seconds [ 1669.489996][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.508785][T20222] usb 5-1: device descriptor read/8, error -71 [ 1669.593254][T31028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.600630][T31028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.607849][T31028] bridge_slave_0: entered allmulticast mode [ 1669.616643][T31028] bridge_slave_0: entered promiscuous mode [ 1669.625740][T31028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.633379][T20222] usb usb5-port1: unable to enumerate USB device [ 1669.639254][T31028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.647545][T31028] bridge_slave_1: entered allmulticast mode [ 1669.655486][T31028] bridge_slave_1: entered promiscuous mode [ 1669.685252][T31028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.697787][T31028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.741238][T31028] team0: Port device team_slave_0 added [ 1669.749660][T31028] team0: Port device team_slave_1 added [ 1669.778247][T31028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.785467][T31028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.811694][T31028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.824612][T31028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.831827][T31028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.857862][T31028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.904720][T31028] hsr_slave_0: entered promiscuous mode [ 1669.911607][T31028] hsr_slave_1: entered promiscuous mode [ 1669.918031][T31028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1669.925843][T31028] Cannot create hsr debugfs directory [ 1669.948372][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.030143][T30780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.125318][T31028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1670.136684][T31028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1670.148009][T31028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1670.158681][T31028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1670.212139][T31028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.219311][T31028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.226962][T31028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.234145][T31028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.301003][T31028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.319423][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.328842][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.350535][T31028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.366038][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.373193][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.391278][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.398431][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.505663][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.633277][T31028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.985317][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.180947][T31028] veth0_vlan: entered promiscuous mode [ 1671.220328][ T5781] Bluetooth: hci5: command tx timeout [ 1671.234664][T31028] veth1_vlan: entered promiscuous mode [ 1671.330671][T31028] veth0_macvtap: entered promiscuous mode [ 1671.354643][T31028] veth1_macvtap: entered promiscuous mode [ 1671.397887][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.413581][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.429015][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.446112][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.458695][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.479495][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.494203][T31028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.521433][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.542648][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.558778][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.589532][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.610388][T31028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.640098][T31028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.680379][T31028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.709568][T31028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.729927][T31028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.738665][T31028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.755813][T31028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.921230][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.938558][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.957017][T31061] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1672.038701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.053604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.580707][T22095] net_ratelimit: 3 callbacks suppressed [ 1672.580721][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.060176][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.070648][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.301834][ T5781] Bluetooth: hci5: command tx timeout [ 1673.330061][T11137] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 480 seconds [ 1673.620228][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.952060][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.100904][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.500528][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.580724][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.660431][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.103578][T13043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1675.115349][T13043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1675.123423][T13043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1675.135561][T13043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1675.143048][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.155064][T13043] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1675.162676][T13043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1675.339980][T30774] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1675.390014][ T5781] Bluetooth: hci5: command tx timeout [ 1675.422616][T31082] chnl_net:caif_netlink_parms(): no params data found [ 1675.509909][T30774] usb 6-1: device descriptor read/64, error -71 [ 1675.687560][T31082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.715107][T31082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.740372][T31082] bridge_slave_0: entered allmulticast mode [ 1675.760037][T31082] bridge_slave_0: entered promiscuous mode [ 1675.784918][T31082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.800095][T30774] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1675.809444][T31082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.832487][T31082] bridge_slave_1: entered allmulticast mode [ 1675.847774][T31082] bridge_slave_1: entered promiscuous mode [ 1675.923546][T31082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.951088][T31082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.969968][T30774] usb 6-1: device descriptor read/64, error -71 [ 1676.051348][T31082] team0: Port device team_slave_0 added [ 1676.070987][T31082] team0: Port device team_slave_1 added [ 1676.090306][T30774] usb usb6-port1: attempt power cycle [ 1676.141473][T31082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.148457][T31082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.206526][T31082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.234724][T31082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.250000][T31082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.288717][T31082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.392879][T31082] hsr_slave_0: entered promiscuous mode [ 1676.409505][T31082] hsr_slave_1: entered promiscuous mode [ 1676.417203][T31082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.425256][T31082] Cannot create hsr debugfs directory [ 1676.509915][T30774] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1676.540797][T30774] usb 6-1: device descriptor read/8, error -71 [ 1676.820441][T30774] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1676.860676][T30774] usb 6-1: device descriptor read/8, error -71 [ 1676.893040][T31082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1676.943892][T31082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1676.973538][T31082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1676.990593][T30774] usb usb6-port1: unable to enumerate USB device [ 1677.016080][T31082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1677.224424][ T5781] Bluetooth: hci6: command tx timeout [ 1677.249303][T31082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.304432][T31082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.334588][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.341793][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.415974][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.423160][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.460067][ T5781] Bluetooth: hci5: command tx timeout [ 1677.780583][T30774] net_ratelimit: 6 callbacks suppressed [ 1677.780602][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.804621][T31082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.867345][T31112] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8410'. [ 1678.207529][T31082] veth0_vlan: entered promiscuous mode [ 1678.246614][T31082] veth1_vlan: entered promiscuous mode [ 1678.271006][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.337250][T31082] veth0_macvtap: entered promiscuous mode [ 1678.374043][T31082] veth1_macvtap: entered promiscuous mode [ 1678.419911][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.440002][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.459858][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.504446][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.523723][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.549892][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.559773][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.594418][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.621385][T31082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.704373][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.749920][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.779945][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.802625][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.830224][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.840147][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.869884][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.900259][T31082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.940666][T31082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.972551][T31082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.039724][T13043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1679.049957][T13043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1679.061915][T13043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1679.071124][T13043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1679.079146][T13043] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1679.086868][T13043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1679.140442][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.253407][T31082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.278191][T31082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.300191][ T5781] Bluetooth: hci6: command tx timeout [ 1679.310149][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.318986][T31082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.356474][T31082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.860332][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.970092][ T28] audit: type=1326 audit(1770014397.087:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31125 comm="syz.4.8414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc652d9aeb9 code=0x0 [ 1680.063073][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.115130][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.308056][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.341013][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.345358][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.357072][T11137] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 480 seconds [ 1680.368312][T11137] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 480 seconds [ 1680.379506][T11137] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 480 seconds [ 1680.401251][T11137] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 480 seconds [ 1680.483942][T31131] chnl_net:caif_netlink_parms(): no params data found [ 1680.580103][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.756981][T31131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.783771][T31131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.820457][T31131] bridge_slave_0: entered allmulticast mode [ 1680.827798][T31131] bridge_slave_0: entered promiscuous mode [ 1680.878451][T31131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.887825][T31131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.895910][T31131] bridge_slave_1: entered allmulticast mode [ 1680.901161][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.908648][T31131] bridge_slave_1: entered promiscuous mode [ 1680.968751][T31131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.003395][T31131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.073240][T30774] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1681.124563][T31152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8419'. [ 1681.150276][ T5781] Bluetooth: hci7: command tx timeout [ 1681.234842][T31152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.244194][T31152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.253200][T31152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.261958][T31152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.278166][T30774] usb 6-1: device descriptor read/64, error -71 [ 1681.345697][T31152] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.354864][T31152] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.363912][T31152] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.372862][T31152] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.382730][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.390662][ T5781] Bluetooth: hci6: command tx timeout [ 1681.574488][T30774] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1681.730033][T30774] usb 6-1: device descriptor read/64, error -71 [ 1681.787571][T31131] team0: Port device team_slave_0 added [ 1681.842301][T31131] team0: Port device team_slave_1 added [ 1681.872580][T30774] usb usb6-port1: attempt power cycle [ 1682.026741][T31131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.051027][T31131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.155556][T31131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.180715][T31131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.196265][T31131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.297818][T31131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.310761][T30774] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1682.380869][T30774] usb 6-1: device descriptor read/8, error -71 [ 1682.556608][T31131] hsr_slave_0: entered promiscuous mode [ 1682.574280][T31131] hsr_slave_1: entered promiscuous mode [ 1682.604506][T31131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1682.630049][T31131] Cannot create hsr debugfs directory [ 1682.662076][T30774] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1682.700781][T30774] usb 6-1: device descriptor read/8, error -71 [ 1682.830171][T30774] usb usb6-port1: unable to enumerate USB device [ 1682.911584][T11137] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 420 seconds [ 1682.922520][T11137] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 420 seconds [ 1682.933661][T11137] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 420 seconds [ 1682.944862][T11137] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 420 seconds [ 1682.980736][T30775] net_ratelimit: 3 callbacks suppressed [ 1682.980749][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.130266][T31160] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8420'. [ 1683.221407][ T5781] Bluetooth: hci7: command tx timeout [ 1683.323982][T31131] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1683.335453][T31131] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1683.357111][T31131] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1683.391630][T31131] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1683.461881][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.470391][ T5781] Bluetooth: hci6: command tx timeout [ 1683.542795][T30780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.620819][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.681197][T31131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.723903][T31131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.768549][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.775909][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.848443][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.855730][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.023372][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.182045][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.210932][ T1191] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1684.214970][T10529] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1684.239674][ T5868] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1684.300220][ T1191] dvb_usb_az6027: probe of 1-1:0.0 failed with error -2 [ 1684.331152][ T5868] dvb_usb_az6027: probe of 4-1:0.0 failed with error -110 [ 1684.346024][ T1191] usb 1-1: USB disconnect, device number 49 [ 1684.379149][ T5868] usb 4-1: USB disconnect, device number 40 [ 1684.434097][T10529] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 1684.452328][T10529] usb 2-1: USB disconnect, device number 36 [ 1684.507086][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.060614][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.227357][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.300031][ T5781] Bluetooth: hci7: command tx timeout [ 1685.540565][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.950542][T30772] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1686.118185][T11137] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 480 seconds [ 1686.129121][T23158] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 420 seconds [ 1686.140022][T23158] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 420 seconds [ 1686.200034][T30772] usb 5-1: Using ep0 maxpacket: 32 [ 1686.212305][T30772] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1686.223902][T30772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.235192][T30772] usb 5-1: config 0 descriptor?? [ 1686.456422][T30772] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1686.482037][T30772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1686.501491][T30772] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1686.516298][T30772] usb 5-1: media controller created [ 1686.557551][T30772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1687.382204][ T5781] Bluetooth: hci7: command tx timeout [ 1687.540466][T30772] stb0899_attach: Driver disabled by Kconfig [ 1687.546685][T30772] az6027: no front-end attached [ 1687.546685][T30772] [ 1687.566305][T30772] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1687.575777][T30772] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 1687.620578][T30772] dvb-usb: schedule remote query interval to 400 msecs. [ 1687.630088][T30772] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1687.903731][T30772] usb 5-1: USB disconnect, device number 10 [ 1687.963811][T30772] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1688.186596][T30775] net_ratelimit: 5 callbacks suppressed [ 1688.186615][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.274565][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.665298][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.665871][ T10] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 390 seconds [ 1688.684753][T29993] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 390 seconds [ 1689.220143][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.706283][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.710513][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.244973][T31131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1690.261030][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.276725][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.295979][T31199] syzkaller0: entered promiscuous mode [ 1690.301346][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.322460][T31199] syzkaller0: entered allmulticast mode [ 1690.328486][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.541741][T30775] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1690.580981][T29993] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 390 seconds [ 1690.710233][T30775] usb 5-1: device descriptor read/64, error -71 [ 1690.858675][T31131] veth0_vlan: entered promiscuous mode [ 1690.889334][T31131] veth1_vlan: entered promiscuous mode [ 1690.952197][T31131] veth0_macvtap: entered promiscuous mode [ 1690.982545][T31131] veth1_macvtap: entered promiscuous mode [ 1691.001992][T30775] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1691.058492][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1691.092215][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.112026][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1691.127466][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.143487][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1691.159019][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.170048][T30775] usb 5-1: device descriptor read/64, error -71 [ 1691.185328][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1691.204212][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.218050][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1691.231221][T23158] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 420 seconds [ 1691.242009][T23158] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 420 seconds [ 1691.253071][T23158] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 420 seconds [ 1691.265424][T23158] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 420 seconds [ 1691.301590][T30775] usb usb5-port1: attempt power cycle [ 