last executing test programs: 22m23.721790007s ago: executing program 4 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 22m22.447476286s ago: executing program 4 (id=523): timer_create(0x1, &(0x7f0000000180)={0x0, 0x7, 0x4, @thr={&(0x7f0000000440)="2d027c72a3f8ef4941d8360b9985c4d7ac158bea36c95e77397e5bd2c55a26856484240122ca8768a5f002bacf51b352fd16b11c9f7921a16d1eab3c7d4bee5a17204181fc2659d51cd1b35766fd9f891bd6c50766172c30eab891ece2747ad6a8d919e04e304ad574fb1f3210ad81e4df5b75e1d7b012ce4228bc7dd2a17d576caefe77ebbe1f316d8dee9dfac85c141fa299ba7e6b902427f6aac1bafa09e75561ef83415fe621903242f20f924382ee26169d437c2657920fcc04c5605449d5f1ee99dfcda864ac4fa372e5123bd3e449956684439cf3c26d1670fa3fe2f6b943f65f086578d40e", 0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0xca000, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x6, 0x1, 0x6, 0xe18c0e3ddf03640b}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x101200, 0x0) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f00000003c0)={0x6, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), 0x0}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f00000000c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7fff, "7fa000", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1, 0xd}) syz_clone3(&(0x7f00000003c0)={0x200000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x19}, &(0x7f0000000240)=""/102, 0x66, &(0x7f00000002c0)=""/135, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 22m11.207264425s ago: executing program 4 (id=540): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0x8}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) 22m6.846689617s ago: executing program 4 (id=543): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000055b6"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x800) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 21m59.975462349s ago: executing program 4 (id=558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) io_uring_setup(0x4c7d, 0x0) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 21m58.685673658s ago: executing program 4 (id=563): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000004c0)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0], 0x18}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 21m43.457580795s ago: executing program 32 (id=563): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000004c0)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0], 0x18}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 20m31.632131441s ago: executing program 2 (id=830): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080690786401010201fa1a9d5caf47b40000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000e79000), 0x0, 0x7) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/100, 0x64, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @empty, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x50) 20m29.371964542s ago: executing program 2 (id=833): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xc4}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x400c041) 20m28.97790755s ago: executing program 2 (id=837): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 20m28.323179794s ago: executing program 2 (id=838): syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 20m11.413374749s ago: executing program 33 (id=845): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) semget(0x0, 0x1cd984a8fc881fea, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) getpid() sched_setscheduler(r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 19m26.492664079s ago: executing program 1 (id=1034): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r3, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000e0000000000000800450600140063ee000489907864010102e0000001"], 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) 19m26.315097411s ago: executing program 1 (id=1036): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() kcmp(r1, r1, 0x4, r0, r0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, r6, 0x4000000, {0xffffffffffffffff, 0x3}, 0x75}, 0x1) 19m24.192066242s ago: executing program 1 (id=1042): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x870, 0x1, @ofdm={0x1, 0x7, 0x2, 0x13, 0x3, 0x3, 0x1}}) 19m23.782795488s ago: executing program 1 (id=1046): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r3, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000e0000000000000800450600140063ee000489907864010102e0000001"], 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) 19m23.680129383s ago: executing program 1 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000009141300"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) pipe2$watch_queue(&(0x7f0000000080), 0x80) pipe2$watch_queue(&(0x7f00000002c0), 0x80) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044011}, 0x20000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f0100000000000000020007241400000000042413"], 0x0) 19m20.315023954s ago: executing program 1 (id=1055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m4.637107257s ago: executing program 34 (id=1055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m44.876541132s ago: executing program 5 (id=3016): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m44.533399849s ago: executing program 5 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m43.071753694s ago: executing program 5 (id=3021): socket(0x200000000000011, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m29.83356332s ago: executing program 5 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000009141300"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) pipe2$watch_queue(&(0x7f0000000080), 0x80) pipe2$watch_queue(&(0x7f00000002c0), 0x80) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX]) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044011}, 0x20000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380), 0x0, 0x0, 0x14, 0x0, 0x0}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f0100000000000000020007241400000000042413"], 0x0) 7m29.815893711s ago: executing program 5 (id=3040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000006c00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x0, 0x2a, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x41}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xff, 0x1, 0xa8, {0xa, 0x25, 0x25, 0x10000, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x0, 0x6, {0xa, 0x25, 0x25, 0x4, 0x7, 0x4e}}}}}}}}]}}, &(0x7f0000007180)={0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r3, 0x0, 0x6f4000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x5, 0xe4, 0x40, 0x6b, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x18, 0x3, 0x3, 0x1}, {0x2000, 0x70000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8021001, 0x8, 0x5d, 0x2, 0x43, 0x9, 0xfa, 0x82, 0x7, 0xd}, {0x8080000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xbb, 0x7f, 0xc, 0xfa, 0xf7, 0x82}, {0x7000, 0x54000, 0xb, 0xa0, 0x9, 0x8, 0x1, 0x0, 0x8a, 0xfb, 0x4, 0xfd}, {0x54000, 0x41000, 0x0, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x25, 0x4, 0x1, 0xf2, 0x38, 0x5, 0x3, 0x7, 0x8}, {0x3000, 0xad}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x52024, 0xb, 0x1, 0x3000, [0x101, 0x3, 0x80000004, 0x40000000000ff]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000440)) 7m28.918945127s ago: executing program 5 (id=3047): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 7m13.154669815s ago: executing program 35 (id=3047): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5m9.335377358s ago: executing program 7 (id=3460): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_dev$video4linux(0x0, 0x0, 0x800) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m5.814729315s ago: executing program 7 (id=3476): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_create_resource$binfmt(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffff, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf252d0000005a084cca2a5c9a11a1bc516daeebe8f4fa1b55694365724754476c067727cf4e89326d5205e2f2f15ab666a3576dbdc9f693499623f5a5ce3e61e89d7ee27e06fb6314c35b9cc4c178b98d28384acf38ec0a6c3d027561a094eecb505a0bf56c265632d55c1350640feee52dcb1cab871041356aca45727ee8b955241cf19f7e54256035ce0e9f39b0f2328582818f36a1af3508f2558889956a4433c99b"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r6, 0x0, 0x500) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000180)}, {&(0x7f00000006c0)="01562db1d027d65d0ee6dce1905b044d7812c979bed95e7832eb61f4bc9643e0f6084cefff0acb09b3028b646bc8513fc0289afdb8e024c746c69c20bedc1961858af6f1a4d732205066012769afcab13859bf1b9524aeed391c4745ce27f553da682de74851a6a31a025656a93357842c0445c3231ba92ede7a6e00497f08e013e7c218da0196e479345958c235180bfc46425867de9cdfc65a", 0x9a}], 0x2}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="0085cd", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 5m4.352228564s ago: executing program 7 (id=3482): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x5, 0xe4, 0x40, 0x6b, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x18, 0x3, 0x3, 0x1}, {0x2000, 0x70000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8021001, 0x8, 0x5d, 0x2, 0x43, 0x9, 0xfa, 0x82, 0x7, 0xd}, {0x8080000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xbb, 0x7f, 0xc, 0xfa, 0xf7, 0x82}, {0x7000, 0x54000, 0xb, 0xa0, 0x9, 0x8, 0x1, 0x0, 0x8a, 0xfb, 0x4, 0xfd}, {0x54000, 0x41000, 0x0, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x25, 0x4, 0x1, 0xf2, 0x38, 0x5, 0x3, 0x7, 0x8}, {0x3000, 0xad}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x52024, 0xb, 0x1, 0x3000, [0x101, 0x3, 0x80000004, 0x40000000000ff]}) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000440)) 5m4.231291891s ago: executing program 7 (id=3483): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xc7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) 4m59.817630601s ago: executing program 7 (id=3495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0x0) 4m59.642768654s ago: executing program 7 (id=3497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r2, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r1, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r3) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) close_range(r1, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9ea72c2cdec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 4m43.46673687s ago: executing program 36 (id=3497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r2, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r1, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r3) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) close_range(r1, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007926000000000000bf670800000000005607000000ff07ad6706000002000000070200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f153bf0f5bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae625a14bddcf5b3e72b420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d6287805319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8098f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b39a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d57158dc308c08dc0a8dc99bdfeaff43eb24134e63a5efd08c6c2d51983265b60afcc5effad8f52ec152ab4ed39c2dbd04e3fefd9217a0246660301d5b7d7a9ea72c2cdec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 4.908399087s ago: executing program 9 (id=4554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x8000) 4.022882914s ago: executing program 9 (id=4557): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 3.883794422s ago: executing program 8 (id=4560): iopl(0x3) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 3.225201143s ago: executing program 0 (id=4571): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 3.136959574s ago: executing program 0 (id=4573): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 3.098025357s ago: executing program 9 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x44000) 2.96796175s ago: executing program 8 (id=4575): creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380), &(0x7f0000000040)=@ng={0x4, 0x5}, 0x2, 0x0) 2.863350244s ago: executing program 8 (id=4576): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="52d6dce12b71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="54020000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000003b00370008000300", @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x60000040) syz_open_pts(0xffffffffffffffff, 0x12200) 2.803641311s ago: executing program 9 (id=4577): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xac}}, 0x0) 2.094387456s ago: executing program 8 (id=4579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.915172525s ago: executing program 0 (id=4581): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1.856903266s ago: executing program 0 (id=4582): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000080)={0x0, 0x1, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.720348977s ago: executing program 9 (id=4584): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.646370866s ago: executing program 8 (id=4585): iopl(0x3) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 838.565808ms ago: executing program 6 (id=4587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 801.834127ms ago: executing program 3 (id=4588): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 638.968116ms ago: executing program 0 (id=4589): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="52d6dce12b71"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="54020000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000003b00370008000300", @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x60000040) syz_open_pts(0xffffffffffffffff, 0x12200) 607.46809ms ago: executing program 6 (id=4590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)='n', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xa, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 568.253266ms ago: executing program 3 (id=4591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff7fff}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 518.301669ms ago: executing program 6 (id=4592): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 478.979221ms ago: executing program 9 (id=4593): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008054) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) 411.531615ms ago: executing program 3 (id=4594): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0xa, 0x0) 377.712884ms ago: executing program 6 (id=4595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 261.589444ms ago: executing program 3 (id=4596): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x1, 0x3}, 0x18, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r0, 0xa) 224.539748ms ago: executing program 6 (id=4597): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000", 0xb3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 143.433972ms ago: executing program 3 (id=4598): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 112.588923ms ago: executing program 6 (id=4599): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x976be000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000001c0)='cpuset\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) close_range(r0, 0xffffffffffffffff, 0x0) 39.767104ms ago: executing program 3 (id=4600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 34.876907ms ago: executing program 8 (id=4601): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=4602): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d700006cff1948547e0000000000000000000000bb00000000000000000000000000000001"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) kernel console output (not intermixed with test programs): after dequeue, screwing up backlog [ 1269.820298][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.063116][T16981] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3340'. [ 1273.551844][T17006] netlink: 'syz.7.3349': attribute type 10 has an invalid length. [ 1273.712841][T17008] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1274.056538][ T5732] net_ratelimit: 18 callbacks suppressed [ 