last executing test programs: 9m59.799002341s ago: executing program 0 (id=1179): r0 = socket$kcm(0x11, 0x2, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x200000000000008, 0x101840) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000001c0)={0xd, 0x3, 0x0, {0x2, 0x5, 0x1400, 0x870}}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x1, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) socket(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000000c0)={0xa, 0x4e1f, 0xc, @rand_addr=' \x01\x00', 0x4}, 0x1c) unshare(0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 9m58.711609175s ago: executing program 0 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000024", 0x26}, {&(0x7f00000004c0)="f058050000007fb7", 0x8}], 0x2}, 0x15) 9m54.824797796s ago: executing program 0 (id=1200): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x6}}, 0x18) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000017c0)=@can={0x1d, r2}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000100)="0a7aab37d5f95ed84a016028ea92060409df749a66bdd0ee63e7fc261ebd361048d641abdb147b1399ce9950617717224d28682f8c8b1c6e3db0c04d6710fba422897a58dcc5addaf6", 0x49}, {&(0x7f0000000380)="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", 0x6b2}], 0x3}}], 0x1, 0x4005) 9m54.594375224s ago: executing program 0 (id=1203): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r3 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r6 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r6, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000) 9m52.429953702s ago: executing program 0 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x200}) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000440)='\x00', 0xffffffffffffffff) mkdir(0x0, 0x22) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r3) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x8, 0x191, 0x1, 0x0, 0xdd9f83, 0x10001, 0x9, 0x100f3, 0xfffffffe, 0x80000001, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r5 = socket(0x10, 0x803, 0x0) accept4$unix(r5, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x25, 0x4, 0x40004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x6, 0x6}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2001fe0006030c000000018000000000000000000000920da7b440cdd181c826d4556be738c4e12e4e1ebe1e6110b664b0c64b31fbefe764978d204db27aba9eb80f2825d24f6245a0899f4e3db2cc175fe5ba1c174d31ad743cc59164928508a0cb946eeed97365e81e0182bde3a15e5ee403c95719989374c3a61b12a19b003f3d0313aaa7bb244b3200898ec747dc00000000"], 0x20}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 9m52.016702159s ago: executing program 0 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000700113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 9m51.716626698s ago: executing program 32 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000700113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 1m0.136156512s ago: executing program 4 (id=4447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x200}) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000440)='\x00', 0xffffffffffffffff) mkdir(0x0, 0x22) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r3) socket(0x10, 0x803, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x8, 0x191, 0x1, 0x0, 0xdd9f83, 0x10001, 0x9, 0x100f3, 0xfffffffe, 0x80000001, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r5 = socket(0x10, 0x803, 0x0) accept4$unix(r5, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x25, 0x4, 0x40004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x6, 0x6}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2001fe0006030c000000018000000000000000000000920da7b440cdd181c826d4556be738c4e12e4e1ebe1e6110b664b0c64b31fbefe764978d204db27aba9eb80f2825d24f6245a0899f4e3db2cc175fe5ba1c174d31ad743cc59164928508a0cb946eeed97365e81e0182bde3a15e5ee403c95719989374c3a61b12a19b003f3d0313aaa7bb244b3200898ec747dc00000000"], 0x20}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 59.681546339s ago: executing program 1 (id=4454): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2c1, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x20, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 59.412260041s ago: executing program 2 (id=4456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007fb7", 0x8}], 0x2}, 0x15) 58.795381545s ago: executing program 2 (id=4457): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x4006, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000002040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="040026bd7000fddbdf250c0000000800370002000000090007001f738b23e7000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) r5 = syz_open_dev$sg(&(0x7f0000002080), 0xffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xa91) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x0, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$int_in(r1, 0x7e08, &(0x7f0000000100)=0x7a) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000060900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380040000800c00008008000340000000022c0000000e0a01140000000000000000030000000900020073797a31000000000900010073797a3100000000140000001100010000000000000000000300000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40841) 58.556809766s ago: executing program 1 (id=4460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x7000000, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) 58.555824201s ago: executing program 2 (id=4461): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000340000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000020006000000000002"], 0x80}}, 0x0) 58.463041202s ago: executing program 2 (id=4463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_submit(0x0, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x13, r2, &(0x7f0000000000)="98", 0x13, 0x3e80000000, 0x0, 0x10}]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x1c}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a3100000000090001d973797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) 58.366813368s ago: executing program 1 (id=4465): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca6e, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x3, 0x8, 0xfffffffc, 0x0, 0x7, 0x200005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0xd0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0xffff, r10, {0xfff3, 0xfffe}, {0x5, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@RTM_NEWMDB={0x78, 0x54, 0x300, 0x70bd2a, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x1, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x3c}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x40}, 0x86dd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) fchdir(r12) r13 = socket$unix(0x1, 0x1, 0x0) bind$unix(r13, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r13, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 58.272107978s ago: executing program 2 (id=4466): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604110, &(0x7f0000000000)={0xffffffff, [[0x65ab, 0x0, 0x0, 0xc, 0x40000200, 0x0, 0x54bf, 0xfffffffd], [0x800004, 0x0, 0x101, 0xfffffffc, 0x80, 0x0, 0x9, 0x8], [0x2, 0x4000008, 0x44, 0x2, 0x1, 0x7, 0x8]], '\x00', [{0x0, 0x3}, {0x3}, {0x400}, {0x1}, {0x7fffffff}, {0x2, 0x22c685d5}, {0xf68b}, {0xc, 0xfffffff8}, {0xc51}, {0x7334486a}, {0x2}, {0xffffffff, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x200000000000000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0xf) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000010ac05690d000000000001090224000100003006090400fe020300000009210500060122280009058103100008c100"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="002428001000"], 0x0, 0x0, 0x0, 0x0}, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000040)=""/197, 0xc5}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x2) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000ffd7013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x2, 0x2003) 58.029891739s ago: executing program 1 (id=4468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a0000000000000000000000050000000500000008"], 0x100}}, 0x0) 57.995468608s ago: executing program 5 (id=4469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0xd9, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 57.876861859s ago: executing program 5 (id=4470): unshare(0x22020600) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 57.815074871s ago: executing program 1 (id=4471): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) fanotify_init(0x10, 0x800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 57.672736721s ago: executing program 4 (id=4473): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x2000000, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 57.564178461s ago: executing program 5 (id=4474): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) pwrite64(r0, &(0x7f0000000280)='\x00\x00', 0x2, 0xa2) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) 57.381506407s ago: executing program 4 (id=4475): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x6, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) io_destroy(0x0) 57.158865409s ago: executing program 5 (id=4477): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffd, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x8000011, r6, 0x0) preadv2(r6, 0x0, 0x0, 0x15ed, 0x4, 0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "dde0bd800c862a13", "73d70422cc1d676d3dd390c916e9f627", "9680c97b", "28bc4366ac157c75"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) accept$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x218, 0x218, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'gre0\x00', 'veth1_to_team\x00', {}, {}, 0x6, 0x0, 0x47}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x42, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @broadcast, @gre_key=0x1ff, @gre_key=0xb}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x7, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x61f, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @icmp_id=0x68, @port=0x4e20}}}}, {{@ip={@broadcast, @private=0xa010102, 0x0, 0x0, 'lo\x00', 'vxcan1\x00', {}, {}, 0x6d}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x13}, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x269) 57.104201882s ago: executing program 4 (id=4478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r1, &(0x7f0000001200)="40170b78", 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x74}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e2) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c703000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) 57.00167912s ago: executing program 3 (id=4479): ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=0x28) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r3], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005", @ANYBLOB, @ANYRES32=0x0], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005", @ANYBLOB, @ANYRES32=0x0], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000e00025d08001800", @ANYRES32=r6, @ANYBLOB='I\f\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) 56.876566506s ago: executing program 4 (id=4480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff72, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/251, 0xfb}], 0x1}, 0x31}], 0x1, 0x40010021, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0005}]}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x50, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x21) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x401}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x20, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) tkill(r2, 0x27) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000000)=0x2681010) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff0}}], 0xa32, 0x60, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xff, 0x400000) socket$nl_xfrm(0x10, 0x3, 0x6) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/247, 0xf7) 55.500896612s ago: executing program 1 (id=4481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r6, @ANYBLOB="180008"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) 55.462769261s ago: executing program 4 (id=4483): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x103102, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x8000, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) unshare(0x400) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xad, 0xb8, 0x8a, 0x20, 0x572, 0x41, 0xa7d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x75, 0xc0, 0x4, "", [{{0x9, 0x4, 0x55, 0x6, 0x0, 0x22, 0xf2, 0x59, 0xbf}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "e0eada557aaa42a4a9cfb60cad274896fe9b4179ae99a35ce068b4e3ab6e6a5d83eb1342833722a6195bb01c4e2558f0b03e0b14464535b1aba9c45c18dc8883fc84e15f9e75b50a3babbbe2250e537370dd5d8f45052867b1c02751b75dcbb3846868ea8daf02790deb9fe41a566173d0136662fae2dad536e3c938ecae76be64892b18919171472535aaa8da721c13d4175653341277092f0bc6ed807fb9eff4b7f0d192858a9caa7649c2aa0a7783c396573bb0a06788084959634d81eb4cf18e20ff0e407c76085fee6223379b7c42f73d771b5996"}}]}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYBLOB="3be4cbed2729b286d3aac0f778df37217d92b7bcc06423c50c850eb420753d8772da5ddceb2e2c8bf4c7ef3ecf65b4", @ANYRES16=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r0]) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x80004, 0x0, 0x24}}, 0x2e) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0xffffffffffffffda, r8, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x20, 0x3}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) 54.976160472s ago: executing program 5 (id=4484): r0 = socket(0x40000000015, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan0\x00') r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4044) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x6000, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)) 54.854326291s ago: executing program 3 (id=4485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a000600080211000000000000003500000000000a00"], 0x44}}, 0x0) 54.705840454s ago: executing program 2 (id=4486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", "ea48ff12", "ef3c6c588e3360e2"}, 0x38) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async) sendfile(r1, r2, 0x0, 