1691.316827][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.401293][T31131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1691.442946][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.466955][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.489888][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.520057][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.549900][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.570003][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.596600][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.625130][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.648716][T31131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.672127][T31131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.701163][T31131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.720399][T30775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1691.732609][T31131] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.748606][T31131] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.784910][T31131] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.811187][T31131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.821404][T30775] usb 5-1: device descriptor read/8, error -71 [ 1692.038328][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.115521][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.180292][T30775] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1692.221480][ T6594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.236783][ T6594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.249094][T30775] usb 5-1: device descriptor read/8, error -71 [ 1692.398337][T30775] usb usb5-port1: unable to enumerate USB device [ 1692.501221][T29993] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 480 seconds [ 1692.512203][T29993] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 480 seconds [ 1692.523402][T29993] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 480 seconds [ 1692.534820][T29993] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 480 seconds [ 1693.289458][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8433'. [ 1693.465411][T30775] net_ratelimit: 8 callbacks suppressed [ 1693.465427][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.780605][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.870011][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.341677][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.507696][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.903000][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.540059][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.781181][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.941659][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.190953][T10529] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1696.590087][T10529] usb 5-1: device descriptor read/64, error -71 [ 1696.719442][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.990419][T10529] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1697.290098][T10529] usb 5-1: device descriptor read/64, error -71 [ 1697.447934][T10529] usb usb5-port1: attempt power cycle [ 1697.659951][T23158] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 420 seconds [ 1697.679957][T23158] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 420 seconds [ 1697.691317][T23158] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 420 seconds [ 1697.702676][T23158] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 420 seconds [ 1697.889303][T10529] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1697.922938][T10529] usb 5-1: device descriptor read/8, error -71 [ 1698.231873][T10529] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1698.280474][T10529] usb 5-1: device descriptor read/8, error -71 [ 1698.407797][T10529] usb usb5-port1: unable to enumerate USB device [ 1698.820630][T23624] net_ratelimit: 4 callbacks suppressed [ 1698.820651][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.835844][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.220207][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.546656][T23158] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 480 seconds [ 1699.558103][T23158] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 480 seconds [ 1699.860313][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.890950][ T28] audit: type=1326 audit(1770014417.017:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31264 comm="syz.4.8444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc652d9aeb9 code=0x0 [ 1700.275421][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.435226][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.908719][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.939944][T31254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8441'. [ 1700.981745][T31254] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1700.990499][T31254] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1701.000455][T31254] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1701.009326][T31254] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1701.072866][T31254] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.081964][T31254] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.090897][T31254] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.101022][T31254] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.302215][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.861175][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.947925][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.773160][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8452'. [ 1703.006972][T31300] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8454'. [ 1703.409988][T23158] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 510 seconds [ 1704.031782][T30772] net_ratelimit: 6 callbacks suppressed [ 1704.031800][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.430734][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.901363][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.060174][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.460313][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.100946][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.500174][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.516524][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.145343][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.540339][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.230383][T30775] net_ratelimit: 3 callbacks suppressed [ 1709.230400][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.540080][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.620213][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.270155][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.420986][T23158] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 510 seconds [ 1710.432650][T23158] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 510 seconds [ 1710.445760][T23158] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 510 seconds [ 1710.456944][T23158] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 510 seconds [ 1710.660437][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.980532][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.274559][T31344] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8465'. [ 1711.310743][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.700906][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.851237][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8473'. [ 1711.961069][T31372] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.970156][T31372] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.978884][T31372] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.987678][T31372] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1712.034428][T31372] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1712.043426][T31372] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1712.053450][T31372] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1712.062479][T31372] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1712.340514][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.350906][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.981365][T23158] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 450 seconds [ 1712.992411][T23158] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 450 seconds [ 1713.003680][T23158] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 450 seconds [ 1713.014766][T23158] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 450 seconds [ 1714.433551][T30772] net_ratelimit: 6 callbacks suppressed [ 1714.433568][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.820166][T30774] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1714.828282][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.042945][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1715.061678][T30774] usb 8-1: no configurations [ 1715.073569][T30774] usb 8-1: can't read configurations, error -22 [ 1715.259271][T30774] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1715.470164][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.491886][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1715.501218][T30774] usb 8-1: no configurations [ 1715.505855][T30774] usb 8-1: can't read configurations, error -22 [ 1715.544441][T30774] usb usb8-port1: attempt power cycle [ 1715.623167][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.871428][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.989914][T30774] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1716.070639][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1716.076622][T30774] usb 8-1: no configurations [ 1716.101806][T30774] usb 8-1: can't read configurations, error -22 [ 1716.193492][T11137] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 450 seconds [ 1716.205602][T11137] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 450 seconds [ 1716.217300][T23158] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 510 seconds [ 1716.304151][T30774] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1716.340942][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1716.351004][T30774] usb 8-1: no configurations [ 1716.360381][T30774] usb 8-1: can't read configurations, error -22 [ 1716.374860][T30774] usb usb8-port1: unable to enumerate USB device [ 1716.509952][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.910713][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.060328][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.540122][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.947434][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.755018][ T10] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 420 seconds [ 1718.765938][T29993] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 420 seconds [ 1719.622042][T10529] net_ratelimit: 3 callbacks suppressed [ 1719.622056][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.024202][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.112861][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.661131][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.693550][T29993] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 420 seconds [ 1721.060317][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.314118][T23158] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 450 seconds [ 1721.325231][T23158] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 450 seconds [ 1721.336667][T23158] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 