1274.056558][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.056825][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.056946][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.057174][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.057300][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.792596][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.792732][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.906626][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.906954][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.907131][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.592930][T17034] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 1276.652935][T17034] team0: Port device dummy0 added [ 1277.242430][T17039] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1279.290588][ T36] net_ratelimit: 16 callbacks suppressed [ 1279.290612][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.290753][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.291041][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.293662][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.750123][ T5586] IPVS: starting estimator thread 0... [ 1279.845243][T17069] IPVS: using max 8 ests per chain, 19200 per kthread [ 1279.972430][T17073] netlink: 'syz.0.3371': attribute type 10 has an invalid length. [ 1280.051167][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.366845][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.366994][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.367430][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.367573][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.040146][T17082] netlink: 'syz.7.3372': attribute type 12 has an invalid length. [ 1282.048572][T17078] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1282.048602][T17078] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1282.048688][T17078] vhci_hcd vhci_hcd.0: Device attached [ 1282.051000][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.312475][T17083] vhci_hcd: connection closed [ 1282.322410][ T1422] vhci_hcd vhci_hcd.7: stop threads [ 1282.322439][ T1422] vhci_hcd vhci_hcd.7: release socket [ 1282.322481][ T1422] vhci_hcd vhci_hcd.7: disconnect device [ 1284.134820][T17113] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3386'. [ 1285.803483][ T5586] net_ratelimit: 241 callbacks suppressed [ 1285.803502][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.803656][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.803817][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.804044][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.804156][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.040751][T17120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.073516][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.073651][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.073874][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.074035][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.915291][T17146] Invalid option length (1151) for dns_resolver key [ 1291.529800][ T36] net_ratelimit: 27 callbacks suppressed [ 1291.529823][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.530010][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.530168][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.576141][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.576311][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.616455][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.616603][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.616930][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.617077][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.617211][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.800081][T17200] syz.3.3413 (17200): drop_caches: 2 [ 1296.785756][ T5605] net_ratelimit: 19 callbacks suppressed [ 1296.785776][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.786588][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.786727][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.787002][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.085718][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.085978][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.086135][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.086255][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.086401][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.166458][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.697099][ T5732] IPVS: starting estimator thread 0... [ 1297.796128][T17234] IPVS: using max 7 ests per chain, 16800 per kthread [ 1298.002504][T17236] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1298.123608][T17238] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3423'. [ 1298.123783][T17238] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3423'. [ 1300.166220][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.166706][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.806042][T17263] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1301.061037][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1302.026921][ T5586] net_ratelimit: 15 callbacks suppressed [ 1302.026943][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.027092][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.027375][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.027578][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.027700][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.414881][T17284] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3437'. [ 1302.974842][T17296] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3439'. [ 1302.975006][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3439'. [ 1304.295582][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.295932][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.296143][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.296278][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.296388][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.895895][T17309] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3443'. [ 1307.303311][ T5586] net_ratelimit: 11 callbacks suppressed [ 1307.303333][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.303692][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.303922][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.304100][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.304224][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.468289][T17240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.571771][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.571994][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.572130][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.572379][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.549305][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 1308.599303][T17353] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1310.404090][T17375] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3467'. [ 1310.900698][T17393] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3473'. [ 1311.736886][T17399] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1312.320279][T17405] net_ratelimit: 23 callbacks suppressed [ 1312.320302][T17405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.634292][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.634505][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.634660][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.634782][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.634922][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.573720][ T2162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.646211][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.646404][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.646546][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.188121][T17433] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1314.485125][ T163] bridge_slave_1: left allmulticast mode [ 1314.485159][ T163] bridge_slave_1: left promiscuous mode [ 1314.490380][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.570928][ T163] bridge_slave_0: left allmulticast mode [ 1314.570957][ T163] bridge_slave_0: left promiscuous mode [ 1314.571169][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.126112][ T163] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1317.343036][T12997] net_ratelimit: 19 callbacks suppressed [ 1317.343057][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.368092][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.413185][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.440927][ T163] bond0 (unregistering): Released all slaves [ 1317.453423][ T163] bond1 (unregistering): Released all slaves [ 1317.474653][ T163] bond2 (unregistering): Released all slaves [ 1317.485482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.495668][ T163] bond3 (unregistering): Released all slaves [ 1317.538468][ T163] bond4 (unregistering): Released all slaves [ 1317.575802][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.576114][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.576257][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.576489][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.854123][T17455] netlink: 'syz.3.3491': attribute type 2 has an invalid length. [ 1318.366424][ T163] jý: left promiscuous mode [ 1318.610966][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.611271][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.611424][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.611551][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.351554][T17477] netlink: 'syz.0.3500': attribute type 2 has an invalid length. [ 1320.994856][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803990f400: rx timeout, send abort [ 1320.997825][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803990f400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1321.670342][T17494] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1322.582928][T17503] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1322.616725][ T5586] net_ratelimit: 14 callbacks suppressed [ 1322.616741][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.616915][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.623197][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.625596][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.461334][T17508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1323.461497][T17508] overlayfs: failed to set xattr on upper [ 1323.461627][T17508] overlayfs: ...falling back to redirect_dir=nofollow. [ 1323.461665][T17508] overlayfs: ...falling back to index=off. [ 1323.461702][T17508] overlayfs: ...falling back to uuid=null. [ 1323.818667][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.818879][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.819017][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.819226][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.879182][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.879346][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.212715][T17522] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1327.212752][T17522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1327.212768][T17522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1327.245473][ T37] audit: type=1800 audit(1779047001.002:448): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3515" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1327.779743][T17540] ieee802154 phy0 wpan0: encryption failed: -22 [ 1327.965934][ T5732] net_ratelimit: 20 callbacks suppressed [ 1327.965962][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.966091][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.966238][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.966569][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.113586][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.114778][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.121180][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.144091][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.966731][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.966887][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.039657][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1331.094889][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1331.103198][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1331.131184][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1331.133751][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1331.628687][T17581] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3534'. [ 1332.332909][ T163] hsr_slave_0: left promiscuous mode [ 1332.376572][ T163] hsr_slave_1: left promiscuous mode [ 1332.377806][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.377835][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.492810][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.492840][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.563335][T17588] nbd: must specify a size in bytes for the device [ 1332.618036][ T163] veth1_macvtap: left promiscuous mode [ 1332.618138][ T163] veth0_macvtap: left promiscuous mode [ 1332.670532][ T163] veth1_vlan: left promiscuous mode [ 1332.670725][ T163] veth0_vlan: left promiscuous mode [ 1334.491303][ T5608] Bluetooth: hci5: command tx timeout [ 1334.531126][ T31] net_ratelimit: 16 callbacks suppressed [ 1334.531149][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.531277][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.531425][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.533258][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.708481][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.708648][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.708821][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.709419][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.112818][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.113200][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.525308][ T5608] Bluetooth: hci5: command tx timeout [ 1336.653416][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1336.697630][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1336.713423][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1336.728805][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1336.729544][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.915780][ T163] team0 (unregistering): Port device team_slave_1 removed [ 1337.964327][ T163] team0 (unregistering): Port device team_slave_0 removed [ 1338.122677][ T163] team0 (unregistering): Port device dummy0 removed [ 1338.605230][ T5611] Bluetooth: hci5: command tx timeout [ 1339.013007][ T5611] Bluetooth: hci2: command tx timeout [ 1339.421098][T17633] nbd: must specify a size in bytes for the device [ 1340.305467][ T5732] net_ratelimit: 20 callbacks suppressed [ 1340.305518][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.314114][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.316457][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.317579][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.685438][ T5611] Bluetooth: hci5: command tx timeout [ 1340.841650][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.841873][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.842460][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.926255][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.085155][ T5611] Bluetooth: hci2: command tx timeout [ 1341.327321][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.327478][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.165199][ T5611] Bluetooth: hci2: command tx timeout [ 1343.167042][T17652] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3552'. [ 1344.396688][T17673] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3558'. [ 1344.431296][T17570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.431457][T17570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.432395][T17570] bridge_slave_0: entered allmulticast mode [ 1344.468017][T17570] bridge_slave_0: entered promiscuous mode [ 1344.494712][T17570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.494843][T17570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.505711][T17570] bridge_slave_1: entered allmulticast mode [ 1344.712257][T17570] bridge_slave_1: entered promiscuous mode [ 1345.151341][T17570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.167753][T17679] ieee802154 phy0 wpan0: encryption failed: -22 [ 1345.184220][T17570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.247132][ T5611] Bluetooth: hci2: command tx timeout [ 1345.387366][T17570] team0: Port device team_slave_0 added [ 1345.403494][T17570] team0: Port device team_slave_1 added [ 1345.757737][T16547] net_ratelimit: 22 callbacks suppressed [ 1345.757761][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.757899][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.758208][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.806012][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.337084][T17691] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3563'. [ 1346.674832][T17570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.674846][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.674867][T17570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.763139][T17570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.763159][T17570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.763190][T17570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.767112][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.767504][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.767624][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.845313][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.006027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.006242][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.566890][T17570] hsr_slave_0: entered promiscuous mode [ 1347.573104][T17570] hsr_slave_1: entered promiscuous mode [ 1347.583972][T17570] debugfs: 'hsr0' already exists in 'hsr' [ 1347.584045][T17570] Cannot create hsr debugfs directory [ 1347.589469][T17598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.590335][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.593335][T17598] bridge_slave_0: entered allmulticast mode [ 1347.613801][T17598] bridge_slave_0: entered promiscuous mode [ 1347.642642][T17701] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3565'. [ 1348.225999][T17705] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3567'. [ 1350.338762][T17598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.338972][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.339236][T17598] bridge_slave_1: entered allmulticast mode [ 1350.343242][T17598] bridge_slave_1: entered promiscuous mode [ 1350.563592][ T163] IPVS: stop unused estimator thread 0... [ 1350.696620][T17598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.566244][ T31] net_ratelimit: 22 callbacks suppressed [ 1351.566267][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.566703][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.566829][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.570455][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.573637][ T1410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.574806][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.724928][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.791445][T17598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.904665][T17724] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3572'. [ 1351.994624][T17598] team0: Port device team_slave_0 added [ 1352.027761][T17598] team0: Port device team_slave_1 added [ 1352.133023][T17598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.133040][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.133071][T17598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.245714][T17598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.245733][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.245765][T17598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.486178][T17598] hsr_slave_0: entered promiscuous mode [ 1352.490864][T17598] hsr_slave_1: entered promiscuous mode [ 1352.491897][T17598] debugfs: 'hsr0' already exists in 'hsr' [ 1352.491924][T17598] Cannot create hsr debugfs directory [ 1352.606518][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.606794][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.606935][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.695358][T17735] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3577'. [ 1353.970351][T17752] syz.0.3580 (17752): /proc/17751/oom_adj is deprecated, please use /proc/17751/oom_score_adj instead. [ 1354.103795][T17754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1355.018825][T17570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.018861][T17570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55041 - 0 [ 1355.018889][T17570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 59649 - 0 [ 1355.018916][T17570] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 1355.575664][T17763] netlink: 'syz.3.3585': attribute type 2 has an invalid length. [ 1355.659449][T17766] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3586'. [ 1356.157916][T17570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.157958][T17570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55041 - 0 [ 1356.157979][T17570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 59649 - 0 [ 1356.158000][T17570] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 1356.848304][ T5586] net_ratelimit: 23 callbacks suppressed [ 1356.848321][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.848455][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.848917][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.925332][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.896127][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.896260][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.896361][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.969092][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.945605][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.945783][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.620472][T17570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.620511][T17570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55041 - 0 [ 1359.620542][T17570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 59649 - 0 [ 1359.620572][T17570] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 1361.500488][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.500695][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.813640][T17570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.813681][T17570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55041 - 0 [ 1361.813711][T17570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 59649 - 0 [ 1361.813741][T17570] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 1362.046678][ T5732] net_ratelimit: 15 callbacks suppressed [ 1362.046698][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.046845][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.046979][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.047095][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.208455][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.208689][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.208990][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.209115][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.086449][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.086586][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.047936][T17841] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3599'. [ 1367.287635][T17852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1367.287668][T17852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1367.287802][T17852] vhci_hcd vhci_hcd.0: Device attached [ 1367.413145][T17853] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1367.416238][ T5906] vhci_hcd vhci_hcd.0: stop threads [ 1367.416343][ T5906] vhci_hcd vhci_hcd.0: release socket [ 1367.416439][ T5906] vhci_hcd vhci_hcd.0: disconnect device [ 1367.646656][T16547] net_ratelimit: 20 callbacks suppressed [ 1367.646678][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.716360][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.716552][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.716702][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.704507][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.767518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.767696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.768170][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.768321][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.780604][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.006716][T17867] gfs2: gfs2 mount does not exist [ 1371.003620][T17598] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1371.061073][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1371.082834][T17598] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1371.154024][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1371.179302][T17598] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1371.630493][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1372.432213][T17598] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1372.658084][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1372.772139][ T31] net_ratelimit: 16 callbacks suppressed [ 1372.772163][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.772733][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.772855][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.772955][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.814467][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.824046][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.841400][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.219296][T17570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1374.415081][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.415957][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.416356][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.625401][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1374.642877][T17570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1374.827259][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1374.850074][T17570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1374.922533][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1374.939275][T17570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1374.987560][T17570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1376.677422][T17598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.903845][T17598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.967131][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.967285][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.198670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.198826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.483624][T17570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.794170][T17570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.887300][T12997] net_ratelimit: 14 callbacks suppressed [ 1377.887322][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.887501][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.887817][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.887926][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.947423][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.947560][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.092808][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.092947][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.136110][T17239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.366417][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.384704][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.384794][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.455531][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.188851][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.122646][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.699339][T17570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.076192][ T5732] net_ratelimit: 12 callbacks suppressed [ 1383.076216][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.076353][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.076468][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.079650][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.437826][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.750789][T17598] veth0_vlan: entered promiscuous mode [ 1383.853476][T17598] veth1_vlan: entered promiscuous mode [ 1383.892886][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.965593][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.965745][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.970149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.970555][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.144310][T17598] veth0_macvtap: entered promiscuous mode [ 1384.188003][T17598] veth1_macvtap: entered promiscuous mode [ 1384.331479][T17598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.391815][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3659'. [ 1384.408902][T17598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.483422][ T99] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.499007][T17570] veth0_vlan: entered promiscuous mode [ 1384.501394][ T99] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.519433][ T99] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.527591][ T169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.610879][T17570] veth1_vlan: entered promiscuous mode [ 1385.120621][T18040] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3661'. [ 1387.735659][T17570] veth0_macvtap: entered promiscuous mode [ 1387.981692][T17570] veth1_macvtap: entered promiscuous mode [ 1388.195221][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.195243][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.276217][ T36] net_ratelimit: 17 callbacks suppressed [ 1388.276238][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.276323][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.276404][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.276478][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.441541][T17297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.651913][T17570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.676697][T17570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.930970][T17240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.357826][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.359343][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.360464][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.361606][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.887409][T17240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.130617][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.227972][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.231561][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.269400][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.269425][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.033579][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1391.075893][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1391.081723][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1391.091085][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1391.127615][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1391.884587][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3675'. [ 1393.327801][ T5608] Bluetooth: hci6: command tx timeout [ 1394.938976][ T5732] net_ratelimit: 20 callbacks suppressed [ 1394.939007][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.940386][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.941661][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.946116][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.405528][ T5608] Bluetooth: hci6: command tx timeout [ 