0x7ffff000) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfffffffffffffef4, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="c35ab834941a10969962bb090c5edc37a1a879fab13fdff8e33a2b0aee41b0cf6908de97a79f0e57d7bdcb22cf296d697d2cf740ce7e1c93ea10e62cdd05553d5e347da2c187cec23636c19a345ada10a91659f0b56e405eeefccbf0f30bf623a01e56f58141a3bdc5b8a3426f3ca6f608ccdbceb89c52a3eda1feee27ffcf586a58802880e5f358f6617aee69334deac600cceadb4c864d20a49796da6688"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202"], 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f0000004900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) munmap(&(0x7f0000695000/0x3000)=nil, 0x3000) (async) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r6], 0x1c}}, 0x44040) (async) read$FUSE(r7, &(0x7f0000001540)={0x2020}, 0xf1e) (async) r8 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 54.667743653s ago: executing program 3 (id=4487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x338, 0x11, 0x148, 0x0, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'rose0\x00', {}, {}, 0x84, 0x3, 0x8}, 0x0, 0x2f0, 0x338, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xfe, [0x4e24, 0x4e20, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x4e22, 0x4e21, 0x2, 0x4e20, 0x4e21, 0x4e23], [0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x700, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'batadv0\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x0, 0x9}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0xa, 0x1, 0x6, 0x2, 0x1], 0x0, 0x7}, {0xffffffffffffffff, [0x4, 0x5, 0x2, 0x4, 0x2, 0x2], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 54.492730126s ago: executing program 3 (id=4488): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) pwrite64(r0, &(0x7f0000000280)='\x00\x00', 0x2, 0xa2) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) 54.305875637s ago: executing program 3 (id=4489): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0xc004080) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x700000000000000, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r10, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x1) 53.926897453s ago: executing program 5 (id=4490): setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x200000000000000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 33 (id=4481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 741.681606][T18876] dump_stack_lvl+0xe8/0x150 [ 741.681638][T18876] should_fail_ex+0x40c/0x560 [ 741.681666][T18876] prepare_alloc_pages+0x230/0x650 [ 741.681698][T18876] __alloc_frozen_pages_noprof+0x12f/0x380 [ 741.681723][T18876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.681747][T18876] ? __pfx_policy_nodemask+0x10/0x10 [ 741.681773][T18876] ? __lock_acquire+0x683/0x2cf0 [ 741.681798][T18876] alloc_pages_mpol+0x212/0x380 [ 741.681826][T18876] folio_alloc_mpol_noprof+0x39/0x160 [ 741.681850][T18876] vma_alloc_folio_noprof+0xe1/0x1e0 [ 741.681875][T18876] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 741.681899][T18876] ? __pte_offset_map+0x29/0x240 [ 741.681919][T18876] ? __pte_offset_map+0x29/0x240 [ 741.681939][T18876] do_pte_missing+0x173a/0x34b0 [ 741.681977][T18876] handle_mm_fault+0x1b36/0x3080 [ 741.682007][T18876] ? handle_mm_fault+0xec/0x3080 [ 741.682029][T18876] ? __pfx_handle_mm_fault+0x10/0x10 [ 741.682054][T18876] ? lock_mm_and_find_vma+0xa7/0x340 [ 741.682073][T18876] do_user_addr_fault+0x744/0x1340 [ 741.682109][T18876] exc_page_fault+0x6a/0xc0 [ 741.682135][T18876] asm_exc_page_fault+0x26/0x30 [ 741.682153][T18876] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 741.682172][T18876] Code: 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 741.682186][T18876] RSP: 0018:ffffc900051e7b48 EFLAGS: 00050246 [ 741.682202][T18876] RAX: ffffffff84d37101 RBX: 0000000000000040 RCX: 0000000000000040 [ 741.682215][T18876] RDX: 0000000000000000 RSI: ffffc900051e7be0 RDI: 0000200000007000 [ 741.682225][T18876] RBP: ffffc900051e7c90 R08: ffffc900051e7c1f R09: 1ffff92000a3cf83 [ 741.682236][T18876] R10: dffffc0000000000 R11: fffff52000a3cf84 R12: 0000200000007040 [ 741.682248][T18876] R13: 00007ffffffff000 R14: ffffc900051e7be0 R15: 0000200000007000 [ 741.682267][T18876] ? _copy_from_user+0x81/0xb0 [ 741.682294][T18876] _copy_to_user+0x8a/0xb0 [ 741.682316][T18876] rng_dev_read+0x3f0/0x7c0 [ 741.682342][T18876] ? __pfx_rng_dev_read+0x10/0x10 [ 741.682364][T18876] ? bpf_lsm_file_permission+0x9/0x20 [ 741.682382][T18876] ? security_file_permission+0x75/0x260 [ 741.682403][T18876] ? rw_verify_area+0x24a/0x4c0 [ 741.682422][T18876] ? __pfx_rng_dev_read+0x10/0x10 [ 741.682434][T18876] vfs_read+0x213/0xa80 [ 741.682455][T18876] ? __pfx_vfs_read+0x10/0x10 [ 741.682478][T18876] ? __fget_files+0x2a/0x420 [ 741.682502][T18876] ? __fget_files+0x2a/0x420 [ 741.682521][T18876] ? __fget_files+0x3a2/0x420 [ 741.682540][T18876] ? __fget_files+0x2a/0x420 [ 741.682578][T18876] ksys_read+0x150/0x270 [ 741.682605][T18876] ? __pfx_ksys_read+0x10/0x10 [ 741.682636][T18876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.682654][T18876] do_syscall_64+0x174/0x580 [ 741.682692][T18876] ? trace_irq_disable+0x3b/0x140 [ 741.682713][T18876] ? clear_bhb_loop+0x70/0xc0 [ 741.682734][T18876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.682750][T18876] RIP: 0033:0x7fcb8999e0d9 [ 741.682767][T18876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.682781][T18876] RSP: 002b:00007fcb8a862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 741.682799][T18876] RAX: ffffffffffffffda RBX: 00007fcb89c25fa0 RCX: 00007fcb8999e0d9 [ 741.682812][T18876] RDX: 00000000fffffce2 RSI: 0000200000006540 RDI: 0000000000000003 [ 741.682824][T18876] RBP: 00007fcb8a862090 R08: 0000000000000000 R09: 0000000000000000 [ 741.682835][T18876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.682846][T18876] R13: 00007fcb89c26038 R14: 00007fcb89c25fa0 R15: 00007fcb89d4fa48 [ 741.682873][T18876] [ 742.049748][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 742.126543][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.389767][T18885] Cannot find map_set index 0 as target [ 742.559734][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.602934][ T986] gspca_main: etoms-2.14.0 probing 102c:6151 [ 742.867377][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 743.098249][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 743.128126][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.140032][ T10] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.183847][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.207530][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0d69, bcdDevice= 0.00 [ 743.225453][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.311114][ T986] usb 3-1: USB disconnect, device number 32 [ 743.334393][ T10] usb 4-1: config 0 descriptor?? [ 743.719505][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.972905][T18913] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4110'. [ 744.232942][T18919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4113'. [ 744.476892][ T5691] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 744.651635][ T5691] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.688896][ T5691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.742485][ T5691] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.784920][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.808919][ T29] audit: type=1326 audit(1786122566.733:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18926 comm="syz.2.4117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fde68d97e57 code=0x0 [ 744.841309][ T5691] usb 6-1: Product: syz [ 744.858364][ T5691] usb 6-1: Manufacturer: syz [ 744.871022][ T5691] usb 6-1: SerialNumber: syz [ 744.940471][ T5691] usb 6-1: 0:2 : does not exist [ 745.085422][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056546800: rx timeout, send abort [ 745.094144][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056546800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 745.210413][ T986] net_ratelimit: 4 callbacks suppressed [ 745.210432][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.710929][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4119'. [ 745.737090][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4119'. [ 745.779827][T18942] netlink: 'syz.4.4121': attribute type 1 has an invalid length. [ 745.942768][T18942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.985939][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 746.000428][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 746.009426][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.070244][ T10] usb 4-1: USB disconnect, device number 11 [ 746.142659][T18945] bond7: (slave veth9): Enslaving as an active interface with a down link [ 746.193769][T18948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.195104][T18948] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.210554][T18948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.247590][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.272710][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'. [ 746.298201][T18948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.308337][T18948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.327651][T18948] veth1_vlan: left promiscuous mode [ 746.328587][T18948] veth0_vlan: left promiscuous mode [ 746.329779][T18948] veth0_vlan: entered promiscuous mode [ 746.331606][T18948] veth1_vlan: entered promiscuous mode [ 746.340673][T18948] veth1_macvtap: left promiscuous mode [ 746.342178][T18948] veth0_macvtap: left promiscuous mode [ 746.342956][T18948] veth0_macvtap: entered promiscuous mode [ 746.343775][T18948] veth1_macvtap: entered promiscuous mode [ 746.354806][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.355878][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.357606][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.358435][T18948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.368232][ T8499] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 746.384597][T18948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.387510][T18948] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 746.397034][T18948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 746.399993][T18948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.409219][T18948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.427906][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 746.471693][T18948] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 746.489458][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.500858][T18942] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 746.511595][T18942] bond7: (slave batadv2): making interface the new active one [ 746.514617][T18942] batadv2: entered promiscuous mode [ 746.515255][T18942] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 746.527603][ T8499] usb 2-1: Using ep0 maxpacket: 8 [ 746.638229][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.638265][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.657180][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 746.661417][ T10] usb 4-1: too many configurations: 14, using maximum allowed: 8 [ 746.678806][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.678975][ T47] bridge0: port 1(bridge_slave_0) entered listening state [ 746.684942][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.725083][ T47] bridge0: port 2(bridge_slave_1) entered listening state [ 746.737435][ T8499] usb 2-1: config 31 has an invalid interface number: 197 but max is 0 [ 746.745960][ T8499] usb 2-1: config 31 has no interface number 0 [ 746.773703][ T8499] usb 2-1: config 31 interface 197 has no altsetting 0 [ 746.786177][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 746.799652][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.830936][ T8499] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 746.841020][ T10] usb 4-1: Product: syz [ 746.848548][ T8499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.863024][ T10] usb 4-1: Manufacturer: syz [ 746.874828][ T8499] usb 2-1: Product: syz [ 746.874851][ T8499] usb 2-1: Manufacturer: syz [ 746.874860][ T8499] usb 2-1: SerialNumber: syz [ 746.876319][ T10] usb 4-1: SerialNumber: syz [ 746.927461][ T144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.928932][ T10] usb 4-1: config 0 descriptor?? [ 746.961410][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.971609][T18957] netlink: 'syz.4.4125': attribute type 238 has an invalid length. [ 746.974428][ T144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.974460][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.974493][ T144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.974516][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.140367][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.149304][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.158097][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.260404][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.288949][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.329479][T18961] FAULT_INJECTION: forcing a failure. [ 747.329479][T18961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.371958][T18961] CPU: 0 UID: 0 PID: 18961 Comm: syz.4.4127 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.371988][T18961] Tainted: [L]=SOFTLOCKUP [ 747.371997][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 747.372007][T18961] Call Trace: [ 747.372015][T18961] [ 747.372024][T18961] dump_stack_lvl+0xe8/0x150 [ 747.372054][T18961] should_fail_ex+0x40c/0x560 [ 747.372078][T18961] _copy_from_user+0x2d/0xb0 [ 747.372104][T18961] ___sys_sendmsg+0x1c6/0x360 [ 747.372124][T18961] ? __lock_acquire+0x683/0x2cf0 [ 747.372150][T18961] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.372201][T18961] ? __fget_files+0x2a/0x420 [ 747.372222][T18961] ? __fget_files+0x3a2/0x420 [ 747.372253][T18961] __x64_sys_sendmsg+0x1b1/0x290 [ 747.372274][T18961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 747.372310][T18961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.372329][T18961] do_syscall_64+0x174/0x580 [ 747.372352][T18961] ? trace_irq_disable+0x3b/0x140 [ 747.372372][T18961] ? clear_bhb_loop+0x70/0xc0 [ 747.372394][T18961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.372412][T18961] RIP: 