450 seconds [ 1721.348224][T23158] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 450 seconds [ 1721.380152][ T8439] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1721.583039][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 1721.596532][ T8439] usb 8-1: no configurations [ 1721.601551][ T8439] usb 8-1: can't read configurations, error -22 [ 1721.700121][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.700837][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.789973][ T8439] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1721.952572][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.000554][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 1722.010845][ T8439] usb 8-1: no configurations [ 1722.018921][ T8439] usb 8-1: can't read configurations, error -22 [ 1722.032478][ T8439] usb usb8-port1: attempt power cycle [ 1722.100338][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.471194][ T8439] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1722.510779][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 1722.520327][ T8439] usb 8-1: no configurations [ 1722.524973][ T8439] usb 8-1: can't read configurations, error -22 [ 1722.554755][T31459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8496'. [ 1722.592104][T31459] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1722.594046][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.603381][T31459] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1722.612071][T29993] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 510 seconds [ 1722.618040][T31459] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1722.628583][T29993] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 510 seconds [ 1722.628614][T29993] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 510 seconds [ 1722.637399][T31459] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1722.653015][T29993] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 510 seconds [ 1722.750196][ T8439] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1722.766050][T31459] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.775335][T31459] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.784530][T31459] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.793536][T31459] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.803693][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 1722.809589][ T8439] usb 8-1: no configurations [ 1722.814417][ T8439] usb 8-1: can't read configurations, error -22 [ 1722.821136][ T8439] usb usb8-port1: unable to enumerate USB device [ 1724.740074][ T5868] net_ratelimit: 4 callbacks suppressed [ 1724.740088][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.831158][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.919968][ T8439] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1725.130007][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 1725.153262][ T8439] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1725.183615][ T8439] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.217505][ T8439] usb 8-1: config 0 has no interface number 0 [ 1725.224643][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.246848][ T8439] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1725.266265][ T8439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.289907][ T8439] usb 8-1: Product: syz [ 1725.298634][ T8439] usb 8-1: Manufacturer: syz [ 1725.327493][ T8439] usb 8-1: SerialNumber: syz [ 1725.335232][ T8439] usb 8-1: config 0 descriptor?? [ 1725.345310][ T8439] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1725.571332][ T8439] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1725.603225][ T8439] quatech2: probe of 8-1:0.51 failed with error -8 [ 1725.775340][T30772] usb 8-1: USB disconnect, device number 10 [ 1725.860228][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.009902][ T8439] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1726.180185][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.229927][ T8439] usb 6-1: Using ep0 maxpacket: 32 [ 1726.241063][ T8439] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.269495][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.269983][ T8439] usb 6-1: config 0 has no interfaces? [ 1726.337658][ T8439] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1726.359833][ T8439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.371212][ T8439] usb 6-1: config 0 descriptor?? [ 1726.900192][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.300893][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.721363][T23158] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 450 seconds [ 1727.732253][T23158] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 450 seconds [ 1727.743371][T23158] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 450 seconds [ 1727.754452][T23158] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 450 seconds [ 1727.790205][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.940137][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.819715][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1728.868320][ T8439] usb 6-1: USB disconnect, device number 10 [ 1728.903895][T31547] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.912720][T31547] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.921531][T31547] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.930280][T31547] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.096417][T31547] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.105462][T31547] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.114424][T31547] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.123335][T31547] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.638464][T23158] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 510 seconds [ 1729.649562][T23158] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 510 seconds [ 1729.679990][T30772] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1729.869902][T30772] usb 8-1: Using ep0 maxpacket: 32 [ 1729.877279][T30772] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1729.897062][T30772] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.988731][T30772] usb 8-1: config 0 has no interface number 0 [ 1730.053555][T30772] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1730.084339][T30772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.100588][T30775] net_ratelimit: 4 callbacks suppressed [ 1730.100603][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.141866][T30772] usb 8-1: Product: syz [ 1730.155646][T30772] usb 8-1: Manufacturer: syz [ 1730.175815][T30772] usb 8-1: SerialNumber: syz [ 1730.204814][T30772] usb 8-1: config 0 descriptor?? [ 1730.241750][T30772] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1730.263052][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.269399][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.458480][T30772] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1730.508720][T30772] quatech2: probe of 8-1:0.51 failed with error -8 [ 1730.545896][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.667031][T10529] usb 8-1: USB disconnect, device number 11 [ 1730.769915][ T28] audit: type=1326 audit(1770014447.867:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.5.8520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f566799aeb9 code=0x0 [ 1730.830424][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.140615][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.540428][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.620094][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.180974][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.190798][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.260383][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.660255][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.047576][T31596] syzkaller0: entered promiscuous mode [ 1733.071243][T31596] syzkaller0: entered allmulticast mode [ 1733.462311][T23158] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 540 seconds [ 1733.760079][T23624] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1733.969978][T23624] usb 8-1: Using ep0 maxpacket: 32 [ 1733.980598][T23624] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1734.010182][T23624] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.037345][T23624] usb 8-1: config 0 has no interface number 0 [ 1734.056923][T23624] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1734.066534][T23624] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.085094][T23624] usb 8-1: Product: syz [ 1734.093905][T23624] usb 8-1: Manufacturer: syz [ 1734.112980][T23624] usb 8-1: SerialNumber: syz [ 1734.129759][T23624] usb 8-1: config 0 descriptor?? [ 1734.145639][T23624] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1734.350431][T23624] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1734.370720][T23624] quatech2: probe of 8-1:0.51 failed with error -8 [ 1734.561972][T23624] usb 8-1: USB disconnect, device number 12 [ 1735.310080][T30774] net_ratelimit: 5 callbacks suppressed [ 1735.310096][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.323843][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.807626][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.901445][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8539'. [ 1735.976788][T31634] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.985875][T31634] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.994615][T31634] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.003373][T31634] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1736.118282][T31634] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.127347][T31634] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.136475][T31634] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.145476][T31634] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.340631][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.820474][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.910288][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.384051][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.860370][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.120169][ T1191] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1738.310597][ T1191] usb 8-1: Using ep0 maxpacket: 32 [ 1738.328499][ T1191] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.340120][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.349493][ T1191] usb 8-1: config 0 has no interfaces? [ 1738.358231][ T1191] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1738.369223][ T1191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.389008][ T1191] usb 8-1: config 0 descriptor?? [ 1738.420688][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.502964][T30774] net_ratelimit: 4 callbacks suppressed [ 1740.502980][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.523256][T23158] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 540 seconds [ 1740.534501][T23158] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 540 seconds [ 1740.545929][T23158] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 540 seconds [ 1740.557314][T23158] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 540 seconds [ 1740.980244][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.140389][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.390007][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.540132][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.721671][ T28] audit: type=1326 audit(1770014458.847:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31685 comm="syz.5.8551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f566799aeb9 code=0x0 [ 1741.791168][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.930822][T30775] usb 8-1: USB disconnect, device number 13 [ 1742.020178][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.592809][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.980438][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.999081][T30774] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1743.072778][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.081901][T23158] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 480 seconds [ 1743.099927][T23158] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 480 seconds [ 1743.111795][T23158] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 480 seconds [ 1743.122977][T23158] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 480 seconds [ 1743.310367][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1743.321996][T30774] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1743.340248][T30774] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.361697][T30774] usb 8-1: config 0 descriptor?? [ 1743.530327][T10529] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1743.579445][T30774] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1743.598793][T31733] netlink: 'syz.4.8563': attribute type 1 has an invalid length. [ 1743.606986][T30774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1743.618552][T30774] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1743.632360][T30774] usb 8-1: media controller created [ 1743.674274][T31733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1743.684126][T30774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1743.716481][T31737] vlan2: entered allmulticast mode [ 1743.729909][T10529] usb 6-1: Using ep0 maxpacket: 32 [ 1743.737583][T10529] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1743.756128][T10529] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.769288][T31737] veth0_to_bond: entered allmulticast mode [ 1743.798158][T10529] usb 6-1: config 0 has no interface number 0 [ 1743.820078][T10529] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1743.853206][T10529] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1743.863029][T10529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.883268][T10529] usb 6-1: Product: syz [ 1743.887505][T10529] usb 6-1: Manufacturer: syz [ 1743.903951][T10529] usb 6-1: SerialNumber: syz [ 1743.914523][T10529] usb 6-1: config 0 descriptor?? [ 1743.922943][T10529] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1744.126963][T10529] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 1744.140077][T10529] quatech2: probe of 6-1:0.51 failed with error -8 [ 1744.240322][ T1191] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1744.329980][T10529] usb 6-1: USB disconnect, device number 11 [ 1744.430144][ T1191] usb 5-1: Using ep0 maxpacket: 32 [ 1744.437577][ T1191] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.458383][ T1191] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1744.489757][ T1191] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1744.499573][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.519741][ T1191] usb 5-1: config 0 descriptor?? [ 1744.641080][T30774] stb0899_attach: Driver disabled by Kconfig [ 1744.647139][T30774] az6027: no front-end attached [ 1744.647139][T30774] [ 1744.669299][T30774] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1744.696136][T30774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input68 [ 1744.721829][T30774] dvb-usb: schedule remote query interval to 400 msecs. [ 1744.728817][T30774] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1744.989712][ T1191] usb 8-1: USB disconnect, device number 14 [ 1745.059409][ T1191] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1745.097354][ T28] audit: type=1326 audit(1770014462.217:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31740 comm="syz.6.8565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbfa79aeb9 code=0x0 [ 1745.705270][T30775] net_ratelimit: 5 callbacks suppressed [ 1745.705289][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.020674][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.056125][T31769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8572'. [ 1746.180188][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.199753][T31769] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.208537][T31769] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.217546][T31769] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.226387][T31769] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.251439][T31769] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.262654][T31769] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.271966][T31769] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.281044][T31769] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.310030][T23158] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 480 seconds [ 1746.321045][T11137] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 540 seconds [ 1746.332193][T23158] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 480 seconds [ 1746.740308][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.230749][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.470439][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.639096][T31778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.646651][T31778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.838806][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.121084][T30775] usb 5-1: USB disconnect, device number 19 [ 1748.261095][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.550095][T30774] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1748.739918][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1748.763474][T30774] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1748.781875][T30774] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.821314][ T10] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 450 seconds [ 1748.832246][T29993] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 450 seconds [ 1748.847804][T30774] usb 8-1: config 0 has no interface number 0 [ 1748.876345][T30774] usb 8-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1748.916072][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.958708][T30774] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1748.978136][T30774] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.005096][T30774] usb 8-1: Product: syz [ 1749.014281][T30774] usb 8-1: Manufacturer: syz [ 1749.032807][T30774] usb 8-1: SerialNumber: syz [ 1749.044828][T30774] usb 8-1: config 0 descriptor?? [ 1749.058303][T30774] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1749.096668][ T8439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.157797][T31778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.230694][T31778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.260943][T30774] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1749.275045][T30774] quatech2: probe of 8-1:0.51 failed with error -8 [ 1749.477446][T30775] usb 8-1: USB disconnect, device number 15 [ 1750.706137][T31778] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.739899][T31778] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.752631][ T5868] net_ratelimit: 4 callbacks suppressed [ 1750.752643][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.761584][T31778] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.771429][T29993] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 450 seconds [ 1750.803816][T31778] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.026174][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.386486][T30780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.395066][T23158] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 480 seconds [ 1751.406980][T23158] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 480 seconds [ 1751.419308][T23158] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 480 seconds [ 1751.431437][T23158] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 480 seconds [ 1751.470195][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.800134][T13010] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1752.000307][T13010] usb 5-1: Using ep0 maxpacket: 32 [ 1752.012176][T13010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.040248][T13010] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1752.059741][T13010] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1752.079925][T13010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.097168][T13010] usb 5-1: config 0 descriptor?? [ 1752.102483][T30780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.120190][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.500442][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.543512][T31829] netlink: 'syz.6.8587': attribute type 1 has an invalid length. [ 1752.591233][T31829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1752.654429][T31829] vlan2: entered allmulticast mode [ 1752.659581][T31829] veth0_to_bond: entered allmulticast mode [ 1752.673316][T29993] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 540 seconds [ 1752.689932][T29993] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 540 seconds [ 1752.710005][T29993] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 540 seconds [ 1752.721238][T29993] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 540 seconds [ 1753.148154][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.310149][T10529] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1753.500931][T10529] usb 8-1: Using ep0 maxpacket: 32 [ 1753.528463][T10529] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1753.540320][T30780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.574695][T10529] usb 8-1: config 0 has no interface number 0 [ 1753.582845][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.612173][T10529] usb 8-1: config 0 interface 51 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1753.671068][T10529] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1753.705845][T10529] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.718273][T10529] usb 8-1: Product: syz [ 1753.725796][T10529] usb 8-1: Manufacturer: syz [ 1753.731437][T10529] usb 8-1: SerialNumber: syz [ 1753.739137][T10529] usb 8-1: config 0 descriptor?? [ 1753.749004][T10529] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1753.954414][T10529] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1753.990382][T10529] quatech2: probe of 8-1:0.51 failed with error -8 [ 1754.161015][T10529] usb 8-1: USB disconnect, device number 16 [ 1754.660673][ T1191] usb 5-1: USB disconnect, device number 20 [ 1755.409248][T31864] tipc: Started in network mode [ 1755.432979][T31864] tipc: Node identity 16fc4c470f45, cluster identity 4711 [ 1755.440987][T31864] tipc: Enabled bearer , priority 0 [ 1755.466594][T31864] tipc: Resetting bearer [ 1755.531635][T31863] tipc: Disabling bearer [ 1756.270303][T10529] net_ratelimit: 5 callbacks suppressed [ 1756.270321][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.584043][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.750363][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.920362][T31893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8601'. [ 