1395.406827][T17239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.976022][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.976210][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.976574][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.976717][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.292580][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.332224][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1397.796923][ T5608] Bluetooth: hci6: command tx timeout [ 1399.888226][ T5611] Bluetooth: hci6: command tx timeout [ 1400.215326][T18217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1401.074047][ T5586] net_ratelimit: 20 callbacks suppressed [ 1401.074068][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.074215][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.074423][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.074537][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.713361][ T1461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.131419][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.131606][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.131832][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.131960][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.365816][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.923321][ T5870] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.334612][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3720'. [ 1404.922280][T18286] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3729'. [ 1405.124856][ T5870] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.255384][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1405.348582][T18284] syz_tun: entered promiscuous mode [ 1405.452352][T18284] vlan2: entered promiscuous mode [ 1405.466075][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.466129][ T31] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1405.466157][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.556181][ T31] usb 10-1: config 0 descriptor?? [ 1405.600466][ T31] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1406.101021][T18315] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3741'. [ 1406.325559][ T5870] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.376171][ T5732] net_ratelimit: 20 callbacks suppressed [ 1406.376192][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.376367][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.376524][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.376751][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.766008][T17297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.416483][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.416818][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.417097][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.417254][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.163890][ T5870] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.267924][T14604] usb 10-1: USB disconnect, device number 2 [ 1408.489279][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.813369][T18368] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3751'. [ 1409.617197][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.617332][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.617598][T18081] bridge_slave_0: entered allmulticast mode [ 1409.653938][T18081] bridge_slave_0: entered promiscuous mode [ 1409.749225][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.749356][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.749645][T18081] bridge_slave_1: entered allmulticast mode [ 1409.782761][T18081] bridge_slave_1: entered promiscuous mode [ 1410.044359][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.066710][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.156962][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1410.210345][T18081] team0: Port device team_slave_0 added [ 1410.213593][T18081] team0: Port device team_slave_1 added [ 1410.320127][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1410.320177][ T10] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1410.320202][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.366994][ T10] usb 10-1: config 0 descriptor?? [ 1410.428450][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1410.583176][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.583195][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.583242][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.679963][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.679977][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.680000][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.993684][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1411.384960][T18081] hsr_slave_0: entered promiscuous mode [ 1411.386920][T18081] hsr_slave_1: entered promiscuous mode [ 1411.388663][T18081] debugfs: 'hsr0' already exists in 'hsr' [ 1411.388690][T18081] Cannot create hsr debugfs directory [ 1411.565497][ T10] net_ratelimit: 16 callbacks suppressed [ 1411.565520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.565921][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.566143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.566297][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.567257][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.572056][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.632866][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.657840][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.658289][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.658427][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.755841][ T5870] bridge_slave_1: left allmulticast mode [ 1411.755875][ T5870] bridge_slave_1: left promiscuous mode [ 1411.756137][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.830949][T18421] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1411.977645][ T5870] bridge_slave_0: left allmulticast mode [ 1411.977679][ T5870] bridge_slave_0: left promiscuous mode [ 1411.977902][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.250207][T14604] usb 10-1: USB disconnect, device number 3 [ 1413.986232][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.066525][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.137007][ T5870] bond0 (unregistering): Released all slaves [ 1416.668536][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3788'. [ 1416.938208][ T5586] net_ratelimit: 23 callbacks suppressed [ 1416.938231][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.938379][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.938874][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.939000][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.127810][ T5870] hsr_slave_0: left promiscuous mode [ 1417.191892][ T5870] hsr_slave_1: left promiscuous mode [ 1417.193022][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.193049][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.441362][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.441639][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.645622][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.646362][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.646661][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.823770][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.925637][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.974666][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.211696][ T5870] veth1_macvtap: left promiscuous mode [ 1418.211807][ T5870] veth0_macvtap: left promiscuous mode [ 1418.212067][ T5870] veth1_vlan: left promiscuous mode [ 1418.212242][ T5870] veth0_vlan: left promiscuous mode [ 1418.824819][T18520] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3800'. [ 1420.182386][T18550] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3811'. [ 1421.518209][T18578] NILFS (nullb0): couldn't find nilfs on the device [ 1421.870081][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 1421.935251][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 1422.136545][ T5586] net_ratelimit: 20 callbacks suppressed [ 1422.136568][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.136716][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.136861][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.137205][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.434132][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.434209][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.520800][ T1410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.592187][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.592594][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.592828][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.592971][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.632580][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.957037][T18592] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3824'. [ 1426.643982][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1426.813444][T18627] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3838'. [ 1427.166904][T14604] net_ratelimit: 21 callbacks suppressed [ 1427.166925][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.655895][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.809457][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.809762][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.810035][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.868925][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.880793][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.881104][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.886364][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.455486][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.923379][ T5586] IPVS: starting estimator thread 0... [ 1430.206697][T18669] IPVS: using max 11 ests per chain, 26400 per kthread [ 1432.521234][ T5732] net_ratelimit: 13 callbacks suppressed [ 1432.521256][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.521635][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.527907][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.529925][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.884211][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.884542][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.025275][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.569676][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.581358][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.639997][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.785766][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1435.158231][T18716] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1436.514310][T18726] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3867'. [ 1437.403241][T18726] bond0: (slave bond_slave_0): Releasing backup interface [ 1438.777449][ T5704] net_ratelimit: 20 callbacks suppressed [ 1438.777471][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.975354][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.975590][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.975713][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.325991][T18726] bond_slave_0: entered promiscuous mode [ 1439.326020][T18726] bond_slave_0: entered allmulticast mode [ 1439.371270][ T5608] Bluetooth: hci4: unexpected event for opcode 0x000c [ 1439.427600][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.427792][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.444519][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.451647][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.467979][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.489044][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.299136][T18774] netlink: 'syz.8.3880': attribute type 6 has an invalid length. [ 1440.299173][T18774] netlink: 232 bytes leftover after parsing attributes in process `syz.8.3880'. [ 1440.693272][T18776] netlink: 5252 bytes leftover after parsing attributes in process `syz.8.3880'. [ 1441.206002][T14604] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1441.380817][T14604] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.380870][T14604] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1441.380895][T14604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.443212][T14604] usb 10-1: config 0 descriptor?? [ 1441.497648][T14604] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1442.138325][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3885'. [ 1442.138363][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3885'. [ 1443.970883][ T5586] net_ratelimit: 20 callbacks suppressed [ 1443.970904][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.971116][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.971188][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.466860][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.470813][ T5732] usb 10-1: USB disconnect, device number 4 [ 1444.685701][T18823] lo speed is unknown, defaulting to 1000 [ 1444.685796][T18823] lo speed is unknown, defaulting to 1000 [ 1444.687988][T18823] lo speed is unknown, defaulting to 1000 [ 1444.691331][T18823] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1444.691396][T18823] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1444.691464][T18823] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1444.698987][T18823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1444.858323][T18823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1445.366476][T18823] lo speed is unknown, defaulting to 1000 [ 1445.369426][T18823] lo speed is unknown, defaulting to 1000 [ 1445.371834][T18823] lo speed is unknown, defaulting to 1000 [ 1445.373970][T18823] lo speed is unknown, defaulting to 1000 [ 1445.377223][T18823] lo speed is unknown, defaulting to 1000 [ 1445.377880][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.378018][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.378167][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.379870][T18823] lo speed is unknown, defaulting to 1000 [ 1445.382610][T18823] lo speed is unknown, defaulting to 1000 [ 1445.387054][T18823] lo speed is unknown, defaulting to 1000 [ 1445.389250][T18823] lo speed is unknown, defaulting to 1000 [ 1445.617243][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.645175][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 1445.960912][T18830] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3893'. [ 1446.369209][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.369425][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.744380][T18840] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3896'. [ 1446.744552][T18840] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3896'. [ 1449.113579][T18081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1449.294616][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1449.317399][T18081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.386372][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1449.406994][T16119] net_ratelimit: 16 callbacks suppressed [ 1449.407038][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.407370][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.419499][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.420287][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.843016][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.843193][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.518980][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.519429][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.519646][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.721419][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.543403][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1452.630602][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1452.643868][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1452.659419][T18929] futex_wake_op: syz.9.3917 tries to shift op by 32; fix this program [ 1452.679247][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1452.683238][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1452.894308][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3917'. [ 1453.260715][ T5871] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.260753][ T5871] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1453.366915][T18081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1453.442388][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1454.085956][T18951] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 1454.379698][T18951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1454.450225][ T12] net_ratelimit: 13 callbacks suppressed [ 1454.450244][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.535421][T12997] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1454.726109][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.726312][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.726722][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.775697][T12997] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.775741][T12997] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1454.775763][T12997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.818596][T12997] usb 10-1: config 0 descriptor?? [ 1454.849068][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.851602][T12997] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1454.852785][ T5611] Bluetooth: hci1: command tx timeout [ 1454.899324][T18960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1454.919071][ T5871] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.919098][ T5871] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1455.485850][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.486014][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.594688][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.594856][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.871445][T18982] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3926'. [ 1455.871615][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3926'. [ 1455.895562][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.925470][ T5611] Bluetooth: hci1: command tx timeout [ 1456.989638][ T5611] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 1457.426553][T14604] usb 10-1: USB disconnect, device number 5 [ 1457.605175][ T5871] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.605216][ T5871] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1459.016658][T19035] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3940'. [ 1459.016699][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3940'. [ 1459.566389][ T5611] Bluetooth: hci1: command tx timeout [ 1459.625994][ T5732] net_ratelimit: 15 callbacks suppressed [ 1459.626060][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.962159][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.962197][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.055859][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.056034][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.119125][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.154593][ T5871] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.154621][ T5871] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1460.459281][T19043] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3941'. [ 1460.822142][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.855146][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 1460.925500][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.015485][ T5611] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1461.015744][ T5611] Bluetooth: hci3: Injecting HCI hardware error event [ 1461.038848][ T5611] Bluetooth: hci3: hardware error 0x00 [ 1461.088874][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.089071][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.647172][ T5608] Bluetooth: hci1: command tx timeout [ 1462.528882][T18926] lo speed is unknown, defaulting to 1000 [ 1463.609828][ T5611] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1464.178456][T19090] 9p: Bad value for 'wfdno' [ 1465.255636][ T5586] net_ratelimit: 14 callbacks suppressed [ 1465.255654][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.255846][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.256422][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.256513][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.459226][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.459409][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.815700][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.853010][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.235163][T12997] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1466.294929][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.303327][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.327142][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1466.452431][T12997] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.452494][T12997] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1466.452518][T12997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.656831][T12997] usb 10-1: config 0 descriptor?? [ 1466.703470][T12997] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1468.051986][T19126] netlink: 'syz.8.3962': attribute type 1 has an invalid length. [ 1468.153606][T19126] bond1: (slave geneve2): making interface the new active one [ 1468.157262][T19126] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1468.174078][ T1461] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1468.175885][ T56] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1468.177047][T17297] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1468.177676][T17297] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1468.687146][ T5871] bridge_slave_1: left allmulticast mode [ 1468.687183][ T5871] bridge_slave_1: left promiscuous mode [ 1468.687467][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.841203][ T5871] bridge_slave_0: left allmulticast mode [ 1468.841242][ T5871] bridge_slave_0: left promiscuous mode [ 1468.841529][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.286550][T13996] net_ratelimit: 16 callbacks suppressed [ 1470.286567][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.287888][T16119] usb 10-1: USB disconnect, device number 6 [ 1470.685506][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.166872][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.169077][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.195212][ T4980] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1471.345137][ T4980] usb 10-1: Using ep0 maxpacket: 16 [ 1471.347801][ T4980] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.347826][ T4980] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.349945][ T4980] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1471.349965][ T4980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.349979][ T4980] usb 10-1: Product: syz [ 1471.349990][ T4980] usb 10-1: Manufacturer: syz [ 1471.350000][ T4980] usb 10-1: SerialNumber: syz [ 1471.486643][ T4980] usb 10-1: 0:2 : does not exist [ 1471.528401][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.568792][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.569122][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.688636][ T4980] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1472.225253][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.225441][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.240723][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.626383][T19187] netlink: 'syz.9.3981': attribute type 2 has an invalid length. [ 1472.676164][ T4980] usb 10-1: USB disconnect, device number 7 [ 1473.023575][T19106] udevd[19106]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.791451][ T5871] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1474.053820][ T5871] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1474.455608][T13996] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1475.317661][T16119] net_ratelimit: 10 callbacks suppressed [ 1475.317676][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.317948][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.385874][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.407306][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.407692][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.459183][T13996] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1475.459234][T13996] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1475.459265][T13996] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1475.459301][T13996] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1475.459326][T13996] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.465992][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.542465][T13996] usb 10-1: config 0 descriptor?? [ 1475.550218][ T5871] bond0 (unregistering): Released all slaves [ 1475.565786][ T5871] bond1 (unregistering): Released all slaves [ 1475.578818][ T5871] bond2 (unregistering): Released all slaves [ 1475.594459][ T5871] bond3 (unregistering): Released all slaves [ 1475.611649][ T5871] bond4 (unregistering): Released all slaves [ 1475.629250][ T5871] bond5 (unregistering): Released all slaves [ 1476.203424][T19218] netlink: 'syz.0.3993': attribute type 2 has an invalid length. [ 1477.569854][T19224] bridge1: entered promiscuous mode [ 1477.569883][T19224] bridge1: entered allmulticast mode [ 1477.995961][T17297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.027244][T13996] hid_parser_main: 30 callbacks suppressed [ 1478.027359][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027396][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027423][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027449][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027475][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027501][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027527][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027554][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027580][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.027618][T13996] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0 [ 1478.209366][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.209574][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.209802][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.273527][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.319416][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.352326][T13996] ryos 0003:1E7D:3232.000F: hidraw0: USB HID v80.81 Device [HID 1e7d:3232] on usb-dummy_hcd.9-1/input0 [ 1478.390098][T13996] usb 10-1: USB disconnect, device number 8 [ 1478.589847][T19229] fido_id[19229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1479.019038][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 1479.023360][T19233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.066402][T13996] net_ratelimit: 6 callbacks suppressed [ 1482.066425][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.066884][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.071424][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.201120][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.201622][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.201775][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.358217][T19233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.837189][T19262] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1483.224332][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.224510][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.227475][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.637268][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.640964][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.641030][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.358862][T19297] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1487.727065][ T5586] net_ratelimit: 11 callbacks suppressed [ 1487.727089][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.727279][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.732444][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.295289][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.295700][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.296144][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.771097][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.771635][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.771788][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.997381][ T37] audit: type=1800 audit(2000000034.670:449): pid=19318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4024" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1489.157811][ T5586] hid-generic 0005:0005:5508.0010: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1489.795873][T18926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.795982][T18926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.796260][T18926] bridge_slave_0: entered allmulticast mode [ 1489.804883][T19341] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4029'. [ 1489.805776][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.870378][T18926] bridge_slave_0: entered promiscuous mode [ 1489.904507][T18926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.912897][T18926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.913177][T18926] bridge_slave_1: entered allmulticast mode [ 1490.087920][T18926] bridge_slave_1: entered promiscuous mode [ 1490.141242][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1491.380695][ T5871] hsr_slave_0: left promiscuous mode [ 1491.425271][ T5871] hsr_slave_1: left promiscuous mode [ 1491.433389][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.433421][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.469224][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.469244][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.682906][ T5871] veth1_macvtap: left promiscuous mode [ 1491.683010][ T5871] veth0_macvtap: left promiscuous mode [ 1491.683260][ T5871] veth1_vlan: left promiscuous mode [ 1491.683445][ T5871] veth0_vlan: left promiscuous mode [ 1492.796078][ C1] net_ratelimit: 11 callbacks suppressed [ 1492.796100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.005853][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.006057][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.006518][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.044635][T19374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1494.131392][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.131972][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.132106][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.368581][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.368780][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.368845][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.569485][T19408] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1496.701913][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1496.702916][T19415] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1496.738867][ T37] audit: type=1800 audit(2000000042.650:450): pid=19417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.4056" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1497.235929][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1497.297364][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1497.372717][T12243] smc: removing ib device syz1 [ 1497.674046][ T5871] team0 (unregistering): Port device dummy0 removed [ 1497.806832][ T5586] net_ratelimit: 9 callbacks suppressed [ 1497.806854][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.807244][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.807743][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.851351][T18926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.872939][T19408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.908557][T18926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.167433][T18926] team0: Port device team_slave_0 added [ 1498.172926][T18926] team0: Port device team_slave_1 added [ 1498.654451][T18926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.654488][T18926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.654519][T18926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.657581][T12243] smbdirect: ib_dev[syz1] removed [ 