0033:0x7f971039e0d9 [ 747.372428][T18961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.372443][T18961] RSP: 002b:00007f9711299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.372462][T18961] RAX: ffffffffffffffda RBX: 00007f9710625fa0 RCX: 00007f971039e0d9 [ 747.372475][T18961] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 747.372487][T18961] RBP: 00007f9711299090 R08: 0000000000000000 R09: 0000000000000000 [ 747.372498][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.372509][T18961] R13: 00007f9710626038 R14: 00007f9710625fa0 R15: 00007f971074fa48 [ 747.372537][T18961] [ 747.620791][T18966] x_tables: unsorted entry at hook 1 [ 747.761635][ T8499] gspca_main: etoms-2.14.0 probing 102c:6151 [ 747.886623][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.939044][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.955083][T18971] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4130'. [ 747.955162][ T5684] usb 6-1: USB disconnect, device number 51 [ 747.968979][T18971] batadv0: entered promiscuous mode [ 748.113044][T18975] FAULT_INJECTION: forcing a failure. [ 748.113044][T18975] name failslab, interval 1, probability 0, space 0, times 0 [ 748.150262][T18978] netlink: 'syz.2.4133': attribute type 11 has an invalid length. [ 748.160630][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.5.4132 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.160659][T18975] Tainted: [L]=SOFTLOCKUP [ 748.160666][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.160676][T18975] Call Trace: [ 748.160684][T18975] [ 748.160691][T18975] dump_stack_lvl+0xe8/0x150 [ 748.160721][T18975] should_fail_ex+0x40c/0x560 [ 748.160746][T18975] should_failslab+0xa8/0x100 [ 748.160771][T18975] __kmalloc_cache_noprof+0xa8/0x660 [ 748.160795][T18975] ? snd_seq_oss_writeq_new+0xd7/0x2f0 [ 748.160821][T18975] ? snd_seq_oss_writeq_new+0xd7/0x2f0 [ 748.160853][T18975] snd_seq_oss_writeq_new+0xd7/0x2f0 [ 748.160877][T18975] ? rcu_is_watching+0x15/0xb0 [ 748.160904][T18975] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 748.160927][T18975] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 748.160954][T18975] ? __raw_spin_lock_init+0x45/0x100 [ 748.160974][T18975] ? __raw_spin_lock_init+0x45/0x100 [ 748.160998][T18975] snd_seq_oss_open+0x885/0xf40 [ 748.161025][T18975] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 748.161075][T18975] ? rcu_is_watching+0x15/0xb0 [ 748.161099][T18975] ? trace_contention_end+0x3d/0x140 [ 748.161153][T18975] ? __pfx___mutex_lock+0x10/0x10 [ 748.161180][T18975] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 748.161199][T18975] ? __pfx_free_devinfo+0x10/0x10 [ 748.161216][T18975] ? do_raw_spin_unlock+0xf5/0x210 [ 748.161235][T18975] ? soundcore_open+0x2da/0x490 [ 748.161259][T18975] odev_open+0x67/0xa0 [ 748.161277][T18975] chrdev_open+0x4d9/0x600 [ 748.161299][T18975] ? __pfx_chrdev_open+0x10/0x10 [ 748.161316][T18975] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 748.161344][T18975] ? __pfx_chrdev_open+0x10/0x10 [ 748.161361][T18975] do_dentry_open+0x816/0x1380 [ 748.161391][T18975] vfs_open+0x3b/0x340 [ 748.161407][T18975] ? path_openat+0x2e2d/0x3830 [ 748.161432][T18975] path_openat+0x2e44/0x3830 [ 748.161455][T18975] ? kasan_save_track+0x3e/0x80 [ 748.161475][T18975] ? do_sys_openat2+0xcc/0x200 [ 748.161494][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.161528][T18975] do_file_open+0x23e/0x4a0 [ 748.161557][T18975] ? __pfx_do_file_open+0x10/0x10 [ 748.161600][T18975] ? _raw_spin_unlock+0x28/0x50 [ 748.161618][T18975] ? alloc_fd+0x651/0x6c0 [ 748.161648][T18975] do_sys_openat2+0x115/0x200 [ 748.161670][T18975] ? __pfx_do_sys_openat2+0x10/0x10 [ 748.161690][T18975] ? ksys_write+0x242/0x270 [ 748.161713][T18975] ? __pfx_ksys_write+0x10/0x10 [ 748.161738][T18975] __x64_sys_openat+0x138/0x170 [ 748.161761][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.161779][T18975] do_syscall_64+0x174/0x580 [ 748.161803][T18975] ? clear_bhb_loop+0x70/0xc0 [ 748.161824][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.161841][T18975] RIP: 0033:0x7f5e5d99e0d9 [ 748.161858][T18975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.161871][T18975] RSP: 002b:00007f5e5bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 748.161890][T18975] RAX: ffffffffffffffda RBX: 00007f5e5dc25fa0 RCX: 00007f5e5d99e0d9 [ 748.161902][T18975] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 748.161915][T18975] RBP: 00007f5e5bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 748.161926][T18975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.161936][T18975] R13: 00007f5e5dc26038 R14: 00007f5e5dc25fa0 R15: 00007f5e5dd4fa48 [ 748.161965][T18975] [ 748.166379][T18954] IPv6: Can't replace route, no match found [ 748.518287][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.580642][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.693088][T18995] netlink: 'syz.5.4137': attribute type 238 has an invalid length. [ 748.998756][T19001] syzkaller0: entered promiscuous mode [ 749.014760][T19001] syzkaller0: entered allmulticast mode [ 749.054951][ T986] usb 2-1: USB disconnect, device number 106 [ 749.313744][T15727] usb 4-1: USB disconnect, device number 12 [ 749.718468][T19018] program syz.5.4142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.567547][ T986] net_ratelimit: 4 callbacks suppressed [ 750.567564][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.692264][T19029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4146'. [ 750.847388][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.196589][T19039] pimreg: entered allmulticast mode [ 751.546871][T15727] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 751.607170][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.707802][T15727] usb 5-1: Using ep0 maxpacket: 8 [ 751.727957][T15727] usb 5-1: config 31 has an invalid interface number: 197 but max is 0 [ 751.757084][T15727] usb 5-1: config 31 has no interface number 0 [ 751.786142][T15727] usb 5-1: config 31 interface 197 has no altsetting 0 [ 751.815425][T15727] usb 5-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 751.845153][T15727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.886741][T15727] usb 5-1: Product: syz [ 751.908141][T15727] usb 5-1: Manufacturer: syz [ 751.927351][T15727] usb 5-1: SerialNumber: syz [ 752.017503][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.248569][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.649433][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.178573][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.209158][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.583548][T15727] gspca_main: etoms-2.14.0 probing 102c:6151 [ 753.628849][T19076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'. [ 753.694806][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.721948][T19078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'. [ 754.389413][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.597501][ T5691] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 754.777373][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 754.800706][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.830099][ T5691] usb 4-1: config 1 has an invalid interface number: 237 but max is 0 [ 754.848863][ T5691] usb 4-1: config 1 has no interface number 0 [ 754.855324][ T5691] usb 4-1: config 1 interface 237 has no altsetting 0 [ 754.871675][ T5691] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 754.885601][T19081] syz.1.4158 (19081): drop_caches: 2 [ 754.901571][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.913115][ T5691] usb 4-1: Product: syz [ 754.923697][ T5691] usb 4-1: Manufacturer: syz [ 754.933221][ T5691] usb 4-1: SerialNumber: syz [ 755.049363][ T986] usb 5-1: USB disconnect, device number 104 [ 755.092606][T19102] netlink: 'syz.1.4167': attribute type 238 has an invalid length. [ 755.147298][ T29] audit: type=1326 audit(1786122577.073:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19099 comm="syz.5.4168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5e5d997e57 code=0x0 [ 755.188860][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.212629][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.332775][ T5691] ipaq 4-1:1.237: PocketPC PDA converter detected [ 755.369133][ T5691] ipaq 4-1:1.237: probe with driver ipaq failed with error -71 [ 755.427794][ T5691] usb 4-1: USB disconnect, device number 13 [ 755.767317][ T8499] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 755.777996][ T986] net_ratelimit: 6 callbacks suppressed [ 755.778012][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.891516][ T5731] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 755.941683][ T8499] usb 3-1: Using ep0 maxpacket: 32 [ 755.952909][ T8499] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 755.965113][ T8499] usb 3-1: config 0 has no interface number 0 [ 755.984528][ T8499] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.987455][T19125] --map-set only usable from mangle table [ 755.996436][ T8499] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 756.037032][ T5731] usb 2-1: device descriptor read/64, error -71 [ 756.051740][ T8499] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 756.111317][ T8499] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.141933][ T8499] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 756.184936][ T8499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.212693][ T8499] usb 3-1: Product: syz [ 756.219983][ T8499] usb 3-1: Manufacturer: syz [ 756.224645][ T8499] usb 3-1: SerialNumber: syz [ 756.232607][ T8499] usb 3-1: config 0 descriptor?? [ 756.245086][ T8499] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input81 [ 756.255219][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.278763][ T5731] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 756.426918][ T986] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 756.434689][ T5731] usb 2-1: device descriptor read/64, error -71 [ 756.452527][ T8499] usb 3-1: USB disconnect, device number 33 [ 756.557764][ T5731] usb usb2-port1: attempt power cycle [ 756.596900][ T986] usb 6-1: Using ep0 maxpacket: 8 [ 756.607665][ T986] usb 6-1: config 31 has an invalid interface number: 197 but max is 0 [ 756.625281][ T986] usb 6-1: config 31 has no interface number 0 [ 756.640319][ T986] usb 6-1: config 31 interface 197 has no altsetting 0 [ 756.655533][ T986] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 756.667432][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.681096][ T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.695814][ T986] usb 6-1: Product: syz [ 756.703720][ T986] usb 6-1: Manufacturer: syz [ 756.712628][ T986] usb 6-1: SerialNumber: syz [ 756.807571][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.906963][ T5731] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 756.927769][ T5731] usb 2-1: device descriptor read/8, error -71 [ 757.167061][ T5731] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 757.208788][ T5731] usb 2-1: device descriptor read/8, error -71 [ 757.338044][ T5731] usb usb2-port1: unable to enumerate USB device [ 757.368490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.379531][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.494343][ T986] gspca_main: etoms-2.14.0 probing 102c:6151 [ 757.506280][T19147] netlink: 'syz.3.4182': attribute type 4 has an invalid length. [ 757.807509][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.848888][ T144] batadv2: left promiscuous mode [ 757.850121][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.887282][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.926972][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.174086][ T5684] usb 6-1: USB disconnect, device number 52 [ 759.268000][ T8499] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 759.448566][ T8499] usb 3-1: Using ep0 maxpacket: 8 [ 759.455838][ T8499] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 759.464397][ T8499] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 759.475606][ T8499] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 759.484900][ T8499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.646933][ T5684] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 759.807634][ T5684] usb 6-1: Using ep0 maxpacket: 32 [ 759.822297][ T5684] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 759.844898][ T5684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.867915][ T5684] usb 6-1: Product: syz [ 759.876620][ T5684] usb 6-1: Manufacturer: syz [ 759.886999][ T5684] usb 6-1: SerialNumber: syz [ 759.906679][ T5684] usb 6-1: config 0 descriptor?? [ 760.147447][T19185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.171695][T19185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.188853][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4194'. [ 760.346566][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4201'. [ 760.360465][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4201'. [ 760.402112][ T5684] airspy 6-1:0.0: Board ID: 00 [ 760.412021][ T5684] airspy 6-1:0.0: Firmware version: [ 760.497314][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 760.603225][ T5684] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 760.619074][ T5684] airspy 6-1:0.0: Registered as swradio24 [ 760.630542][ T5684] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 760.637078][ T24] usb 4-1: device descriptor read/64, error -71 [ 760.651916][ T5684] usb 6-1: USB disconnect, device number 53 [ 760.708682][ T986] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 760.876973][ T986] usb 2-1: Using ep0 maxpacket: 8 [ 760.886039][ T986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 760.895874][ T986] usb 2-1: config 113 has an invalid interface number: 22 but max is 0 [ 760.911523][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 760.919349][ T986] usb 2-1: config 113 has no interface number 0 [ 760.925827][ T986] usb 2-1: config 113 interface 22 has no altsetting 0 [ 760.936313][ T986] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=db.c1 [ 760.947952][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.956053][ T986] usb 2-1: Product: syz [ 760.962591][ T986] usb 2-1: Manufacturer: syz [ 760.967578][T15727] net_ratelimit: 4 callbacks