1756.929528][T31893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8601'. [ 1757.300123][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.739926][T10529] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1757.780751][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.819568][T23158] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 480 seconds [ 1757.820937][ T4472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.833715][T23158] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 480 seconds [ 1757.849598][T23158] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 480 seconds [ 1757.854013][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.861759][T23158] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 480 seconds [ 1757.883454][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.930024][T10529] usb 8-1: Using ep0 maxpacket: 32 [ 1757.937179][T10529] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1757.945739][T10529] usb 8-1: config 0 has no interface number 0 [ 1757.953357][T10529] usb 8-1: config 0 interface 51 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1757.966340][T10529] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1757.975546][T10529] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.983579][T10529] usb 8-1: Product: syz [ 1757.987855][T10529] usb 8-1: Manufacturer: syz [ 1757.998072][T10529] usb 8-1: SerialNumber: syz [ 1758.005019][T10529] usb 8-1: config 0 descriptor?? [ 1758.064695][T10529] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1758.215643][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.281140][T10529] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 1758.318737][T10529] quatech2: probe of 8-1:0.51 failed with error -8 [ 1758.341398][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.485161][T10529] usb 8-1: USB disconnect, device number 17 [ 1759.191947][T31907] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8606'. [ 1759.649487][T31913] tipc: Started in network mode [ 1759.685744][T31913] tipc: Node identity 56393a1168e5, cluster identity 4711 [ 1759.706546][T23158] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 540 seconds [ 1759.718036][T23158] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 540 seconds [ 1759.744449][T31913] tipc: Enabled bearer , priority 0 [ 1759.762553][T31913] syzkaller0: entered promiscuous mode [ 1759.768187][T31913] syzkaller0: entered allmulticast mode [ 1759.856025][T31913] tipc: Resetting bearer [ 1759.950804][T31912] tipc: Resetting bearer [ 1760.045955][T31912] tipc: Disabling bearer [ 1760.830158][T30774] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1761.030050][T30774] usb 8-1: Using ep0 maxpacket: 32 [ 1761.047552][T30774] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1761.078872][T30774] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1761.098670][T30774] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.151051][T30774] usb 8-1: config 0 descriptor?? [ 1761.468047][T22095] net_ratelimit: 9 callbacks suppressed [ 1761.468070][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.110655][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.510224][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.660082][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.981147][ T4472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.990038][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.000050][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.120823][T31956] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8619'. [ 1763.547338][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.556659][T23158] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 570 seconds [ 1764.100503][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.260118][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.736514][T13010] usb 8-1: USB disconnect, device number 18 [ 1766.333118][T32000] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8630'. [ 1766.740496][T30774] net_ratelimit: 5 callbacks suppressed [ 1766.740512][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.220234][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.300081][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.700003][T10529] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1767.780255][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.889893][T10529] usb 8-1: Using ep0 maxpacket: 32 [ 1767.901845][T10529] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1767.929958][T10529] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1767.939085][T10529] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.968130][T10529] usb 8-1: config 0 descriptor?? [ 1768.237432][T32031] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1768.263896][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.664812][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.675785][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.690287][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.699655][T32040] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1768.742183][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.827390][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.621403][T32049] tipc: Started in network mode [ 1769.640010][T32049] tipc: Node identity e6a8c28882ef, cluster identity 4711 [ 1769.666079][T32049] tipc: Enabled bearer , priority 0 [ 1769.748979][T32049] syzkaller0: entered promiscuous mode [ 1769.771087][T32049] syzkaller0: entered allmulticast mode [ 1769.958787][T32051] tipc: Resetting bearer [ 1770.058617][T32048] tipc: Resetting bearer [ 1770.128122][T32048] tipc: Disabling bearer [ 1770.485287][ T1191] usb 8-1: USB disconnect, device number 19 [ 1770.591875][T23158] block nbd2: Possible stuck request ffff888021da0000: control (read@0,1024B). Runtime 570 seconds [ 1770.603153][T23158] block nbd2: Possible stuck request ffff888021da0200: control (read@1024,1024B). Runtime 570 seconds [ 1770.614249][T23158] block nbd2: Possible stuck request ffff888021da0400: control (read@2048,1024B). Runtime 570 seconds [ 1770.625957][T23158] block nbd2: Possible stuck request ffff888021da0600: control (read@3072,1024B). Runtime 570 seconds [ 1771.787468][T13010] net_ratelimit: 10 callbacks suppressed [ 1771.787488][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.860334][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.941265][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.029453][ T28] audit: type=1326 audit(1770014489.147:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32086 comm="syz.7.8653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9b9f9aeb9 code=0x0 [ 1772.051404][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.260142][T32091] syzkaller0: entered promiscuous mode [ 1772.269960][T32091] syzkaller0: entered allmulticast mode [ 1772.860367][T22095] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1772.900351][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.980512][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.059883][T22095] usb 5-1: Using ep0 maxpacket: 32 [ 1773.080058][T22095] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1773.102424][T22095] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1773.124484][T22095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.141160][T23158] block nbd6: Possible stuck request ffff888021f48000: control (read@0,1024B). Runtime 510 seconds [ 1773.153091][T23158] block nbd6: Possible stuck request ffff888021f48200: control (read@1024,1024B). Runtime 510 seconds [ 1773.164591][T23158] block nbd6: Possible stuck request ffff888021f48400: control (read@2048,1024B). Runtime 510 seconds [ 1773.175923][T23158] block nbd6: Possible stuck request ffff888021f48600: control (read@3072,1024B). Runtime 510 seconds [ 1773.190461][T22095] usb 5-1: config 0 descriptor?? [ 1773.380430][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.780573][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.789309][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.798131][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.023038][T22095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.228954][T32113] netlink: 'syz.5.8660': attribute type 10 has an invalid length. [ 1774.329039][T32113] team0: Port device dummy0 added [ 1774.361025][T32116] netlink: 'syz.5.8660': attribute type 10 has an invalid length. [ 1774.504134][T32116] team0: Port device dummy0 removed [ 1774.541745][T32116] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1774.709300][T32113] syz.5.8660 (32113) used greatest stack depth: 19496 bytes left [ 1776.352455][T31775] block nbd7: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 510 seconds [ 1776.364644][T31775] block nbd7: Possible stuck request ffff888022008200: control (read@1024,3072B). Runtime 510 seconds [ 1776.376905][T23158] block nbd3: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 570 seconds [ 1776.715694][T13010] usb 5-1: USB disconnect, device number 21 [ 1777.064453][T10529] net_ratelimit: 6 callbacks suppressed [ 1777.064465][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.163632][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.869929][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.107960][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.194470][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.420365][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1778.919463][ T10] block nbd10: Possible stuck request ffff8880220b8000: control (read@0,4096B). Runtime 480 seconds [ 1778.931096][T29993] block nbd11: Possible stuck request ffff888022128000: control (read@0,4096B). Runtime 480 seconds [ 1779.156474][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.223991][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.469163][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.540398][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.540526][ T6594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.439950][T10529] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1780.650179][T10529] usb 5-1: Using ep0 maxpacket: 32 [ 1780.662225][T10529] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1780.750421][T10529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.792353][T10529] usb 5-1: config 0 descriptor?? [ 1780.823624][T29993] block nbd12: Possible stuck request ffff888022160000: control (read@0,4096B). Runtime 480 seconds [ 1781.024950][T10529] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1781.054531][T10529] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1781.076512][T10529] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1781.472968][T23158] block nbd8: Possible stuck request ffff888022020000: control (read@0,1024B). Runtime 510 seconds [ 1781.484429][T23158] block nbd8: Possible stuck request ffff888022020200: control (read@1024,1024B). Runtime 510 seconds [ 1781.495826][T23158] block nbd8: Possible stuck request ffff888022020400: control (read@2048,1024B). Runtime 510 seconds [ 1781.507045][T23158] block nbd8: Possible stuck request ffff888022020600: control (read@3072,1024B). Runtime 510 seconds [ 1782.351679][T30775] net_ratelimit: 11 callbacks suppressed [ 1782.351695][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.380032][T30774] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1782.507580][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.569844][T30774] usb 