1498.663315][T18926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.663332][T18926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.663364][T18926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.801004][T19441] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1498.848359][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.848828][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.848968][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.053720][ T37] audit: type=1800 audit(2000000044.950:451): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4067" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1499.586950][T18926] hsr_slave_0: entered promiscuous mode [ 1499.593158][T18926] hsr_slave_1: entered promiscuous mode [ 1499.767886][T18926] debugfs: 'hsr0' already exists in 'hsr' [ 1499.767913][T18926] Cannot create hsr debugfs directory [ 1499.911135][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.911307][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.911537][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.411155][T19471] fuse: Bad value for 'fd' [ 1500.427974][ T5611] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1500.464693][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.635795][T19474] fuse: Bad value for 'fd' [ 1502.809496][T19488] ieee802154 phy0 wpan0: encryption failed: -22 [ 1502.925921][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1503.326568][T13996] net_ratelimit: 5 callbacks suppressed [ 1503.326589][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.326751][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.326911][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.481459][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1503.496537][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.496766][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.496901][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.297453][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.297601][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.297747][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.235973][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.390990][ T4980] net_ratelimit: 2 callbacks suppressed [ 1508.391011][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.391182][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.391324][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.242624][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.242794][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.242921][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.293651][ T2162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.300375][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.441380][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.893390][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4096'. [ 1510.934670][T12997] hid-generic 0005:0005:5508.0011: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1511.263592][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.464987][T19552] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.486186][ T5586] net_ratelimit: 8 callbacks suppressed [ 1513.486208][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.486747][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.939705][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1514.028626][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.056287][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1514.060842][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1514.079651][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1514.099865][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1514.446149][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.446369][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.446856][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.719655][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.720017][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.720133][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.931573][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4107'. [ 1515.991309][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1516.480903][ T5608] Bluetooth: hci5: command tx timeout [ 1516.781301][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.715501][T14604] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1517.878979][T14604] usb 10-1: Using ep0 maxpacket: 32 [ 1517.921083][T14604] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1517.935205][T14604] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7 [ 1517.935257][T14604] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 1517.971262][T14604] usb 10-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 1517.971286][T14604] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.971302][T14604] usb 10-1: Product: syz [ 1517.971314][T14604] usb 10-1: Manufacturer: syz [ 1517.971325][T14604] usb 10-1: SerialNumber: syz [ 1518.525130][ T5611] Bluetooth: hci5: command tx timeout [ 1518.846467][ T5704] net_ratelimit: 8 callbacks suppressed [ 1518.846485][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.925580][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.926349][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.183895][T14604] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1519.199487][T14604] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1519.457301][T14604] usb 10-1: USB disconnect, device number 9 [ 1519.887287][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.965654][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.965811][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.527081][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.527248][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.527503][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.605096][ T5611] Bluetooth: hci5: command tx timeout [ 1520.780630][T19669] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4127'. [ 1520.925493][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.764693][ T5871] IPVS: stop unused estimator thread 0... [ 1522.685199][ T5611] Bluetooth: hci5: command tx timeout [ 1523.023774][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1523.087453][T19587] lo speed is unknown, defaulting to 1000 [ 1523.087813][T19710] syzkaller0: entered promiscuous mode [ 1523.087837][T19710] syzkaller0: entered allmulticast mode [ 1524.048328][ T36] net_ratelimit: 11 callbacks suppressed [ 1524.048349][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.512474][T19733] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4144'. [ 1525.787003][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.787286][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.853763][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.158131][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1526.606723][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.606794][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.607620][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.680990][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.681882][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.682623][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.865323][ T5871] bridge_slave_1: left allmulticast mode [ 1526.865357][ T5871] bridge_slave_1: left promiscuous mode [ 1526.865729][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.551087][ T5871] bridge_slave_0: left allmulticast mode [ 1527.551125][ T5871] bridge_slave_0: left promiscuous mode [ 1527.551416][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.606169][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.726032][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.874051][ T5871] bond0 (unregistering): Released all slaves [ 1528.985175][T19751] tipc: Started in network mode [ 1528.985201][T19751] tipc: Node identity 4, cluster identity 4711 [ 1528.985216][T19751] tipc: Node number set to 4 [ 1529.179097][T16547] net_ratelimit: 8 callbacks suppressed [ 1529.179117][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.102325][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.104265][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.135146][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.148769][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.150530][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.267089][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.181552][ T5871] hsr_slave_0: left promiscuous mode [ 1531.189197][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.189377][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.269503][ T5871] hsr_slave_1: left promiscuous mode [ 1531.270596][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.316805][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.325935][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.322348][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1533.401011][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1533.785470][T19834] syzkaller0: entered promiscuous mode [ 1533.785491][T19834] syzkaller0: entered allmulticast mode [ 1534.818181][T19587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.818388][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.818608][T19587] bridge_slave_0: entered allmulticast mode [ 1534.821312][T19587] bridge_slave_0: entered promiscuous mode [ 1534.830032][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 1534.845847][T16547] net_ratelimit: 9 callbacks suppressed [ 1534.845864][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.868804][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.868969][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.893288][T19587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.893479][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.893745][T19587] bridge_slave_1: entered allmulticast mode [ 1534.919380][T19587] bridge_slave_1: entered promiscuous mode [ 1534.978868][T19587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.982489][T19587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.053528][T19587] team0: Port device team_slave_0 added [ 1535.064299][T19587] team0: Port device team_slave_1 added [ 1535.107136][T19587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.107154][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.107175][T19587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.109316][T19587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.109332][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.109362][T19587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.271426][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4187'. [ 1535.851084][T19587] hsr_slave_0: entered promiscuous mode [ 1535.865496][T19587] hsr_slave_1: entered promiscuous mode [ 1535.874744][T19587] debugfs: 'hsr0' already exists in 'hsr' [ 1535.874775][T19587] Cannot create hsr debugfs directory [ 1535.885921][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.886099][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.886441][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.409430][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.410121][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.410252][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.561988][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.845197][ T5611] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1538.863863][ T5611] Bluetooth: hci4: Injecting HCI hardware error event [ 1538.876606][ T5611] Bluetooth: hci4: hardware error 0x00 [ 1539.023801][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1539.965323][ T5871] bridge_slave_1: left allmulticast mode [ 1539.965356][ T5871] bridge_slave_1: left promiscuous mode [ 1539.965637][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.053539][ T5871] bridge_slave_0: left allmulticast mode [ 1540.053576][ T5871] bridge_slave_0: left promiscuous mode [ 1540.057057][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.469189][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.497657][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1540.616546][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.686130][ T10] net_ratelimit: 10 callbacks suppressed [ 1540.686152][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.690193][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.692833][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.729393][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.773414][ T5871] bond0 (unregistering): Released all slaves [ 1540.898790][ T37] audit: type=1800 audit(2000000086.800:452): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4220" name="file1" dev="overlay" ino=1687 res=0 errno=0 [ 1541.410634][ T5611] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1541.725991][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.727825][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.727981][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.739324][ T5871] hsr_slave_0: left promiscuous mode [ 1541.805656][ T5871] hsr_slave_1: left promiscuous mode [ 1541.806810][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.852137][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.910360][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4227'. [ 1542.525710][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.526013][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.638981][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1542.749317][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1542.767687][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.867466][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4237'. [ 1542.885581][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1543.318924][T19587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1543.371335][T19587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1543.383084][T19587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1543.423317][T19587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1543.454186][T19587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1543.504270][T19587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1543.514838][T19587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1543.570805][T19587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1544.537004][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4247'. [ 1544.859086][T19587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.248576][T19587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.323800][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.323926][T12243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.311519][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.311672][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.498014][T13996] net_ratelimit: 11 callbacks suppressed [ 1546.498036][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.498199][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.498443][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.499852][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.499924][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.735107][T16547] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1546.765314][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.949831][T16547] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 1546.949877][T16547] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1546.949904][T16547] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1546.949936][T16547] usb 10-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1546.949958][T16547] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.974350][T16547] usb 10-1: config 0 descriptor?? [ 1547.602728][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.602948][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.684714][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.988535][T16547] usbhid 10-1:0.0: can't add hid device: -71 [ 1547.988629][T16547] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1547.992179][T16547] usb 10-1: USB disconnect, device number 10 [ 1548.605793][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.605948][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.606992][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.981066][T20154] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4269'. [ 