suppressed [ 760.967592][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.982671][ T986] usb 2-1: SerialNumber: syz [ 761.057003][ T24] usb 4-1: device descriptor read/64, error -71 [ 761.160055][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.174006][ T24] usb usb4-port1: attempt power cycle [ 761.304984][ T986] mdc800 2-1:113.22: probe fails -> wrong Interface [ 761.329741][ T986] usb 2-1: USB disconnect, device number 111 [ 761.537030][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 761.556939][T15727] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 761.569581][ T24] usb 4-1: device descriptor read/8, error -71 [ 761.716915][T15727] usb 6-1: Using ep0 maxpacket: 8 [ 761.730102][T15727] usb 6-1: config 31 has an invalid interface number: 197 but max is 0 [ 761.746314][T15727] usb 6-1: config 31 has no interface number 0 [ 761.759170][T15727] usb 6-1: config 31 interface 197 has no altsetting 0 [ 761.773396][T15727] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 761.791678][T15727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.805097][T15727] usb 6-1: Product: syz [ 761.816925][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 761.824565][T15727] usb 6-1: Manufacturer: syz [ 761.837938][T15727] usb 6-1: SerialNumber: syz [ 761.869234][ T24] usb 4-1: device descriptor read/8, error -71 [ 761.987300][ T24] usb usb4-port1: unable to enumerate USB device [ 762.007321][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.055154][ T5684] usb 3-1: USB disconnect, device number 34 [ 762.307677][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.335531][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.636946][ T986] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 762.721305][T15727] gspca_main: etoms-2.14.0 probing 102c:6151 [ 762.769192][ T5684] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 762.807875][ T986] usb 3-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 1.00 [ 762.818940][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.845467][ T986] usb 3-1: Product: G [ 762.853463][ T986] usb 3-1: SerialNumber: syz [ 762.930559][ T5684] usb 5-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 1.00 [ 762.941573][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.956975][ T5684] usb 5-1: Product: G [ 762.965792][ T5684] usb 5-1: SerialNumber: syz [ 763.047429][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.136634][ T986] usb 3-1: selecting invalid altsetting 1 [ 763.258646][ T5684] usb 5-1: selecting invalid altsetting 1 [ 763.330394][ T986] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 763.330501][ T986] dvb_usb_lmedm04 3-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 763.368221][ T986] usb 3-1: USB disconnect, device number 35 [ 763.385896][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 763.409832][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 763.458297][ T5684] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 763.458423][ T5684] dvb_usb_lmedm04 5-1:1.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 763.460678][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.502517][ T5684] usb 5-1: USB disconnect, device number 105 [ 763.591228][ T29] audit: type=1326 audit(1786122585.513:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.1.4211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x0 [ 763.884565][T19256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 763.969773][ T8499] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 764.089315][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.127204][ T8499] usb 2-1: Using ep0 maxpacket: 8 [ 764.138900][ T8499] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 764.170246][ T8499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.192287][ T8499] usb 2-1: Product: syz [ 764.205456][T19269] loop2: detected capacity change from 0 to 7 [ 764.211927][ T8499] usb 2-1: Manufacturer: syz [ 764.222288][T19269] loop2: [ 764.222364][ T8499] usb 2-1: SerialNumber: syz [ 764.234825][T19269] loop2: partition table partially beyond EOD, truncated [ 764.264571][ T8499] usb 2-1: config 0 descriptor?? [ 764.352354][ T42] usb 6-1: USB disconnect, device number 54 [ 764.490436][ T8499] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 764.670573][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.708033][T19273] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 764.782939][T19273] netlink: 'syz.3.4220': attribute type 10 has an invalid length. [ 764.979661][ T4976] loop2: [ 764.987286][ T4976] loop2: partition table partially beyond EOD, truncated [ 765.230511][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.247369][T19280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.257388][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.274959][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.294545][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.306923][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.314641][ T5684] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 765.342139][ T5684] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [í>ÉÍ ³] on [ 766.167530][ T986] net_ratelimit: 3 callbacks suppressed [ 766.167544][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.177419][ T8499] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 766.283625][ T8499] usb 2-1: USB disconnect, device number 112 [ 766.849734][T19311] FAULT_INJECTION: forcing a failure. [ 766.849734][T19311] name failslab, interval 1, probability 0, space 0, times 0 [ 766.903091][T19311] CPU: 1 UID: 0 PID: 19311 Comm: syz.3.4229 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.903121][T19311] Tainted: [L]=SOFTLOCKUP [ 766.903127][T19311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.903135][T19311] Call Trace: [ 766.903139][T19311] [ 766.903144][T19311] dump_stack_lvl+0xe8/0x150 [ 766.903165][T19311] should_fail_ex+0x40c/0x560 [ 766.903181][T19311] should_failslab+0xa8/0x100 [ 766.903197][T19311] __kmalloc_cache_noprof+0xa8/0x660 [ 766.903211][T19311] ? snd_seq_port_connect+0x6b/0x430 [ 766.903223][T19311] ? snd_seq_port_connect+0x6b/0x430 [ 766.903238][T19311] snd_seq_port_connect+0x6b/0x430 [ 766.903248][T19311] ? do_raw_read_unlock+0x3d/0x80 [ 766.903259][T19311] ? _raw_read_unlock+0x28/0x50 [ 766.903273][T19311] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 766.903290][T19311] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 766.903309][T19311] snd_seq_oss_midi_open+0x415/0x890 [ 766.903327][T19311] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 766.903345][T19311] ? rcu_is_watching+0x15/0xb0 [ 766.903361][T19311] ? __kasan_kmalloc+0x93/0xb0 [ 766.903379][T19311] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 766.903400][T19311] snd_seq_oss_open+0x94f/0xf40 [ 766.903414][T19311] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 766.903443][T19311] ? rcu_is_watching+0x15/0xb0 [ 766.903457][T19311] ? trace_contention_end+0x3d/0x140 [ 766.903483][T19311] ? __pfx___mutex_lock+0x10/0x10 [ 766.903499][T19311] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 766.903511][T19311] ? __pfx_free_devinfo+0x10/0x10 [ 766.903522][T19311] ? do_raw_spin_unlock+0xf5/0x210 [ 766.903534][T19311] ? soundcore_open+0x2da/0x490 [ 766.903548][T19311] odev_open+0x67/0xa0 [ 766.903559][T19311] chrdev_open+0x4d9/0x600 [ 766.903571][T19311] ? __pfx_chrdev_open+0x10/0x10 [ 766.903581][T19311] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 766.903599][T19311] ? __pfx_chrdev_open+0x10/0x10 [ 766.903609][T19311] do_dentry_open+0x816/0x1380 [ 766.903627][T19311] vfs_open+0x3b/0x340 [ 766.903637][T19311] ? path_openat+0x2e2d/0x3830 [ 766.903653][T19311] path_openat+0x2e44/0x3830 [ 766.903670][T19311] ? kasan_save_track+0x3e/0x80 [ 766.903686][T19311] ? do_sys_openat2+0xcc/0x200 [ 766.903703][T19311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.903728][T19311] do_file_open+0x23e/0x4a0 [ 766.903745][T19311] ? __pfx_do_file_open+0x10/0x10 [ 766.903771][T19311] ? _raw_spin_unlock+0x28/0x50 [ 766.903781][T19311] ? alloc_fd+0x651/0x6c0 [ 766.903798][T19311] do_sys_openat2+0x115/0x200 [ 766.903812][T19311] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.903825][T19311] ? ksys_write+0x242/0x270 [ 766.903840][T19311] ? __pfx_ksys_write+0x10/0x10 [ 766.903861][T19311] ? fput+0xa0/0xd0 [ 766.903880][T19311] __x64_sys_openat+0x138/0x170 [ 766.903894][T19311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.903904][T19311] do_syscall_64+0x174/0x580 [ 766.903917][T19311] ? trace_irq_disable+0x3b/0x140 [ 766.903929][T19311] ? clear_bhb_loop+0x70/0xc0 [ 766.903942][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.903951][T19311] RIP: 0033:0x7fcb8999e0d9 [ 766.903962][T19311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.903970][T19311] RSP: 002b:00007fcb8a862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.903982][T19311] RAX: ffffffffffffffda RBX: 00007fcb89c25fa0 RCX: 00007fcb8999e0d9 [ 766.903989][T19311] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 766.903996][T19311] RBP: 00007fcb8a862090 R08: 0000000000000000 R09: 0000000000000000 [ 766.904002][T19311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.904008][T19311] R13: 00007fcb89c26038 R14: 00007fcb89c25fa0 R15: 00007fcb89d4fa48 [ 766.904023][T19311] [ 767.276592][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.334837][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.086984][ T986] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 768.240126][ T986] usb 4-1: config 0 has no interfaces? [ 768.250381][ T986] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 768.272187][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.295806][ T986] usb 4-1: config 0 descriptor?? [ 768.413702][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.440820][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.537496][T15560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.660251][T15727] usb 4-1: USB disconnect, device number 18 [ 768.791387][T19342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4238'. [ 769.082803][T19354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4242'. [ 769.130894][T19358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4243'. [ 769.325341][T19362] vivid-000: disconnect [ 769.329285][ T29] audit: type=1326 audit(1786122591.223:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.408719][T19365] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4245'. [ 769.420340][ T29] audit: type=1326 audit(1786122591.223:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.455353][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.486720][ T29] audit: type=1326 audit(1786122591.223:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.521105][ T29] audit: type=1326 audit(1786122591.223:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.545998][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.586999][ T29] audit: type=1326 audit(1786122591.223:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.667445][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 769.691409][ T29] audit: type=1326 audit(1786122591.233:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e5d95e90e code=0x7ffc0000 [ 769.717040][T19375] ucma_write: process 596 (syz.3.4246) changed security contexts after opening file descriptor, this is not allowed. [ 769.777812][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.826659][ T29] audit: type=1326 audit(1786122591.233:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 769.953852][T19388] xt_hl: Unknown TTL match mode: 178 [ 769.964132][ T29] audit: type=1326 audit(1786122591.233:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 770.010158][T19359] vivid-000: reconnect [ 770.073269][ T29] audit: type=1326 audit(1786122591.243:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 770.095199][T19369] could not allocate digest TFM handle sha3-224-ce [ 770.155750][T19392] netlink: Conntrack attr type has unexpected length (type=7, length=5, expected=0) [ 770.193371][ T29] audit: type=1326 audit(1786122591.243:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.5.4244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99e0d9 code=0x7ffc0000 [ 770.248297][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'. [ 770.786950][T15727] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 770.889450][ T986] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 770.938877][ T986] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 770.951073][T15727] usb 6-1: Using ep0 maxpacket: 32 [ 770.983088][T15727] usb 6-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 771.026023][T15727] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.041675][ T42] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 771.073493][T19412] fido_id[19412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 771.105620][T15727] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 771.136164][T15727] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 771.174757][T15727] usb 6-1: Product: syz [ 771.183735][T19414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.186208][T15727] usb 6-1: Manufacturer: syz [ 771.221979][T15727] usb 6-1: SerialNumber: syz [ 771.239329][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.240470][T19414] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 771.257032][T15727] usb 6-1: config 0 descriptor?? [ 771.280557][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.314455][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.319297][T19416] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 771.327755][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.343499][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.372136][T19414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4258'. [ 771.383595][ T42] usb 4-1: config 0 descriptor?? [ 771.393676][T19414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4258'. [ 771.448815][ T10] net_ratelimit: 3 callbacks suppressed [ 771.448833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.531853][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.707876][T19403] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4255'. [ 771.732230][T19429] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4263'. [ 771.836688][T19432] bridge3: entered promiscuous mode [ 