6-1: Using ep0 maxpacket: 32 [ 1782.598172][T30774] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1782.641251][T30774] usb 6-1: config 0 has no interface number 0 [ 1782.662312][T30774] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1782.687405][T30774] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1782.727894][T30774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.740632][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.741362][T29993] block nbd4: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 570 seconds [ 1782.761476][T29993] block nbd4: Possible stuck request ffff888021eb0200: control (read@1024,1024B). Runtime 570 seconds [ 1782.770645][T30774] usb 6-1: Product: syz [ 1782.773193][T29993] block nbd4: Possible stuck request ffff888021eb0400: control (read@2048,1024B). Runtime 570 seconds [ 1782.780063][T30774] usb 6-1: Manufacturer: syz [ 1782.788289][T29993] block nbd4: Possible stuck request ffff888021eb0600: control (read@3072,1024B). Runtime 570 seconds [ 1782.850117][T30774] usb 6-1: SerialNumber: syz [ 1782.899055][T30774] usb 6-1: config 0 descriptor?? [ 1782.989229][T30774] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1783.206481][T30774] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 1783.220538][T30774] quatech2: probe of 6-1:0.51 failed with error -8 [ 1783.381159][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.407399][ T5868] usb 6-1: USB disconnect, device number 12 [ 1783.780419][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.942015][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.420164][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.449097][T32209] netlink: 'syz.6.8687': attribute type 10 has an invalid length. [ 1784.520373][T32198] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1784.557703][T32209] team0: Port device dummy0 added [ 1784.567840][T32211] netlink: 'syz.6.8687': attribute type 10 has an invalid length. [ 1784.659219][T32211] team0: Port device dummy0 removed [ 1784.665820][ T4487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.675067][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.689294][T32211] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1784.690241][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.377269][ T5868] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1787.556008][T30774] net_ratelimit: 6 callbacks suppressed [ 1787.556025][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.575606][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1787.592091][ T5868] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1787.609814][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.632523][ T5868] usb 8-1: config 0 descriptor?? [ 1787.845584][ T5868] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1787.860421][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.869038][T23158] block nbd9: Possible stuck request ffff888022058000: control (read@0,1024B). Runtime 510 seconds [ 1787.880124][T23158] block nbd9: Possible stuck request ffff888022058200: control (read@1024,1024B). Runtime 510 seconds [ 1787.891300][T23158] block nbd9: Possible stuck request ffff888022058400: control (read@2048,1024B). Runtime 510 seconds [ 1787.919896][T23158] block nbd9: Possible stuck request ffff888022058600: control (read@3072,1024B). Runtime 510 seconds [ 1788.580154][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.592231][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.900153][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.161477][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.620526][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.802146][T23158] block nbd5: Possible stuck request ffff888021ee8200: control (read@1024,3072B). Runtime 570 seconds [ 1789.802190][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.813622][T23158] block nbd5: Possible stuck request ffff888021ee8000: control (read@0,1024B). Runtime 570 seconds [ 1789.944415][T30772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.038747][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.599512][T32222] netlink: 'syz.4.8691': attribute type 10 has an invalid length. [ 1790.628506][T32222] team0: Port device dummy0 added [ 1790.649850][T32226] netlink: 'syz.4.8691': attribute type 10 has an invalid length. [ 1790.731443][T32226] team0: Port device dummy0 removed [ 1790.751666][T32226] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1791.010917][T32247] tipc: Enabled bearer , priority 0 [ 1791.019848][ T1191] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1791.032962][T32247] syzkaller0: entered promiscuous mode [ 1791.048336][T32247] syzkaller0: entered allmulticast mode [ 1791.082692][T32247] tipc: Resetting bearer [ 1791.107662][T32246] tipc: Resetting bearer [ 1791.161407][T32246] tipc: Disabling bearer [ 1791.260086][ T1191] usb 6-1: Using ep0 maxpacket: 32 [ 1791.272216][ T1191] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1791.289856][ T1191] usb 6-1: config 0 has no interface number 0 [ 1791.306239][ T1191] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1791.350211][ T1191] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1791.366343][ T1191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.398642][ T1191] usb 6-1: Product: syz [ 1791.410322][ T1191] usb 6-1: Manufacturer: syz [ 1791.425242][ T1191] usb 6-1: SerialNumber: syz [ 1791.449508][ T1191] usb 6-1: config 0 descriptor?? [ 1791.477128][ T1191] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1791.683869][ T1191] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 1791.716409][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.723493][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.734810][ T1191] quatech2: probe of 6-1:0.51 failed with error -8 [ 1791.933152][ T1191] usb 6-1: USB disconnect, device number 13 [ 1792.839204][T30774] net_ratelimit: 5 callbacks suppressed [ 1792.839215][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.060134][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.071498][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.649995][T23158] block nbd1: Possible stuck request ffff888021d70000: control (read@0,4096B). Runtime 600 seconds [ 1793.780549][ T5781] Bluetooth: hci5: command 0x0406 tx timeout [ 1793.860799][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.109576][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.660019][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.910982][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.140358][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.550133][ T29] INFO: task syz.1.8313:30725 blocked for more than 143 seconds. [ 1795.557909][ T29] Not tainted syzkaller #0 [ 1795.596297][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1795.615558][ T29] task:syz.1.8313 state:D stack:23856 pid:30725 ppid:27162 flags:0x00004006 [ 1795.627078][ T29] Call Trace: [ 1795.631269][ T29] [ 1795.634690][ T29] __schedule+0x1553/0x45a0 [ 1795.645900][ T29] ? asan.module_dtor+0x20/0x20 [ 1795.651775][ T29] ? mark_lock+0x94/0x320 [ 1795.666632][ T29] ? lock_chain_count+0x20/0x20 [ 1795.676413][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1795.687756][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1795.699125][ T29] schedule+0xbd/0x170 [ 1795.707352][ T29] io_schedule+0x80/0xd0 [ 1795.743884][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1795.758146][ T29] ? folio_wait_bit+0x30/0x30 [ 1795.772053][ T29] ? migrate_folio_undo_src+0x298/0x360 [ 1795.777878][ T29] ? _compound_head+0x120/0x120 [ 1795.790454][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1795.796347][ T29] ? compact_zone+0x43a0/0x43a0 [ 1795.802125][ T29] migrate_pages_batch+0x1393/0x3440 [ 1795.807589][ T29] ? compact_zone+0x43a0/0x43a0 [ 1795.812963][ T29] ? compaction_alloc+0x2820/0x2820 [ 1795.865327][ T29] ? migrate_pages+0x27a0/0x27a0 [ 1795.877623][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1795.891018][ T29] ? lock_chain_count+0x20/0x20 [ 1795.901801][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1795.917730][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1795.933605][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1795.940374][T30775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.948738][ T29] migrate_pages+0x1f5a/0x27a0 [ 1795.963286][ T29] ? compaction_alloc+0x2820/0x2820 [ 1795.985486][ T29] ? compact_zone+0x43a0/0x43a0 [ 1795.997380][ T29] ? folio_detach_private+0x3c0/0x3c0 [ 1796.007888][ T29] ? isolate_migratepages_range+0x250/0x250 [ 1796.018389][ T29] ? __pageblock_pfn_to_page+0xc0/0x3d0 [ 1796.040977][ T29] compact_zone+0x2200/0x43a0 [ 1796.053789][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1796.068730][ T29] ? folio_flags+0x130/0x130 [ 1796.083781][ T29] ? sysctl_compaction_handler+0x8c/0x1a0 [ 1796.100685][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 1796.100758][T13010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.111568][ T29] compact_node+0x195/0x300 [ 1796.137858][ T29] ? compact_store+0x130/0x130 [ 1796.143023][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1796.160074][ T29] sysctl_compaction_handler+0xf9/0x1a0 [ 1796.174750][ T29] proc_sys_call_handler+0x463/0x6d0 [ 1796.190051][ T29] ? proc_sys_open+0x260/0x260 [ 1796.196099][ T29] do_iter_write+0x738/0xc30 [ 1796.201658][ T29] ? vfs_iter_write+0xa0/0xa0 [ 1796.206687][ T29] ? __asan_memset+0x22/0x40 [ 1796.218986][ T29] ? iov_iter_bvec+0xd4/0x1b0 [ 1796.228253][ T29] ? vfs_iter_write+0x6e/0xa0 [ 1796.237776][ T29] iter_file_splice_write+0x6a3/0xcb0 [ 1796.251638][ T29] ? splice_from_pipe+0x180/0x180 [ 1796.258792][ T29] ? splice_shrink_spd+0xc0/0xc0 [ 1796.268857][ T29] ? common_file_perm+0x198/0x1f0 [ 1796.279883][ T29] ? splice_from_pipe+0x180/0x180 [ 1796.294715][ T29] direct_splice_actor+0xe8/0x130 [ 1796.327994][ T29] splice_direct_to_actor+0x304/0x8c0 [ 1796.336171][ T29] ? direct_file_splice_eof+0xb0/0xb0 [ 1796.349960][ T29] ? warn_unsupported+0xc0/0xc0 [ 1796.359023][ T29] ? fsnotify_perm+0x5d/0x5e0 [ 1796.369679][ T29] ? security_file_permission+0x79/0xa0 [ 1796.382240][ T29] do_splice_direct+0x1d5/0x2f0 [ 1796.395476][ T29] ? splice_direct_to_actor+0x8c0/0x8c0 [ 1796.409905][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 1796.424195][ T29] ? do_splice_direct+0x2f0/0x2f0 [ 1796.443363][ T29] do_sendfile+0x5f2/0xef0 [ 1796.455563][ T29] ? do_pwritev+0x3a0/0x3a0 [ 1796.468225][ T29] ? __might_fault+0xaa/0x120 [ 1796.473379][ T29] ? __might_fault+0xc6/0x120 [ 1796.486713][ T29] ? __might_fault+0xaa/0x120 [ 1796.505178][ T29] __se_sys_sendfile64+0xe0/0x1a0 [ 1796.519929][ T29] ? lock_chain_count+0x20/0x20 [ 1796.530215][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1796.544910][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1796.557829][ T29] do_syscall_64+0x55/0xa0 [ 1796.564962][ T29] ? clear_bhb_loop+0x40/0x90 [ 1796.580647][ T29] ? clear_bhb_loop+0x40/0x90 [ 1796.589691][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1796.602170][ T29] RIP: 0033:0x7fe45fb9aeb9 [ 1796.614569][ T29] RSP: 002b:00007fe45d9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1796.639041][ T29] RAX: ffffffffffffffda RBX: 00007fe45fe16270 RCX: 00007fe45fb9aeb9 [ 1796.657917][ T29] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000008 [ 1796.678261][ T29] RBP: 