1549.891490][T19587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.053801][T20185] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1551.593465][T20212] kernel read not supported for file /file1 (pid: 20212 comm: syz.9.4286) [ 1551.608888][ T37] audit: type=1800 audit(2000000097.520:453): pid=20212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4286" name="file1" dev="mqueue" ino=66517 res=0 errno=0 [ 1551.651635][ T5605] net_ratelimit: 10 callbacks suppressed [ 1551.651655][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.651823][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.717918][T20218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1551.974887][T20227] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4291'. [ 1552.076652][T19587] veth0_vlan: entered promiscuous mode [ 1552.128566][T19587] veth1_vlan: entered promiscuous mode [ 1552.277390][T19587] veth0_macvtap: entered promiscuous mode [ 1552.292957][T19587] veth1_macvtap: entered promiscuous mode [ 1552.453524][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.454129][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.454453][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.397110][T19587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.473073][T19587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.485835][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.486040][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.486323][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.569682][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1553.572612][T12243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.581438][ T5828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.583715][ T5828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.584748][ T5828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.095310][ T5586] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1554.395464][ T5586] usb 10-1: Using ep0 maxpacket: 16 [ 1554.411478][ T5586] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 1554.411927][ T5586] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.411988][ T5586] usb 10-1: config 0 has no interface number 0 [ 1554.412113][ T5586] usb 10-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1554.412176][ T5586] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.495394][ T5586] usb 10-1: config 0 descriptor?? [ 1554.566095][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.566371][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.567890][ T5586] uvcvideo 10-1:0.64: Found Unit with invalid ID 0 [ 1554.567941][ T5586] uvcvideo 10-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1554.568000][ T5586] uvcvideo 10-1:0.64: No valid video chain found. [ 1554.871391][T20256] kernel read not supported for file /file1 (pid: 20256 comm: syz.9.4300) [ 1554.871679][ T37] audit: type=1800 audit(2000000100.780:454): pid=20256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.4300" name="file1" dev="mqueue" ino=67141 res=0 errno=0 [ 1555.521827][T20267] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4303'. [ 1555.687373][ T5828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.687395][ T5828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.681691][T16547] net_ratelimit: 6 callbacks suppressed [ 1556.681711][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.382195][ T5605] usb 10-1: USB disconnect, device number 11 [ 1557.494203][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.494522][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.725888][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.726052][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.726092][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.726238][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.846519][T12243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.846638][T12243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.702806][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.702967][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.797264][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.917972][T20324] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4317'. [ 1561.854636][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4328'. [ 1562.166298][ T36] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1562.466752][ T5704] net_ratelimit: 9 callbacks suppressed [ 1562.466772][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.466969][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.467298][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.485056][ T36] usb 10-1: Using ep0 maxpacket: 16 [ 1562.508753][ T36] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1562.574182][ T36] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1562.574215][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.574238][ T36] usb 10-1: Product: syz [ 1562.574254][ T36] usb 10-1: Manufacturer: syz [ 1562.574270][ T36] usb 10-1: SerialNumber: syz [ 1562.593932][ T36] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1562.593972][ T36] r8152-cfgselector 10-1: config 0 descriptor?? [ 1564.181125][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.181294][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.181421][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.405296][ T36] r8152-cfgselector 10-1: USB disconnect, device number 12 [ 1564.447822][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.447994][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.448124][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.401161][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.285651][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1566.670034][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1566.689513][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1566.689545][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.689570][ T10] usb 7-1: Product: syz [ 1566.689586][ T10] usb 7-1: Manufacturer: syz [ 1566.689604][ T10] usb 7-1: SerialNumber: syz [ 1566.751440][ T10] usb 7-1: config 0 descriptor?? [ 1566.991671][ T10] snd-usb-6fire 7-1:0.0: unable to receive device firmware state. [ 1566.992485][ T10] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 1567.186562][ T5704] usb 7-1: USB disconnect, device number 15 [ 1567.465691][T20427] fuse: Bad value for 'fd' [ 1567.485793][T14604] net_ratelimit: 5 callbacks suppressed [ 1567.485814][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.485996][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.486120][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.645631][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.645795][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.645928][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.700204][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.700358][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.700512][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.727878][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.732634][ T5586] net_ratelimit: 8 callbacks suppressed [ 1572.732655][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.732806][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.732937][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.948670][T20541] exfat: Deprecated parameter 'debug' [ 1574.948772][T20541] /dev/loop3: Can't lookup blockdev [ 1575.548912][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.549043][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.549176][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.617986][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.618175][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.618364][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.806899][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.439318][T20566] lo speed is unknown, defaulting to 1000 [ 1579.126526][T14604] net_ratelimit: 2 callbacks suppressed [ 1579.126549][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.127989][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.128066][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.388030][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.388183][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.388339][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.438616][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.449864][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.545067][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.686167][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.914335][T20616] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4418'. [ 1582.575102][T16547] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1582.631826][T20629] 9p: Bad value for 'wfdno' [ 1584.781311][ T5704] net_ratelimit: 8 callbacks suppressed [ 1584.781333][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.781482][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.781627][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.821661][T16547] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1584.822403][T16547] usb 10-1: not running at top speed; connect to a high speed hub [ 1584.827574][T16547] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1584.827603][T16547] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.827625][T16547] usb 10-1: Product: syz [ 1584.827641][T16547] usb 10-1: Manufacturer: syz [ 1584.827657][T16547] usb 10-1: SerialNumber: syz [ 1584.960589][T17297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.082907][T16547] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1585.227045][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.305249][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.407034][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.407226][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.714220][T16547] gp8psk: usb out operation failed. [ 1585.714239][T16547] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1585.714281][T16547] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 1586.116994][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.734504][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.769369][T16547] usb 10-1: USB disconnect, device number 13 [ 1587.645040][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1587.905115][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1587.907555][ T10] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1587.907580][ T10] usb 7-1: config 0 has no interface number 0 [ 1587.907626][ T10] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1587.907653][ T10] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1587.910652][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1587.910680][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.910701][ T10] usb 7-1: Product: syz [ 1587.910716][ T10] usb 7-1: Manufacturer: syz [ 1587.910732][ T10] usb 7-1: SerialNumber: syz [ 1588.033472][ T10] usb 7-1: config 0 descriptor?? [ 1588.285755][T20660] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1588.286007][T20660] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1588.554192][T20676] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1590.012647][T16547] net_ratelimit: 7 callbacks suppressed [ 1590.012668][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.013204][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.196031][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.198233][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.399363][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.400296][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.564537][ T10] asix 7-1:0.34: probe with driver asix failed with error -71 [ 1590.830456][ T10] usb 7-1: USB disconnect, device number 16 [ 1591.498333][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.543337][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.638843][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.686435][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.236875][T20709] Bluetooth: hci0: unsupported parameter 255 [ 1592.236905][T20709] Bluetooth: hci0: unsupported parameter 255 [ 1594.480040][T20723] fuse: Bad value for 'fd' [ 1594.514593][T20723] netlink: 'syz.8.4456': attribute type 10 has an invalid length. [ 1596.817934][T14604] net_ratelimit: 8 callbacks suppressed [ 1596.817954][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.117474][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.120519][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.120820][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.531203][T20723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.723775][T20723] bond0: (slave team0): Enslaving as an active interface with an up link [ 1597.805812][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.805981][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.128034][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.128192][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.128342][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.235119][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1598.385029][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1598.387689][ T10] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1598.387717][ T10] usb 10-1: config 0 has no interface number 0 [ 1598.387762][ T10] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1598.387797][ T10] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1598.391721][ T10] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1598.391750][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.391781][ T10] usb 10-1: Product: syz [ 1598.391799][ T10] usb 10-1: Manufacturer: syz [ 1598.391814][ T10] usb 10-1: SerialNumber: syz [ 1598.476851][ T10] usb 10-1: config 0 descriptor?? [ 1598.480523][T20745] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1598.481466][T20745] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1599.167395][T20777] netlink: 184 bytes leftover after parsing attributes in process `syz.9.4463'. [ 1601.945666][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.945831][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.950340][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.069381][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.119787][ T1249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.119933][ T4980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.120103][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.177853][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.250173][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.390294][ T10] asix 10-1:0.34: probe with driver asix failed with error -71 [ 1602.453802][ T10] usb 10-1: USB disconnect, device number 14 [ 1602.935269][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.608174][T20822] lo speed is unknown, defaulting to 1000 [ 1605.118834][T12997] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1605.427798][T12997] usb 7-1: Using ep0 maxpacket: 8 [ 1605.432605][T12997] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1605.432660][T12997] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1605.432685][T12997] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1605.432710][T12997] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1605.432735][T12997] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.432788][T12997] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1605.432813][T12997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.802448][T12997] usb 7-1: usb_control_msg returned -32 [ 1605.802501][T12997] usbtmc 7-1:16.0: can't read capabilities [ 1606.006410][T20843] netlink: 184 bytes leftover after parsing attributes in process `syz.8.4493'. [ 1606.093620][ T10] usb 7-1: USB disconnect, device number 17 [ 1607.352292][T16547] net_ratelimit: 14 callbacks suppressed [ 1607.352315][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.353390][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.353455][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.361557][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.362100][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.778805][T20858] fuse: Bad value for 'fd' [ 1608.365445][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.365753][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.365942][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.704667][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1608.885513][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.885722][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.925219][T14604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.179418][T20898] fuse: Bad value for 'fd' [ 1609.269965][T20902] netlink: 184 bytes leftover after parsing attributes in process `syz.8.4519'. [ 1609.417373][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.599445][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 1611.932110][T20941] netlink: 51 bytes leftover after parsing attributes in process `syz.9.4535'. [ 1612.580243][T20963] fuse: Bad value for 'fd' [ 1612.686269][T16547] net_ratelimit: 8 callbacks suppressed [ 1612.686289][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.686522][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.686637][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.832760][T20970] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4548'. [ 1614.088328][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.088647][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.146145][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.179252][T20992] fuse: Invalid rootmode [ 1614.230208][T20997] tmpfs: Unsupported parameter 'huge' [ 1614.795902][T21018] afs: Bad value for 'source' [ 1615.210236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.212962][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.213198][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.213418][T16547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.173077][T21043] afs: Bad value for 'source' [ 1616.513086][T21051] fuse: Invalid rootmode [ 1617.619883][T21073] afs: Bad value for 'source' [ 1618.151035][T21087] ================================================================== [ 1618.151053][T21087] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 1618.151176][T21087] Read of size 1 at addr ffff888051204418 by task syz.6.4599/21087 [ 1618.151225][T21087] [ 1618.151260][T21087] CPU: 0 UID: 0 PID: 21087 Comm: syz.6.4599 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1618.151292][T21087] Tainted: [L]=SOFTLOCKUP [ 1618.151301][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1618.151319][T21087] Call Trace: [ 1618.151355][T21087] [ 1618.151409][T21087] dump_stack_lvl+0xe8/0x150 [ 1618.151504][T21087] print_address_description+0x55/0x1e0 [ 1618.151536][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.151591][T21087] print_report+0x58/0x70 [ 1618.151613][T21087] kasan_report+0x117/0x150 [ 1618.151669][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.151702][T21087] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.151724][T21087] __kasan_check_byte+0x2a/0x40 [ 1618.151749][T21087] lock_acquire+0x84/0x350 [ 1618.151808][T21087] ? rcu_is_watching+0x15/0xb0 [ 1618.151888][T21087] _raw_spin_lock_irqsave+0x40/0x60 [ 1618.151915][T21087] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.151938][T21087] rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.151960][T21087] ? reacquire_held_locks+0x104/0x190 [ 1618.151994][T21087] ? rt_spin_lock+0x1e0/0x400 [ 1618.152017][T21087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1618.152041][T21087] ? rt_spin_unlock+0x14f/0x200 [ 1618.152065][T21087] ? rt_spin_unlock+0x160/0x200 [ 1618.152089][T21087] kbd_event+0x2f91/0x42f0 [ 1618.152122][T21087] ? __pfx_kbd_event+0x10/0x10 [ 1618.152151][T21087] ? try_to_take_rt_mutex+0x840/0xb00 [ 1618.152181][T21087] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1618.152211][T21087] ? __lock_acquire+0x6b5/0x2cf0 [ 1618.152246][T21087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1618.152275][T21087] ? input_pass_values+0x8d/0x890 [ 1618.152381][T21087] input_handle_events_default+0xd4/0x1a0 [ 1618.152406][T21087] ? input_pass_values+0x8d/0x890 [ 1618.152443][T21087] input_pass_values+0x288/0x890 [ 1618.152479][T21087] ? input_handle_event+0x70c/0xf30 [ 1618.152507][T21087] input_event_dispose+0x330/0x6b0 [ 1618.152536][T21087] input_inject_event+0x1d7/0x320 [ 1618.152564][T21087] ? input_inject_event+0xb0/0x320 [ 1618.152591][T21087] evdev_write+0x328/0x4c0 [ 1618.152653][T21087] ? __lock_acquire+0x6b5/0x2cf0 [ 1618.152685][T21087] ? __pfx_evdev_write+0x10/0x10 [ 1618.152721][T21087] ? rw_verify_area+0x25b/0x4e0 [ 1618.152771][T21087] ? __pfx_evdev_write+0x10/0x10 [ 1618.152805][T21087] vfs_write+0x2a3/0xba0 [ 1618.152834][T21087] ? __pfx_vfs_write+0x10/0x10 [ 1618.152858][T21087] ? __fget_files+0x2a/0x420 [ 1618.152902][T21087] ? __fget_files+0x2a/0x420 [ 1618.152920][T21087] ? __fget_files+0x3a6/0x420 [ 1618.152940][T21087] ? __fget_files+0x2a/0x420 [ 1618.152964][T21087] ksys_write+0x156/0x270 [ 1618.152989][T21087] ? __pfx_ksys_write+0x10/0x10 [ 1618.153019][T21087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.153059][T21087] do_syscall_64+0x15f/0xf80 [ 1618.153112][T21087] ? trace_irq_disable+0x3b/0x140 [ 1618.153159][T21087] ? clear_bhb_loop+0x40/0x90 [ 1618.153185][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.153211][T21087] RIP: 0033:0x7f1d8c46ce59 [ 1618.153258][T21087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.153302][T21087] RSP: 002b:00007f1d8a6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1618.153348][T21087] RAX: ffffffffffffffda RBX: 00007f1d8c6e5fa0 RCX: 00007f1d8c46ce59 [ 1618.153366][T21087] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000009 [ 1618.153380][T21087] RBP: 00007f1d8c502d6f R08: 0000000000000000 R09: 0000000000000000 [ 1618.153394][T21087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.153408][T21087] R13: 00007f1d8c6e6038 R14: 00007f1d8c6e5fa0 R15: 00007ffec9f38108 [ 1618.153440][T21087] [ 1618.153449][T21087] [ 1618.153459][T21087] Allocated by task 21087: [ 1618.153470][T21087] kasan_save_track+0x3e/0x80 [ 1618.153491][T21087] __kasan_kmalloc+0x93/0xb0 [ 1618.153512][T21087] __kmalloc_cache_noprof+0x3a6/0x690 [ 1618.153563][T21087] alloc_tty_struct+0xa6/0x7b0 [ 1618.153585][T21087] tty_init_dev+0x59/0x4d0 [ 1618.153606][T21087] tty_open+0x86e/0xd80 [ 1618.153634][T21087] chrdev_open+0x4d0/0x5f0 [ 1618.153681][T21087] do_dentry_open+0x83d/0x13e0 [ 1618.153710][T21087] vfs_open+0x3b/0x350 [ 1618.153738][T21087] path_openat+0x2e43/0x38a0 [ 1618.153780][T21087] do_file_open+0x23e/0x4a0 [ 1618.153801][T21087] do_sys_openat2+0x113/0x200 [ 1618.153830][T21087] __x64_sys_openat+0x138/0x170 [ 1618.153859][T21087] do_syscall_64+0x15f/0xf80 [ 1618.153885][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.153905][T21087] [ 1618.153910][T21087] Freed by task 16547: [ 1618.153920][T21087] kasan_save_track+0x3e/0x80 [ 1618.153939][T21087] kasan_save_free_info+0x46/0x50 [ 1618.153989][T21087] __kasan_slab_free+0x5c/0x80 [ 1618.154008][T21087] kfree+0x1c5/0x6c0 [ 1618.154026][T21087] process_scheduled_works+0xb5d/0x1860 [ 1618.154046][T21087] worker_thread+0xa53/0xfc0 [ 1618.154067][T21087] kthread+0x388/0x470 [ 1618.154114][T21087] ret_from_fork+0x514/0xb70 [ 1618.154135][T21087] ret_from_fork_asm+0x1a/0x30 [ 1618.154162][T21087] [ 1618.154167][T21087] Last potentially related work creation: [ 1618.154176][T21087] kasan_save_stack+0x3e/0x60 [ 1618.154194][T21087] kasan_record_aux_stack+0xbd/0xd0 [ 1618.154222][T21087] insert_work+0x3d/0x330 [ 1618.154240][T21087] __queue_work+0xd1d/0x1090 [ 1618.154263][T21087] queue_work_on+0x106/0x1d0 [ 1618.154284][T21087] tty_release_struct+0xb8/0xd0 [ 1618.154307][T21087] tty_release+0xcb6/0x1710 [ 1618.154328][T21087] __fput+0x461/0xa70 [ 1618.154358][T21087] task_work_run+0x1d9/0x270 [ 1618.154385][T21087] exit_to_user_mode_loop+0xf3/0x4d0 [ 1618.154442][T21087] do_syscall_64+0x33e/0xf80 [ 1618.154468][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.154489][T21087] [ 1618.154494][T21087] The buggy address belongs to the object at ffff888051204000 [ 1618.154494][T21087] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1618.154513][T21087] The buggy address is located 1048 bytes inside of [ 1618.154513][T21087] freed 2048-byte region [ffff888051204000, ffff888051204800) [ 1618.154535][T21087] [ 1618.154541][T21087] The buggy address belongs to the physical page: [ 1618.154561][T21087] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888051206000 pfn:0x51200 [ 1618.154583][T21087] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1618.154600][T21087] memcg:ffff888051200811 [ 1618.154609][T21087] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1618.154632][T21087] page_type: f5(slab) [ 1618.154652][T21087] raw: 0080000000000240 ffff88801a0293c0 ffff88801a02a388 ffffea00013fc210 [ 1618.154672][T21087] raw: ffff888051206000 0000100000080006 00000000f5000000 ffff888051200811 [ 1618.154692][T21087] head: 0080000000000240 ffff88801a0293c0 ffff88801a02a388 ffffea00013fc210 [ 1618.154712][T21087] head: ffff888051206000 0000100000080006 00000000f5000000 ffff888051200811 [ 1618.154730][T21087] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1618.154748][T21087] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1618.154760][T21087] page dumped because: kasan: bad access detected [ 1618.154775][T21087] page_owner tracks the page as allocated [ 1618.154784][T21087] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17598, tgid 17598 (syz-executor), ts 1352112276231, free_ts 1351738438926 [ 1618.154822][T21087] post_alloc_hook+0x231/0x280 [ 1618.154887][T21087] get_page_from_freelist+0x27c8/0x2840 [ 1618.154911][T21087] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1618.154936][T21087] allocate_slab+0x77/0x660 [ 1618.154964][T21087] refill_objects+0x33c/0x3d0 [ 1618.154989][T21087] __pcs_replace_empty_main+0x373/0x720 [ 1618.155018][T21087] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1618.155041][T21087] kmemdup_noprof+0x2b/0x70 [ 1618.155093][T21087] neigh_sysctl_register+0xae/0xa90 [ 1618.155178][T21087] addrconf_sysctl_register+0xb3/0x1c0 [ 1618.155241][T21087] ipv6_add_dev+0xd64/0x1400 [ 1618.155265][T21087] addrconf_notify+0x771/0x1050 [ 1618.155296][T21087] notifier_call_chain+0x1ad/0x3d0 [ 1618.155323][T21087] register_netdevice+0x18d5/0x1ed0 [ 1618.155409][T21087] veth_newlink+0x67b/0xb70 [ 1618.155508][T21087] rtnl_newlink_create+0x329/0xb70 [ 1618.155567][T21087] page last free pid 5582 tgid 5582 stack trace: [ 1618.155580][T21087] __free_frozen_pages+0xfa6/0x10f0 [ 1618.155601][T21087] __slab_free+0x252/0x2a0 [ 1618.155621][T21087] qlist_free_all+0x99/0x100 [ 1618.155639][T21087] kasan_quarantine_reduce+0x148/0x160 [ 1618.155657][T21087] __kasan_slab_alloc+0x22/0x80 [ 1618.155678][T21087] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1618.155700][T21087] __alloc_skb+0x1d0/0x7d0 [ 1618.155743][T21087] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1618.155773][T21087] tcp_sendmsg_locked+0x134b/0x5370 [ 1618.155804][T21087] tcp_sendmsg+0x2f/0x50 [ 1618.155832][T21087] sock_write_iter+0x40c/0x4f0 [ 1618.155901][T21087] vfs_write+0x629/0xba0 [ 1618.155922][T21087] ksys_write+0x156/0x270 [ 1618.155943][T21087] do_syscall_64+0x15f/0xf80 [ 1618.155969][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.155988][T21087] [ 1618.155994][T21087] Memory state around the buggy address: [ 1618.156006][T21087] ffff888051204300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1618.156022][T21087] ffff888051204380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1618.156037][T21087] >ffff888051204400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1618.156049][T21087] ^ [ 1618.156061][T21087] ffff888051204480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1618.156075][T21087] ffff888051204500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1618.156087][T21087] ================================================================== [ 1618.156110][T21087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1618.156128][T21087] CPU: 0 UID: 0 PID: 21087 Comm: syz.6.4599 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1618.156158][T21087] Tainted: [L]=SOFTLOCKUP [ 1618.156167][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1618.156180][T21087] Call Trace: [ 1618.156205][T21087] [ 1618.156214][T21087] vpanic+0x56c/0xa60 [ 1618.156246][T21087] ? __pfx_vpanic+0x10/0x10 [ 1618.156278][T21087] panic+0xc5/0xd0 [ 1618.156305][T21087] ? __pfx_panic+0x10/0x10 [ 1618.156334][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156373][T21087] ? rcu_is_watching+0x15/0xb0 [ 1618.156407][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156443][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156471][T21087] check_panic_on_warn+0x89/0xb0 [ 1618.156503][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156531][T21087] end_report+0x73/0x170 [ 1618.156556][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156601][T21087] kasan_report+0x128/0x150 [ 1618.156629][T21087] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156663][T21087] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.156686][T21087] __kasan_check_byte+0x2a/0x40 [ 1618.156711][T21087] lock_acquire+0x84/0x350 [ 1618.156744][T21087] ? rcu_is_watching+0x15/0xb0 [ 1618.156779][T21087] _raw_spin_lock_irqsave+0x40/0x60 [ 1618.156808][T21087] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.156832][T21087] rt_mutex_slowunlock+0xbf/0x8b0 [ 1618.156855][T21087] ? reacquire_held_locks+0x104/0x190 [ 1618.156890][T21087] ? rt_spin_lock+0x1e0/0x400 [ 1618.156914][T21087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1618.156940][T21087] ? rt_spin_unlock+0x14f/0x200 [ 1618.156966][T21087] ? rt_spin_unlock+0x160/0x200 [ 1618.156991][T21087] kbd_event+0x2f91/0x42f0 [ 1618.157025][T21087] ? __pfx_kbd_event+0x10/0x10 [ 1618.157056][T21087] ? try_to_take_rt_mutex+0x840/0xb00 [ 1618.157099][T21087] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1618.157128][T21087] ? __lock_acquire+0x6b5/0x2cf0 [ 1618.157164][T21087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1618.157192][T21087] ? input_pass_values+0x8d/0x890 [ 1618.157249][T21087] input_handle_events_default+0xd4/0x1a0 [ 1618.157275][T21087] ? input_pass_values+0x8d/0x890 [ 1618.157319][T21087] input_pass_values+0x288/0x890 [ 1618.157354][T21087] ? input_handle_event+0x70c/0xf30 [ 1618.157381][T21087] input_event_dispose+0x330/0x6b0 [ 1618.157410][T21087] input_inject_event+0x1d7/0x320 [ 1618.157442][T21087] ? input_inject_event+0xb0/0x320 [ 1618.157469][T21087] evdev_write+0x328/0x4c0 [ 1618.157501][T21087] ? __lock_acquire+0x6b5/0x2cf0 [ 1618.157531][T21087] ? __pfx_evdev_write+0x10/0x10 [ 1618.157566][T21087] ? rw_verify_area+0x25b/0x4e0 [ 1618.157589][T21087] ? __pfx_evdev_write+0x10/0x10 [ 1618.157622][T21087] vfs_write+0x2a3/0xba0 [ 1618.157649][T21087] ? __pfx_vfs_write+0x10/0x10 [ 1618.157673][T21087] ? __fget_files+0x2a/0x420 [ 1618.157693][T21087] ? __fget_files+0x2a/0x420 [ 1618.157711][T21087] ? __fget_files+0x3a6/0x420 [ 1618.157728][T21087] ? __fget_files+0x2a/0x420 [ 1618.157750][T21087] ksys_write+0x156/0x270 [ 1618.157774][T21087] ? __pfx_ksys_write+0x10/0x10 [ 1618.157802][T21087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.157827][T21087] do_syscall_64+0x15f/0xf80 [ 1618.157854][T21087] ? trace_irq_disable+0x3b/0x140 [ 1618.157878][T21087] ? clear_bhb_loop+0x40/0x90 [ 1618.157902][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.157923][T21087] RIP: 0033:0x7f1d8c46ce59 [ 1618.157942][T21087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.157961][T21087] RSP: 002b:00007f1d8a6be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1618.157983][T21087] RAX: ffffffffffffffda RBX: 00007f1d8c6e5fa0 RCX: 00007f1d8c46ce59 [ 1618.158001][T21087] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000009 [ 1618.158015][T21087] RBP: 00007f1d8c502d6f R08: 0000000000000000 R09: 0000000000000000 [ 1618.158029][T21087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.158043][T21087] R13: 00007f1d8c6e6038 R14: 00007f1d8c6e5fa0 R15: 00007ffec9f38108 [ 1618.158070][T21087] [ 1618.158235][T21087] Kernel Offset: disabled