771.844816][T19403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.864310][T19432] bridge3: entered allmulticast mode [ 771.892225][T19403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.921506][T19432] team0: Port device bridge3 added [ 771.984283][ T5684] usb 6-1: USB disconnect, device number 55 [ 772.050220][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.064396][T19441] ÿ: renamed from dummy0 (while UP) [ 772.570563][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.723675][T19455] autofs4:pid:19455:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 773.188340][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.326940][ T986] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 773.497670][ T986] usb 6-1: Using ep0 maxpacket: 8 [ 773.513843][ T986] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 773.540355][ T986] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.557223][ T986] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.569457][ T986] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.583656][ T986] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.597362][ T986] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 773.606467][ T986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.615033][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.863292][ T986] usb 6-1: GET_CAPABILITIES returned 0 [ 773.885636][ T986] usbtmc 6-1:16.0: can't read capabilities [ 774.298962][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.344811][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4282'. [ 774.413039][T19490] netlink: 'syz.4.4283': attribute type 1 has an invalid length. [ 774.436992][T19490] netlink: 'syz.4.4283': attribute type 3 has an invalid length. [ 774.455517][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4284'. [ 774.466733][T19490] macsec1: entered promiscuous mode [ 774.472457][T19490] macsec1: entered allmulticast mode [ 774.476902][ T986] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 774.499226][ T8499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.638509][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 774.648465][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.662345][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.679105][ T986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.680415][T19501] fuse: Bad value for 'rootmode' [ 774.698225][ T986] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.722205][ T986] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.741381][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.760737][ T986] usb 2-1: Product: syz [ 774.771284][ T986] usb 2-1: Manufacturer: syz [ 774.780843][ T986] usb 2-1: SerialNumber: syz [ 774.806006][ T986] usb 2-1: skipping empty audio interface (v1) [ 774.916347][ T986] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 775.010088][T16030] udevd[16030]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.210862][T19506] syzkaller0: entered promiscuous mode [ 775.227700][T19506] syzkaller0: entered allmulticast mode [ 775.811410][T19521] netlink: 'syz.2.4294': attribute type 238 has an invalid length. [ 776.057801][ T8499] usb 6-1: USB disconnect, device number 56 [ 776.355630][T19532] FAULT_INJECTION: forcing a failure. [ 776.355630][T19532] name failslab, interval 1, probability 0, space 0, times 0 [ 776.416940][T19532] CPU: 0 UID: 0 PID: 19532 Comm: syz.5.4298 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.416968][T19532] Tainted: [L]=SOFTLOCKUP [ 776.416974][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.416984][T19532] Call Trace: [ 776.416992][T19532] [ 776.417000][T19532] dump_stack_lvl+0xe8/0x150 [ 776.417029][T19532] should_fail_ex+0x40c/0x560 [ 776.417052][T19532] should_failslab+0xa8/0x100 [ 776.417076][T19532] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 776.417097][T19532] ? fanotify_handle_event+0x1b47/0x4010 [ 776.417117][T19532] ? fanotify_handle_event+0x1b47/0x4010 [ 776.417142][T19532] fanotify_handle_event+0x1b47/0x4010 [ 776.417181][T19532] ? __pfx_fanotify_handle_event+0x10/0x10 [ 776.417209][T19532] ? fsnotify+0x863/0x1e40 [ 776.417232][T19532] ? fsnotify+0x863/0x1e40 [ 776.417262][T19532] ? __pfx_fanotify_handle_event+0x10/0x10 [ 776.417285][T19532] fsnotify+0x15d8/0x1e40 [ 776.417315][T19532] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 776.417353][T19532] ? fsnotify+0x863/0x1e40 [ 776.417376][T19532] ? __pfx_fsnotify+0x10/0x10 [ 776.417417][T19532] fsnotify_inode+0xf0/0x130 [ 776.417444][T19532] vfs_unlink+0x352/0x6d0 [ 776.417468][T19532] filename_unlinkat+0x3cd/0x610 [ 776.417489][T19532] ? __pfx_filename_unlinkat+0x10/0x10 [ 776.417514][T19532] ? do_getname+0x151/0x250 [ 776.417533][T19532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.417554][T19532] __se_sys_unlinkat+0x83/0x1a0 [ 776.417571][T19532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.417587][T19532] do_syscall_64+0x174/0x580 [ 776.417608][T19532] ? trace_irq_disable+0x3b/0x140 [ 776.417627][T19532] ? clear_bhb_loop+0x70/0xc0 [ 776.417648][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.417666][T19532] RIP: 0033:0x7f5e5d99e0d9 [ 776.417684][T19532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.417699][T19532] RSP: 002b:00007f5e5bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 776.417719][T19532] RAX: ffffffffffffffda RBX: 00007f5e5dc25fa0 RCX: 00007f5e5d99e0d9 [ 776.417732][T19532] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 776.417744][T19532] RBP: 00007f5e5bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 776.417755][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.417765][T19532] R13: 00007f5e5dc26038 R14: 00007f5e5dc25fa0 R15: 00007f5e5dd4fa48 [ 776.417795][T19532] [ 776.667214][T15560] net_ratelimit: 2 callbacks suppressed [ 776.667228][T15560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.711652][T19535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.720458][T19535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.748530][T19535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.764786][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.787652][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.787916][ T42] usbhid 4-1:0.0: can't add hid device: -32 [ 776.839249][T19535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.888634][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 777.021861][T19542] syz.2.4301: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 777.038965][T19542] CPU: 0 UID: 0 PID: 19542 Comm: syz.2.4301 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.038997][T19542] Tainted: [L]=SOFTLOCKUP [ 777.039004][T19542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.039015][T19542] Call Trace: [ 777.039023][T19542] [ 777.039030][T19542] dump_stack_lvl+0xe8/0x150 [ 777.039063][T19542] warn_alloc+0x24c/0x270 [ 777.039100][T19542] ? __pfx_warn_alloc+0x10/0x10 [ 777.039132][T19542] ? __mutex_trylock_common+0x15f/0x270 [ 777.039160][T19542] __vmalloc_node_range_noprof+0x12c/0x1730 [ 777.039180][T19542] ? rcu_is_watching+0x15/0xb0 [ 777.039203][T19542] ? trace_contention_end+0x3d/0x140 [ 777.039229][T19542] ? __mutex_lock+0x30d/0x1550 [ 777.039257][T19542] ? tomoyo_path_number_perm+0x219/0x5f0 [ 777.039283][T19542] ? tomoyo_path_number_perm+0x219/0x5f0 [ 777.039307][T19542] ? dvb_dvr_do_ioctl+0x76/0x220 [ 777.039331][T19542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 777.039350][T19542] ? do_vfs_ioctl+0x116f/0x1530 [ 777.039374][T19542] ? get_signal+0x10dd/0x12c0 [ 777.039392][T19542] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 777.039416][T19542] vmalloc_noprof+0xb2/0xe0 [ 777.039439][T19542] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 777.039465][T19542] dvb_dvr_do_ioctl+0x12b/0x220 [ 777.039493][T19542] dvb_usercopy+0x199/0x2e0 [ 777.039512][T19542] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 777.039535][T19542] ? __pfx_dvb_usercopy+0x10/0x10 [ 777.039564][T19542] ? __fget_files+0x3a2/0x420 [ 777.039588][T19542] ? __fget_files+0x2a/0x420 [ 777.039616][T19542] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 777.039641][T19542] dvb_dvr_ioctl+0x29/0x40 [ 777.039666][T19542] __se_sys_ioctl+0xfc/0x170 [ 777.039685][T19542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.039704][T19542] do_syscall_64+0x174/0x580 [ 777.039730][T19542] ? clear_bhb_loop+0x70/0xc0 [ 777.039751][T19542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.039768][T19542] RIP: 0033:0x7fde68d9e0d9 [ 777.039788][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.039805][T19542] RSP: 002b:00007fde69c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.039827][T19542] RAX: ffffffffffffffda RBX: 00007fde69025fa0 RCX: 00007fde68d9e0d9 [ 777.039842][T19542] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 777.039859][T19542] RBP: 00007fde68e35024 R08: 0000000000000000 R09: 0000000000000000 [ 777.039872][T19542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.039884][T19542] R13: 00007fde69026038 R14: 00007fde69025fa0 R15: 00007fde6914fa48 [ 777.039916][T19542] [ 777.041262][T19542] Mem-Info: [ 777.213265][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 777.213412][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 777.332323][T19542] active_anon:8665 inactive_anon:0 isolated_anon:0 [ 777.332323][T19542] active_file:2 inactive_file:18985 isolated_file:0 [ 777.332323][T19542] unevictable:186 dirty:107 writeback:0 [ 777.332323][T19542] slab_reclaimable:11774 slab_unreclaimable:156133 [ 777.332323][T19542] mapped:32151 shmem:715 pagetables:1512 [ 777.332323][T19542] sec_pagetables:0 bounce:0 [ 777.332323][T19542] kernel_misc_reclaimable:0 [ 777.332323][T19542] free:1277018 free_pcp:9846 free_cma:0 [ 777.429144][ T42] usb 2-1: USB disconnect, device number 113 [ 777.527070][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.552089][T19542] Node 0 active_anon:35260kB inactive_anon:0kB active_file:8kB inactive_file:75812kB unevictable:744kB isolated(anon):0kB isolated(file):0kB mapped:132804kB dirty:428kB writeback:0kB shmem:2860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14296kB pagetables:6024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 777.768253][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.776740][T19542] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 777.838608][T19542] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 777.874072][T19542] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 777.883540][T19542] Node 0 DMA32 free:1149672kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36132kB inactive_anon:0kB active_file:8kB inactive_file:75820kB unevictable:744kB writepending:448kB zspages:0kB present:3129332kB managed:2548652kB mlocked:0kB bounce:0kB free_pcp:38684kB local_pcp:20328kB free_cma:0kB [ 777.923604][T19542] lowmem_reserve[]: 0 0 0 0 0 [ 777.923692][T19563] netlink: 'syz.1.4307': attribute type 238 has an invalid length. [ 778.034327][T19542] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.081296][T19542] lowmem_reserve[]: 0 0 0 0 0 [ 778.087531][T19542] Node 1 Normal free:3942976kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 778.119591][T19542] lowmem_reserve[]: 0 0 0 0 0 [ 778.125036][T19542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 778.149268][T15560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.196472][T19542] Node 0 DMA32: 1422*4kB (UME) 794*8kB (UM) 102*16kB (UME) 732*32kB (UME) 303*64kB (UME) 239*128kB (UME) 129*256kB (ME) 62*512kB (UM) 20*1024kB (UME) 11*2048kB (UME) 233*4096kB (UM) = 1149224kB [ 778.223295][T19542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 778.311141][T19542] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 16*16kB (UM) 14*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (M) 960*4096kB (UM) = 3942976kB [ 778.338772][T19542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.386659][T19542] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 778.425197][T19542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 778.449710][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 778.460707][T19542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 778.497952][T19542] 19693 total pagecache pages [ 778.519055][T19542] 0 pages in swap cache [ 778.540178][T19542] Free swap = 124996kB [ 778.554473][T19542] Total swap = 124996kB [ 778.581082][T19542] 2097051 pages RAM [ 778.595117][T19542] 0 pages HighMem/MovableOnly [ 778.604995][T19542] 428208 pages reserved [ 778.631822][T19542] 0 pages cma reserved [ 778.747585][T19578] program syz.1.4311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.813224][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.833599][T19580] SET target dimension over the limit! [ 779.006962][T15727] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 779.158837][T15727] usb 2-1: config 0 has no interfaces? [ 779.177565][T15727] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 779.187686][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 779.197034][T15727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.206631][T15727] usb 2-1: Product: syz [ 779.212300][T15727] usb 2-1: Manufacturer: syz [ 779.217744][T15727] usb 2-1: SerialNumber: syz [ 779.242953][T15727] usb 2-1: config 0 descriptor?? [ 779.258979][T15560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.374000][T19589] input: syz1 as /devices/virtual/input/input82 [ 779.589142][T19578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.628140][T19578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.681333][T19602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4318'. [ 779.769577][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.852148][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.066663][T19609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4321'. [ 780.332782][T19618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.372391][T19618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.748219][T19631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4325'. [ 780.818603][T19618] bond2: entered allmulticast mode [ 781.545124][ T42] IPVS: starting estimator thread 0... [ 781.670097][T19655] IPVS: using max 39 ests per chain, 93600 per kthread [ 781.911310][ T5684] usb 2-1: USB disconnect, device number 114 [ 781.962812][T15727] net_ratelimit: 4 callbacks suppressed [ 