00007fe45fc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1796.694417][ T29] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1796.708860][ T29] R13: 00007fe45fe16308 R14: 00007fe45fe16270 R15: 00007fff448b5e68 [ 1796.722882][ T29] [ 1796.741536][ T29] [ 1796.741536][ T29] Showing all locks held in the system: [ 1796.760120][ T29] 1 lock held by khungtaskd/29: [ 1796.781006][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1796.801886][ T29] 2 locks held by getty/5533: [ 1796.806691][ T29] #0: ffff888030fa20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1796.839318][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1796.850135][ T29] 1 lock held by udevd/5762: [ 1796.854762][ T29] #0: ffff888021d0b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1796.864975][ T29] 1 lock held by udevd/5764: [ 1796.869787][ T29] #0: ffff888021d254c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1796.882135][ T29] 1 lock held by udevd/5765: [ 1796.886761][ T29] #0: ffff888021e6b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1796.897016][ T29] 1 lock held by udevd/5766: [ 1796.901931][ T29] #0: ffff888021e4f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1796.912201][ T29] 5 locks held by kworker/0:5/5868: [ 1796.917602][ T29] #0: ffff88801969c938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1796.929219][ T29] #1: ffffc90002f47d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1796.941993][ T29] #2: ffff888143b22190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 1796.951069][ T29] #3: ffff888036376190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 1796.960611][ T29] #4: ffff88804156a160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 1796.969977][ T29] 3 locks held by kworker/u4:13/6594: [ 1796.975588][ T29] #0: ffff88802c262938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1796.997874][ T29] #1: ffffc9000c217d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.029824][ T29] #2: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1797.039512][ T29] 1 lock held by udevd/9674: [ 1797.045035][ T29] #0: ffff888021e7b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.064443][ T29] 6 locks held by kworker/1:0/10529: [ 1797.079926][ T29] #0: ffff88801969c938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.100160][ T29] #1: ffffc900106efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.113896][ T29] #2: ffff88802530a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 1797.122940][ T29] #3: ffff88807d921190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 1797.132277][ T29] #4: ffff8880250b3160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 1797.141895][ T29] #5: ffffffff8cfdc630 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xfd/0x2b0 [ 1797.153041][ T29] 3 locks held by kworker/u5:0/13043: [ 1797.158456][ T29] #0: ffff88805e154538 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.181471][ T29] #1: ffffc9000cbe7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.199821][ T29] #2: ffff888066264e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 1797.218987][ T29] 1 lock held by udevd/13247: [ 1797.225616][ T29] #0: ffff888021d204c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.235971][ T29] 1 lock held by udevd/23210: [ 1797.240725][ T29] #0: ffff888021f3f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.251629][ T29] 1 lock held by udevd/23566: [ 1797.256427][ T29] #0: ffff888021e4a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.266523][ T29] 1 lock held by udevd/23611: [ 1797.271292][ T29] #0: ffff888021f254c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.281434][ T29] 1 lock held by udevd/23669: [ 1797.286153][ T29] #0: ffff888021f204c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.296298][ T29] 1 lock held by udevd/24739: [ 1797.301175][ T29] #0: ffff8880220844c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.311290][ T29] 1 lock held by udevd/24988: [ 1797.315995][ T29] #0: ffff888021f3a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1797.326310][ T29] 1 lock held by syz.1.8313/30725: [ 1797.339783][ T29] #0: ffff88805c4f2418 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5cf/0xef0 [ 1797.348917][ T29] 2 locks held by kworker/1:9/30774: [ 1797.365428][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.389284][ T29] #1: ffffc90003507d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1797.401753][ T29] 1 lock held by syz.2.8370/30906: [ 1797.406912][ T29] #0: ffff88807e2d2418 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5cf/0xef0 [ 1797.426422][ T29] 1 lock held by syz.3.8383/30978: [ 1797.431846][ T29] #0: ffff888079dde418 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5cf/0xef0 [ 1797.449794][ T29] 1 lock held by syz.0.8390/31005: [ 1797.460506][ T29] #0: ffff88805c444418 (sb_writers#3){.+.+}-{0:0}, at: do_sendfile+0x5cf/0xef0 [ 1797.469641][ T29] 2 locks held by syz.7.8699/32263: [ 1797.485349][ T29] #0: ffffffff8e3b3150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 1797.498395][ T29] #1: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x88/0x240 [ 1797.518501][ T29] 2 locks held by syz.5.8701/32267: [ 1797.523809][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1797.540017][ T29] #1: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1797.559798][ T29] 1 lock held by syz.4.8705/32281: [ 1797.564949][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1797.586072][ T29] 1 lock held by syz.4.8705/32282: [ 1797.594841][ T29] #0: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1797.604551][ T29] [ 1797.606927][ T29] ============================================= [ 1797.606927][ T29] [ 1797.615525][ T29] NMI backtrace for cpu 0 [ 1797.619889][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1797.627115][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1797.637210][ T29] Call Trace: [ 1797.640516][ T29] [ 1797.643469][ T29] dump_stack_lvl+0x18c/0x250 [ 1797.643587][ C1] vkms_vblank_simulate: vblank timer overrun [ 1797.648161][ T29] ? preempt_count_add+0x91/0x1a0 [ 1797.659195][ T29] ? show_regs_print_info+0x20/0x20 [ 1797.664515][ T29] ? load_image+0x400/0x400 [ 1797.669060][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1797.674122][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1797.680310][ T29] ? _printk+0xde/0x130 [ 1797.684497][ T29] ? load_image+0x400/0x400 [ 1797.689027][ T29] ? load_image+0x400/0x400 [ 1797.693575][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1797.699706][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1797.705721][ T29] watchdog+0xf3d/0xf80 [ 1797.709929][ T29] ? watchdog+0x1e1/0xf80 [ 1797.714302][ T29] kthread+0x2fa/0x390 [ 1797.718392][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1797.723451][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1797.728067][ T29] ret_from_fork+0x48/0x80 [ 1797.732513][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1797.737125][ T29] ret_from_fork_asm+0x11/0x20 [ 1797.741946][ T29] [ 1797.746087][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1797.751450][ C1] NMI backtrace for cpu 1 [ 1797.751459][ C1] CPU: 1 PID: 22095 Comm: kworker/1:1 Not tainted syzkaller #0 [ 1797.751473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1797.751482][ C1] Workqueue: events kfree_rcu_work [ 1797.751499][ C1] RIP: 0010:unwind_next_frame+0x1648/0x2970 [ 1797.751516][ C1] Code: 80 3c 28 00 48 8b 5c 24 60 74 08 48 89 df e8 4f f0 a3 00 48 8b 44 24 08 48 89 03 ba 10 00 00 00 48 89 ef 31 f6 e8 98 f1 a3 00 <48> 8b 5c 24 30 eb 4b e8 3c c8 4b 00 e9 a2 0b 00 00 e8 32 c8 4b 00 [ 1797.751528][ C1] RSP: 0018:ffffc9000434f4f8 EFLAGS: 00000246 [ 1797.751539][ C1] RAX: ffffc9000434f618 RBX: ffffc9000434f600 RCX: 0000000000000000 [ 1797.751550][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000434f628 [ 1797.751559][ C1] RBP: ffffc9000434f618 R08: ffffc9000434f627 R09: 0000000000000000 [ 1797.751569][ C1] R10: ffffc9000434f618 R11: fffff52000869ec5 R12: ffffc9000434f5c8 [ 1797.751580][ C1] R13: dffffc0000000000 R14: ffffffff81df357e R15: ffffffff8f1990bc [ 1797.751592][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1797.751603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1797.751613][ C1] CR2: 000020000015b030 CR3: 000000002cc8d000 CR4: 00000000003506e0 [ 1797.751626][ C1] Call Trace: [ 1797.751631][ C1] [ 1797.751641][ C1] ? kasan_set_track+0x4e/0x70 [ 1797.751660][ C1] ? kasan_set_track+0x4e/0x70 [ 1797.751674][ C1] ? stack_trace_save+0x100/0x100 [ 1797.751692][ C1] arch_stack_walk+0x144/0x190 [ 1797.751710][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1797.751731][ C1] stack_trace_save+0xaa/0x100 [ 1797.751749][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1797.751767][ C1] ? __stack_depot_save+0x1f/0x630 [ 1797.751800][ C1] kasan_set_track+0x4e/0x70 [ 1797.751815][ C1] ? kasan_set_track+0x4e/0x70 [ 1797.751854][ C1] ? kmem_cache_free_bulk+0x33b/0x450 [ 1797.751875][ C1] kasan_save_free_info+0x2e/0x50 [ 1797.751893][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1797.751911][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1797.751928][ C1] kmem_cache_free_bulk+0x33b/0x450 [ 1797.751949][ C1] ? kvfree_rcu_bulk+0x1eb/0x470 [ 1797.751967][ C1] kvfree_rcu_bulk+0x1eb/0x470 [ 1797.751981][ C1] ? kvfree_rcu_bulk+0x135/0x470 [ 1797.751996][ C1] kfree_rcu_work+0x344/0x3b0 [ 1797.752013][ C1] ? rcu_core+0x1770/0x1770 [ 1797.752028][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1797.752044][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1797.752063][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1797.752081][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1797.752118][ C1] ? assign_work+0x430/0x430 [ 1797.752138][ C1] ? assign_work+0x3d0/0x430 [ 1797.752158][ C1] worker_thread+0xa55/0xfc0 [ 1797.752175][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1797.752196][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1797.752209][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1797.752234][ C1] kthread+0x2fa/0x390 [ 1797.752247][ C1] ? pr_cont_work+0x560/0x560 [ 1797.752264][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1797.752278][ C1] ret_from_fork+0x48/0x80 [ 1797.752295][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1797.752308][ C1] ret_from_fork_asm+0x11/0x20 [ 1797.752335][ C1] [ 1797.895343][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1797.895380][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1797.895440][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1797.895474][ T29] Call Trace: [ 1797.895495][ T29] [ 1797.895536][ T29] dump_stack_lvl+0x18c/0x250 [ 1797.895648][ T29] ? show_regs_print_info+0x20/0x20 [ 1797.895725][ T29] ? load_image+0x400/0x400 [ 1797.895836][ T29] panic+0x2dc/0x730 [ 1797.895885][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1797.895963][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1797.896032][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1797.896151][ T29] watchdog+0xf7c/0xf80 [ 1797.896213][ T29] ? watchdog+0x1e1/0xf80 [ 1797.896299][ T29] kthread+0x2fa/0x390 [ 1797.896341][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1797.896402][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1797.896450][ T29] ret_from_fork+0x48/0x80 [ 1797.896507][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1797.896557][ T29] ret_from_fork_asm+0x11/0x20 [ 1797.896653][ T29] [ 1797.898270][ T29] Kernel Offset: disabled [ 1798.177794][ T29] Rebooting in 86400 seconds..