781.962829][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.026926][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 782.045863][ T12] IPVS: stop unused estimator thread 0... [ 782.105992][T19672] netlink: 'syz.5.4340': attribute type 1 has an invalid length. [ 782.202463][T19672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.217601][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 782.228779][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 782.248603][ T10] usb 5-1: config 0 has no interface number 0 [ 782.254765][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 782.265056][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 782.275710][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.283998][ T10] usb 5-1: Product: syz [ 782.288729][ T10] usb 5-1: Manufacturer: syz [ 782.293372][ T10] usb 5-1: SerialNumber: syz [ 782.307200][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 782.307215][ T29] audit: type=1326 audit(1786122604.223:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.3.4342" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fcb89997e57 code=0x0 [ 782.342949][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.370224][ T10] usb 5-1: config 0 descriptor?? [ 782.448375][T19677] bond1: (slave veth5): Enslaving as an active interface with a down link [ 782.601445][T19672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.617993][T19672] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.647890][T19672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.698257][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.747129][T19672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.763943][T19672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.789857][T19672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 782.812492][T19672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.843204][T19672] veth1_vlan: left promiscuous mode [ 782.854133][T19672] veth0_vlan: left promiscuous mode [ 782.867869][T19672] veth0_vlan: entered promiscuous mode [ 782.882343][T19672] veth1_vlan: entered promiscuous mode [ 782.908735][T19672] veth1_macvtap: left promiscuous mode [ 782.920739][T19672] veth0_macvtap: left promiscuous mode [ 782.942045][T19672] veth0_macvtap: entered promiscuous mode [ 782.963774][T19672] veth1_macvtap: entered promiscuous mode [ 782.970654][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.994304][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.016630][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.031785][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.070201][T19672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.216121][T19684] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 783.231525][T19684] bond1: (slave batadv1): making interface the new active one [ 783.261389][T19684] batadv1: entered promiscuous mode [ 783.281587][T19684] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 783.347285][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.354443][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.370557][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.377739][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.619778][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.638462][ T6646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.817821][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.917211][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.935846][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.973767][ T6646] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 783.985029][ T5684] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 784.007204][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.027735][ T6646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.087014][T15727] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 784.158855][T19707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.169250][ T5684] usb 6-1: Using ep0 maxpacket: 32 [ 784.181394][ T5684] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 784.191126][T19707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.199314][ T5684] usb 6-1: config 0 has no interface number 0 [ 784.206386][ T5684] usb 6-1: config 0 interface 184 has no altsetting 0 [ 784.222133][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4350'. [ 784.223024][ T5684] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 784.247723][ T5684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.256021][ T5684] usb 6-1: Product: syz [ 784.260385][T15727] usb 2-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 784.260837][ T5684] usb 6-1: Manufacturer: syz [ 784.276342][ T5684] usb 6-1: SerialNumber: syz [ 784.279911][T15727] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.284650][ T5684] usb 6-1: config 0 descriptor?? [ 784.307782][T15727] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 784.319813][T15727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.330750][T15727] usb 2-1: Product: syz [ 784.335400][T15727] usb 2-1: Manufacturer: syz [ 784.342581][T15727] usb 2-1: SerialNumber: syz [ 784.356348][T15727] usb 2-1: 0:1 : does not exist [ 784.565067][T19705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.581784][T19705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.628436][ T29] audit: type=1326 audit(1786122606.553:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.670694][ T29] audit: type=1326 audit(1786122606.553:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.697553][ T29] audit: type=1326 audit(1786122606.553:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.699751][T15727] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 784.772701][ T29] audit: type=1326 audit(1786122606.573:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.801755][ T29] audit: type=1326 audit(1786122606.573:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.814199][T15727] usb 2-1: unit 13 not found! [ 784.852551][ T29] audit: type=1326 audit(1786122606.573:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.884617][ T29] audit: type=1326 audit(1786122606.583:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.927865][ T29] audit: type=1326 audit(1786122606.583:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.955164][ T29] audit: type=1326 audit(1786122606.583:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19704 comm="syz.1.4349" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 784.979950][ T5684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 784.996506][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.007703][ T5684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 785.049982][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.095878][ T10] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 785.118485][T15727] usb 2-1: USB disconnect, device number 115 [ 785.129040][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 785.170715][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 785.194811][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 785.250817][T16082] udevd[16082]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.274515][ T10] usb 5-1: USB disconnect, device number 106 [ 785.527662][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.933771][ T5684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 785.956952][ T5684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 785.982102][ T5684] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 786.008888][ T5684] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 786.088508][ T5684] usb 6-1: USB disconnect, device number 57 [ 786.607133][T15727] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 786.687560][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 786.771477][T15727] usb 5-1: config 17 has an invalid interface number: 255 but max is 0 [ 786.794200][T15727] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 786.844782][T15727] usb 5-1: config 17 has no interface number 0 [ 786.868175][T15727] usb 5-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 786.894995][T19761] binder: 19752:19761 ioctl c0306201 2000000004c0 returned -14 [ 786.928608][T15727] usb 5-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 786.977337][T15727] usb 5-1: config 17 interface 255 has no altsetting 0 [ 787.005068][T15727] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 787.036421][T15727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.071736][T15727] aiptek 5-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 787.127485][ T24] net_ratelimit: 3 callbacks suppressed [ 787.127516][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.247352][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.101365][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.169059][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.363464][T19787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4374'. [ 788.387291][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.629975][T19799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.644137][T19799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.717012][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 788.837025][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 788.866911][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 788.866963][ T42] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 788.879931][ T10] usb 3-1: config 31 has an invalid interface number: 197 but max is 0 [ 788.879959][ T10] usb 3-1: config 31 has no interface number 0 [ 788.879987][ T10] usb 3-1: config 31 interface 197 has no altsetting 0 [ 788.881947][ T10] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 788.947824][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 788.947840][ T29] audit: type=1800 audit(1786122610.863:8434): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4379" name="/" dev="fuse" ino=1 res=0 errno=0 [ 788.951224][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.986233][ T10] usb 3-1: Product: syz [ 788.986655][T19806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.993665][ T10] usb 3-1: Manufacturer: syz [ 788.999518][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 789.004389][ T10] usb 3-1: SerialNumber: syz [ 789.017042][ T24] usb 2-1: config 31 has an invalid interface number: 197 but max is 0 [ 789.017564][T19806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.036113][ T24] usb 2-1: config 31 has no interface number 0 [ 789.043902][ T24] usb 2-1: config 31 interface 197 has no altsetting 0 [ 789.066905][ T24] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 789.082729][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.090913][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 789.101488][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 789.111237][ T24] usb 2-1: Product: syz [ 789.124238][ T24] usb 2-1: Manufacturer: syz [ 789.125073][T19806] loop4: detected capacity change from 0 to 524287964 [ 789.135638][ T24] usb 2-1: SerialNumber: syz [ 789.142713][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 789.171591][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 789.198248][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 789.211089][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.228397][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 789.245560][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 789.262792][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 789.295627][ T42] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 789.309926][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.323887][ T42] usb 6-1: Product: syz [ 789.333152][ T42] usb 6-1: Manufacturer: syz [ 789.355345][ T42] usb 6-1: SerialNumber: syz [ 789.399347][ T42] usb 6-1: config 0 descriptor?? [ 789.430218][T19798] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 789.446131][T19798] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 789.487070][ T8499] usb 5-1: USB disconnect, device number 107 [ 789.490242][ T42] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.507855][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.690692][ T8499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.832882][ T42] usb 6-1: USB disconnect, device number 58 [ 790.009888][T19815] udevd[19815]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.228660][ T10] gspca_main: etoms-2.14.0 probing 102c:6151 [ 790.257132][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.356226][ T24] gspca_main: etoms-2.14.0 probing 102c:6151 [ 790.648481][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.986716][ T24] videodev: could not get a free minor [ 791.012343][ T24] gspca_main: video_register_device err -23 [ 791.018587][ T42] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 791.036949][ T24] etoms 2-1:31.197: probe with driver etoms failed with error -23 [ 791.176837][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 791.188580][ T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 791.216934][ T42] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 791.246980][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.277015][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.304327][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 791.328671][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 791.351366][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.376620][ T42] usbtmc 5-1:16.0: bulk endpoints not found [ 792.272806][ T8499] usb 3-1: USB disconnect, device number 37 [ 792.336512][ T42] net_ratelimit: 3 callbacks suppressed [ 792.336529][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.402288][ T5731] usb 2-1: USB disconnect, device number 116 [ 792.477231][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 792.659441][ T24] usb 6-1: config 17 has an invalid interface number: 255 but max is 0 [ 792.685751][ T24] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 792.719636][ T24] usb 6-1: config 17 has no interface number 0 [ 792.738531][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.747998][ T24] usb 6-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 792.782965][ T24] usb 6-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 792.819072][ T24] usb 6-1: config 17 interface 255 has no altsetting 0 [ 792.826115][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 792.847627][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.874176][ T24] aiptek 6-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 792.897632][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.912316][T19861] netlink: 'syz.1.4394': attribute type 11 has an invalid length. [ 792.940809][T19863] netlink: 'syz.2.4395': attribute type 1 has an invalid length. [ 793.018363][T19863] bond2: entered promiscuous mode [ 793.032727][T19863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.061269][T19867] ipvlan2: entered allmulticast mode [ 793.080381][T19867] bond2: entered allmulticast mode [ 793.162755][T19863] bond2: (slave bridge1): making interface the new active one [ 793.191815][T19863] bridge1: entered promiscuous mode [ 793.205172][T19863] bridge1: entered allmulticast mode [ 793.229781][T19863] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 793.268689][T19867] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 793.344157][ T29] audit: type=1326 audit(1786122615.263:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.369943][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.440477][ T29] audit: type=1326 audit(1786122615.293:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.481374][ T29] audit: type=1326 audit(1786122615.293:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.516148][ T29] audit: type=1326 audit(1786122615.293:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.544536][ T29] audit: type=1326 audit(1786122615.293:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.570561][ T29] audit: type=1326 audit(1786122615.293:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.597869][ T29] audit: type=1326 audit(1786122615.313:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.694838][ T29] audit: type=1326 audit(1786122615.313:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.764976][T19875] netlink: 'syz.2.4398': attribute type 10 has an invalid length. [ 793.785904][ T10] usb 5-1: USB disconnect, device number 108 [ 793.806309][T19875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4398'. [ 793.822799][ T29] audit: type=1326 audit(1786122615.313:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19865 comm="syz.1.4396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1379e0d9 code=0x7ffc0000 [ 793.852692][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.905144][T19875] ÿ: entered promiscuous mode [ 793.919816][T19875] bridge0: port 1(5ÿ) entered blocking state [ 793.950513][T19875] bridge0: port 1(5ÿ) entered disabled state [ 793.976554][T19875] ÿ: entered allmulticast mode [ 794.005680][T19875] bridge0: port 1(5ÿ) entered blocking state [ 794.012072][T19875] bridge0: port 1(5ÿ) entered forwarding state [ 794.080828][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.124062][T19883] netlink: 'syz.3.4401': attribute type 32 has an invalid length. [ 794.408889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.527939][ T58] batadv1: left promiscuous mode [ 794.986723][T19908] Invalid option length (210) for dns_resolver key [ 795.216280][T19917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4390'. [ 795.231562][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.305365][T19921] tipc: Enabling of bearer rejected, failed to enable media [ 795.431702][ T8499] usb 6-1: USB disconnect, device number 59 [ 795.447156][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.490771][T19913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4407'. [ 795.756231][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 795.756243][ T29] audit: type=1326 audit(1786122617.673:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.800512][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.809710][ T29] audit: type=1326 audit(1786122617.713:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.837619][ T29] audit: type=1326 audit(1786122617.713:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.866877][ T29] audit: type=1326 audit(1786122617.713:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.893402][ T8499] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 795.919831][ T29] audit: type=1326 audit(1786122617.713:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.945564][ T29] audit: type=1326 audit(1786122617.713:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 795.986938][ T29] audit: type=1326 audit(1786122617.713:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 796.016716][ T29] audit: type=1326 audit(1786122617.713:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 796.049460][ T29] audit: type=1326 audit(1786122617.713:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 796.086925][ T8499] usb 6-1: Using ep0 maxpacket: 8 [ 796.098129][ T8499] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 796.106688][ T8499] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 796.118361][ T29] audit: type=1326 audit(1786122617.713:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.2.4412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde68d9e0d9 code=0x7ffc0000 [ 796.144905][ T8499] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.155125][ T8499] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.195385][ T8499] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 796.212359][ T8499] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.285023][ T8499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.358274][ T8499] usbtmc 6-1:16.0: bulk endpoints not found [ 796.472309][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4417'. [ 796.484960][T19946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4417'. [ 796.598728][ T5731] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 796.671913][T19948] FAULT_INJECTION: forcing a failure. [ 796.671913][T19948] name failslab, interval 1, probability 0, space 0, times 0 [ 796.727868][T19948] CPU: 0 UID: 0 PID: 19948 Comm: syz.1.4418 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.727898][T19948] Tainted: [L]=SOFTLOCKUP [ 796.727904][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.727914][T19948] Call Trace: [ 796.727921][T19948] [ 796.727929][T19948] dump_stack_lvl+0xe8/0x150 [ 796.727959][T19948] should_fail_ex+0x40c/0x560 [ 796.727986][T19948] should_failslab+0xa8/0x100 [ 796.728011][T19948] __kmalloc_cache_noprof+0xa8/0x660 [ 796.728032][T19948] ? snd_seq_port_connect+0x6b/0x430 [ 796.728051][T19948] ? snd_seq_port_connect+0x6b/0x430 [ 796.728077][T19948] snd_seq_port_connect+0x6b/0x430 [ 796.728096][T19948] ? do_raw_read_unlock+0x3d/0x80 [ 796.728115][T19948] ? _raw_read_unlock+0x28/0x50 [ 796.728140][T19948] snd_seq_ioctl_subscribe_port+0x351/0x790 [ 796.728168][T19948] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 796.728214][T19948] snd_seq_oss_midi_open+0x558/0x890 [ 796.728245][T19948] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 796.728278][T19948] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 796.728312][T19948] ? snd_seq_oss_midi_get_addr+0x19e/0x260 [ 796.728371][T19948] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 796.728414][T19948] snd_seq_oss_open+0x94f/0xf40 [ 796.728444][T19948] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 796.728514][T19948] ? rcu_is_watching+0x15/0xb0 [ 796.728560][T19948] ? trace_contention_end+0x3d/0x140 [ 796.728603][T19948] ? __pfx___mutex_lock+0x10/0x10 [ 796.728661][T19948] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 796.728684][T19948] ? __pfx_free_devinfo+0x10/0x10 [ 796.728700][T19948] ? do_raw_spin_unlock+0xf5/0x210 [ 796.728719][T19948] ? soundcore_open+0x2da/0x490 [ 796.728738][T19948] odev_open+0x67/0xa0 [ 796.728754][T19948] chrdev_open+0x4d9/0x600 [ 796.728772][T19948] ? __pfx_chrdev_open+0x10/0x10 [ 796.728786][T19948] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 796.728811][T19948] ? __pfx_chrdev_open+0x10/0x10 [ 796.728825][T19948] do_dentry_open+0x816/0x1380 [ 796.728850][T19948] vfs_open+0x3b/0x340 [ 796.728864][T19948] ? path_openat+0x2e2d/0x3830 [ 796.728886][T19948] path_openat+0x2e44/0x3830 [ 796.728909][T19948] ? kasan_save_track+0x3e/0x80 [ 796.728926][T19948] ? do_sys_openat2+0xcc/0x200 [ 796.728942][T19948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.728973][T19948] do_file_open+0x23e/0x4a0 [ 796.728997][T19948] ? __pfx_do_file_open+0x10/0x10 [ 796.729033][T19948] ? _raw_spin_unlock+0x28/0x50 [ 796.729047][T19948] ? alloc_fd+0x651/0x6c0 [ 796.729072][T19948] do_sys_openat2+0x115/0x200 [ 796.729091][T19948] ? __pfx_do_sys_openat2+0x10/0x10 [ 796.729108][T19948] ? ksys_write+0x242/0x270 [ 796.729129][T19948] ? __pfx_ksys_write+0x10/0x10 [ 796.729150][T19948] __x64_sys_openat+0x138/0x170 [ 796.729175][T19948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.729189][T19948] do_syscall_64+0x174/0x580 [ 796.729208][T19948] ? clear_bhb_loop+0x70/0xc0 [ 796.729225][T19948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.729239][T19948] RIP: 0033:0x7f5b1379e0d9 [ 796.729253][T19948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.729264][T19948] RSP: 002b:00007f5b1473b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 796.729281][T19948] RAX: ffffffffffffffda RBX: 00007f5b13a25fa0 RCX: 00007f5b1379e0d9 [ 796.729293][T19948] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 796.729303][T19948] RBP: 00007f5b1473b090 R08: 0000000000000000 R09: 0000000000000000 [ 796.729312][T19948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.729320][T19948] R13: 00007f5b13a26038 R14: 00007f5b13a25fa0 R15: 00007f5b13b4fa48 [ 796.729343][T19948] [ 797.110651][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4419'. [ 797.126963][ T5731] usb 5-1: Using ep0 maxpacket: 32 [ 797.133873][ T5731] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 797.233438][ T5731] usb 5-1: config 2 has no interface number 0 [ 797.254818][ T5731] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 797.286950][ T5731] usb 5-1: config 2 interface 88 has no altsetting 0 [ 797.305692][ T5731] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 797.328666][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 797.351102][T19957] Cannot find map_set index 0 as target [ 797.361939][ T5731] usb 5-1: Product: syz [ 797.370674][ T5731] usb 5-1: Manufacturer: syz [ 797.389146][ T5731] usb 5-1: SerialNumber: syz [ 797.406674][T19941] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 797.440933][T19963] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4424'. [ 797.486181][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 797.496411][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4425'. [ 797.503138][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.535285][ T42] net_ratelimit: 3 callbacks suppressed [ 797.535301][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.617352][T19941] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 797.683879][T19975] input: syz1 as /devices/virtual/input/input85 [ 797.772671][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.104795][T19994] netlink: 'syz.1.4433': attribute type 10 has an invalid length. [ 798.116279][T19994] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4433'. [ 798.153632][T19994] bond0: entered promiscuous mode [ 798.168799][T19994] bond_slave_0: entered promiscuous mode [ 798.185789][T19994] bond_slave_1: entered promiscuous mode [ 798.567570][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.817478][ T8499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.865885][ T5731] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 798.897249][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.933612][ T5731] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 798.973381][ T10] usb 6-1: USB disconnect, device number 60 [ 799.043412][ T5731] asix 5-1:2.88: probe with driver asix failed with error -71 [ 799.160308][ T5731] usb 5-1: USB disconnect, device number 109 [ 799.356302][T20013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4440'. [ 799.441800][T20015] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4441'. [ 799.490654][T20015] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.498253][T20015] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.607331][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.616234][T20019] xt_nfacct: accounting object `' does not exist [ 799.617964][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.037313][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.070650][T20030] ip6t_rpfilter: unknown options [ 800.478524][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4451'. [ 800.647480][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.702331][T20055] syzkaller0: entered promiscuous mode [ 800.719008][T20055] syzkaller0: entered allmulticast mode [ 800.791515][T20055] 0: reclassify loop, rule prio 0, protocol 800 [ 801.348964][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4459'. [ 801.506920][T20068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.536508][T20068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.571047][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'. [ 801.581303][T20068] vivid-006: disconnect [ 801.606701][T20067] vivid-006: reconnect [ 802.076926][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 802.114932][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4470'. [ 802.257113][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 802.283885][ T10] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.343504][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 802.368469][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0d69, bcdDevice= 0.00 [ 802.407143][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.448439][ T10] usb 3-1: config 0 descriptor?? [ 802.584751][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4474'. [ 802.727746][ T5731] net_ratelimit: 8 callbacks suppressed [ 802.727766][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.149523][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 803.149536][ T29] audit: type=1326 audit(1786122625.073:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.249091][ T29] audit: type=1326 audit(1786122625.073:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.350546][ T29] audit: type=1326 audit(1786122625.103:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.459029][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.483885][ T29] audit: type=1326 audit(1786122625.103:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.571912][ T29] audit: type=1326 audit(1786122625.103:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.708273][ T29] audit: type=1326 audit(1786122625.103:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.767783][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.838702][ T29] audit: type=1326 audit(1786122625.103:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 803.991272][ T29] audit: type=1326 audit(1786122625.103:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 804.072890][ T29] audit: type=1326 audit(1786122625.103:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 804.164305][ T29] audit: type=1326 audit(1786122625.103:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971039e0d9 code=0x7ffc0000 [ 804.648045][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.796112][T20134] netlink: 'syz.3.4482': attribute type 1 has an invalid length. [ 804.815103][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.862161][T20132] netlink: 'syz.3.4482': attribute type 2 has an invalid length. [ 804.887509][ T5684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.911422][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4482'. [ 804.920608][ T8499] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 805.089432][ T8499] usb 5-1: not running at top speed; connect to a high speed hub [ 805.134087][ T8499] usb 5-1: config 2 has an invalid interface number: 85 but max is 0 [ 805.189064][ T8499] usb 5-1: config 2 has no interface number 0 [ 805.214045][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 805.223417][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4485'. [ 805.225078][ T8499] usb 5-1: config 2 interface 85 has no altsetting 0 [ 805.262081][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 805.330034][ T10] usb 3-1: USB disconnect, device number 38 [ 805.341484][ T8499] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 805.363804][ T8499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.387281][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.424045][ T8499] usb 5-1: Product: syz [ 805.433909][ T8499] usb 5-1: Manufacturer: syz [ 805.464671][ T8499] usb 5-1: SerialNumber: syz [ 805.520611][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'. [ 805.700407][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 805.769439][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.847363][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.866945][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 805.893871][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.926562][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.955053][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 805.981376][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.044142][ T10] usb 3-1: config 0 descriptor?? [ 806.829946][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.293383][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.300664][ C0] bridge0: topology change detected, propagating [ 807.307297][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.314555][ C0] bridge0: topology change detected, propagating [ 808.445279][ T5691] net_ratelimit: 1 callbacks suppressed [ 808.445295][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.727927][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.746530][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.695264][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.147925][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.276781][ C0] sched: DL replenish lagged too much [ 821.080161][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 821.086233][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 821.382937][ T8499] gspca_main: conex-2.14.0 probing 0572:0041 [ 821.429967][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.198178][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 822.360436][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.900119][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.026088][ T10] usb 3-1: USB disconnect, device number 39 [ 823.931324][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 824.111886][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.894254][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.918246][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.867010][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.814312][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.938862][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.024012][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.178649][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.059378][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.080466][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.436366][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.852219][T15210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.734887][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.363140][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.025147][T15210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.833816][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.005377][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.614417][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.855523][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.139759][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.343274][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.757844][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.437010][T20160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.673750][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.794971][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.583416][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.391457][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.429696][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.813229][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.213512][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.677861][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.118500][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.299333][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.380491][ T8499] usb 5-1: USB disconnect, device number 110 [ 880.000200][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.871128][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.727050][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.972294][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.518208][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.332974][ T4976] udevd[4976]: worker [16939] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 887.216072][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.598463][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.789602][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.448454][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.867241][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.057293][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.594036][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.707527][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.479413][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.720842][T20165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.409885][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.250121][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.798758][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.864520][T20174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.689906][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.106301][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.338917][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.783016][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.803736][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.082920][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.273648][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.634432][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.055545][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.551706][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.849124][T20173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.357563][T20160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.399400][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.465044][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.607066][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.245941][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.305195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.579447][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.172971][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.712919][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.011746][T20165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.534846][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 977.558984][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.416719][T20177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.223576][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.312065][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.332619][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.659195][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.096612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.477839][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1063.382967][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.666815][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1064.673795][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10646/1:b..l [ 1064.682413][ C1] rcu: (detected by 1, t=10502 jiffies, g=157569, q=1166972 ncpus=2) [ 1064.690572][ C1] task:syz-executor state:R running task stack:21656 pid:10646 tgid:10646 ppid:10644 task_flags:0x400140 flags:0x00080000 [ 1064.705822][ C1] Call Trace: [ 1064.709121][ C1] [ 1064.712067][ C1] __schedule+0x17d9/0x56c0 [ 1064.716601][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1064.721828][ C1] ? __pfx___schedule+0x10/0x10 [ 1064.726708][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1064.731756][ C1] irqentry_exit+0x14f/0x8f0 [ 1064.736364][ C1] ? trace_irq_disable+0x3b/0x140 [ 1064.741408][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.747397][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x29/0x40 [ 1064.753653][ C1] Code: 90 f3 0f 1e fa 31 c0 83 3d 63 9c 86 04 00 74 1d 83 3d 3a ce 86 04 00 74 14 65 48 8b 0d f8 04 9c 07 31 c0 83 b9 9c 0b 00 00 00 <0f> 94 c0 e9 bf fc 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1064.773266][ C1] RSP: 0018:ffffc90003cf74b8 EFLAGS: 00000246 [ 1064.779351][ C1] RAX: 0000000000000000 RBX: ffffc90003cf7578 RCX: ffff888052fc5d00 [ 1064.787340][ C1] RDX: ffffc90003cf7501 RSI: dffffc0000000000 RDI: ffffc90003cf7570 [ 1064.795319][ C1] RBP: 1ffffffff21f7701 R08: ffffc90003cf7918 R09: 0000000000000000 [ 1064.803299][ C1] R10: ffffc90003cf75b8 R11: fffff5200079eeb9 R12: ffffc90003cf0000 [ 1064.811281][ C1] R13: ffffffff8177827f R14: ffffc90003cf7568 R15: ffffc90003cf7928 [ 1064.819264][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1064.824402][ C1] unwind_next_frame+0x1b5d/0x2550 [ 1064.829528][ C1] ? __slab_free+0x274/0x2c0 [ 1064.834142][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1064.839271][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1064.845443][ C1] arch_stack_walk+0x11b/0x150 [ 1064.850239][ C1] ? qlist_free_all+0x99/0x100 [ 1064.855022][ C1] stack_trace_save+0xa9/0x100 [ 1064.859799][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1064.865184][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1064.870148][ C1] save_stack+0x122/0x230 [ 1064.874501][ C1] ? __pfx_save_stack+0x10/0x10 [ 1064.879361][ C1] ? page_ext_get+0x22/0x2e0 [ 1064.883958][ C1] ? __free_frozen_pages+0xc1e/0xd10 [ 1064.889253][ C1] ? __slab_free+0x274/0x2c0 [ 1064.893867][ C1] ? page_ext_put+0x97/0xc0 [ 1064.898392][ C1] __reset_page_owner+0x71/0x1f0 [ 1064.903352][ C1] __free_frozen_pages+0xc1e/0xd10 [ 1064.908488][ C1] ? __free_slab+0x172/0x280 [ 1064.913097][ C1] __slab_free+0x274/0x2c0 [ 1064.917540][ C1] qlist_free_all+0x99/0x100 [ 1064.922144][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1064.927182][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1064.932655][ C1] __kasan_slab_alloc+0x22/0x80 [ 1064.937524][ C1] __kmalloc_noprof+0x311/0x720 [ 1064.942387][ C1] ? rcu_is_watching+0x15/0xb0 [ 1064.947165][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1064.952196][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1064.957930][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 1064.963678][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 1064.969245][ C1] tomoyo_path_perm+0x283/0x560 [ 1064.974115][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1064.979155][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1064.984540][ C1] ? __x64_sys_openat+0x138/0x170 [ 1064.989620][ C1] security_inode_getattr+0x12b/0x310 [ 1064.995005][ C1] __x64_sys_newfstat+0x133/0x270 [ 1065.000048][ C1] ? do_sys_openat2+0x14e/0x200 [ 1065.004912][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 1065.010488][ C1] ? rcu_is_watching+0x15/0xb0 [ 1065.015276][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.021358][ C1] do_syscall_64+0x174/0x580 [ 1065.025965][ C1] ? trace_irq_disable+0x3b/0x140 [ 1065.031006][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1065.035698][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.041599][ C1] RIP: 0033:0x7f971039c6e7 [ 1065.046024][ C1] RSP: 002b:00007f971074ebf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1065.054537][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f971039c6e7 [ 1065.062521][ C1] RDX: 0000000000000000 RSI: 00007f971074ec00 RDI: 0000000000000003 [ 1065.070503][ C1] RBP: 00007f971074fdec R08: 0000000000000000 R09: 0000000000000000 [ 1065.078488][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f971074fe00 [ 1065.086467][ C1] R13: 00007f9710434474 R14: 00000000000c4bd1 R15: 00007f971074fe40 [ 1065.094467][ C1] [ 1069.170186][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.847669][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.873542][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog