last executing test programs: 9.692227947s ago: executing program 0 (id=1670): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8304050000000000200012800800010067747000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000400)={{[0xfffffffd, 0x8, 0x9, 0x8]}, 0x0, 0x3, 0x400, 0x0, &(0x7f0000000300)=[{{@_ha_fsid={[0x3, 0x9cc]}, {0x1, 0x6, 0x8000, 0x8}}, 0x5, 0x0, '/dev/virtual_nci\x00'}, {{@align=0x6, {0x4, 0x2, 0x6, 0x80000000}}, 0x100, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x401, 0x9]}, {0x2e65, 0x1, 0x2b4, 0x3ff}}, 0x200, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x3, 0x4]}, {0x0, 0xfff, 0x6, 0x3c3}}, 0x10c, 0x0, '-\x00'}, {{@align=0xd0, {0x2, 0x5, 0x9d2, 0x4}}, 0xfffffffe, 0x0, '@\'[\'\x00'}, {{@align=0xd26, {0x7ff, 0xfffe, 0x800, 0x3800000000000}}, 0x8, 0x0, ':[\x00'}]}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101440000"], 0xe4) close(0x3) 9.087633374s ago: executing program 0 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.773259202s ago: executing program 5 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) 7.613008148s ago: executing program 0 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x40014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000300), 0x2, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r4, &(0x7f0000000140)=""/250, 0xfa, 0x359) r5 = dup3(r3, r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2120, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r9, 0xf, 0x7929, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000480)=[@acquire], 0x0, 0x0, 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r13, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="dc000000000901080000000000000000010000040c00048008000140000000070c0004800800014000000c7c08000340000001ff740002001400018008000100ac1414bb08000200ac1e01011408018008000100ac1e010108000200ac1414bb2c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa06000340000300000c000280050001003a000000060003400000000008000340000000062c0002001400018008000100ac1414aa08000200ffffffff14000180080001000000000008000200ac1414bb"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000000)={0x6, 0x4, 0x7e73}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)=ANY=[@ANYBLOB="18bc000000010201010000000000e28cc1065c88021dae7cc7f695011d0ab8c29d8abd87d5c96000000004000180"], 0x18}}, 0x0) 7.568092667s ago: executing program 5 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.261025258s ago: executing program 1 (id=1686): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 7.146972882s ago: executing program 0 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.848830327s ago: executing program 5 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.766957538s ago: executing program 2 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 6.13316617s ago: executing program 1 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.72846104s ago: executing program 3 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) 4.872472179s ago: executing program 1 (id=1695): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x153042, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x1000000d, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e20, 0x0, @mcast2}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) 4.553746459s ago: executing program 4 (id=1696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[], 0x0) 4.467416351s ago: executing program 3 (id=1697): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 4.446538088s ago: executing program 4 (id=1698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3.976736919s ago: executing program 2 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x40014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000300), 0x2, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r4, &(0x7f0000000140)=""/250, 0xfa, 0x359) r5 = dup3(r3, r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2120, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r9, 0xf, 0x7929, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000480)=[@acquire], 0x0, 0x0, 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r13, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="dc000000000901080000000000000000010000040c00048008000140000000070c0004800800014000000c7c08000340000001ff740002001400018008000100ac1414bb08000200ac1e01011408018008000100ac1e010108000200ac1414bb2c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa06000340000300000c000280050001003a000000060003400000000008000340000000062c0002001400018008000100ac1414aa08000200ffffffff14000180080001000000000008000200ac1414bb"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000000)={0x6, 0x4, 0x7e73}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)=ANY=[@ANYBLOB="18bc000000010201010000000000e28cc1065c88021dae7cc7f695011d0ab8c29d8abd87d5c96000000004000180"], 0x18}}, 0x0) 3.520813513s ago: executing program 4 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.379920229s ago: executing program 2 (id=1701): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.308264649s ago: executing program 3 (id=1702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.263494061s ago: executing program 0 (id=1703): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24041410) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 2.787772893s ago: executing program 0 (id=1704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.713702537s ago: executing program 3 (id=1705): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2.603913413s ago: executing program 4 (id=1706): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8304050000000000200012800800010067747000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r3, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETPARENTS(r8, 0xc028583e, &(0x7f0000000400)={{[0xfffffffd, 0x8, 0x9, 0x8]}, 0x0, 0x3, 0x400, 0x0, &(0x7f0000000300)=[{{@_ha_fsid={[0x3, 0x9cc]}, {0x1, 0x6, 0x8000, 0x8}}, 0x5, 0x0, '/dev/virtual_nci\x00'}, {{@align=0x6, {0x4, 0x2, 0x6, 0x80000000}}, 0x100, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x401, 0x9]}, {0x2e65, 0x1, 0x2b4, 0x3ff}}, 0x200, 0x0, '/dev/virtual_nci\x00'}, {{@_ha_fsid={[0x3, 0x4]}, {0x0, 0xfff, 0x6, 0x3c3}}, 0x10c, 0x0, '-\x00'}, {{@align=0xd0, {0x2, 0x5, 0x9d2, 0x4}}, 0xfffffffe, 0x0, '@\'[\'\x00'}, {{@align=0xd26, {0x7ff, 0xfffe, 0x800, 0x3800000000000}}, 0x8, 0x0, ':[\x00'}]}) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101440000"], 0xe4) close(0x3) 1.693985365s ago: executing program 3 (id=1707): socket$xdp(0x2c, 0x3, 0x0) mkdir(0x0, 0x20) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 1.642119961s ago: executing program 5 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x18, &(0x7f0000000280)={0x20, 0xa, 0x53, {0x53, 0x7, "c97c40816f8ff680db2e4a172389cd949feb273b35ce760308c6d5c159e92dea7286f0ce9eea983a99a427ffe1c866820a29c77baef3723594f3052b3d718954e190873edcf960bd75782df39dc52c059d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc220000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 1.459901285s ago: executing program 1 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) 1.457237165s ago: executing program 2 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[], 0x0) 1.413039821s ago: executing program 4 (id=1711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.312330045s ago: executing program 3 (id=1712): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r3 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.189004317s ago: executing program 2 (id=1713): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB="696f636861727365743d63703934392c6769643d666f726765742c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303135343333302c6e6f7672732c6d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d3048bfc29ca6a6b607303030303030303030303030303036353533352c6e6f6164696e6963622c00"], 0x1, 0xc32, &(0x7f0000003a80)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, '\x00'}) r1 = fsmount(r0, 0x1, 0x81) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, 0x0, 0x40000100) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x2804206, &(0x7f0000000980), 0x1, 0xbd5, &(0x7f0000002080)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@nombcache}, {@jqfmt_vfsold}]}, 0x1, 0x57c, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0xa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x2, 0x7ff, {{0x38, 0x4, 0x3, 0x32, 0xe0, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x17, [@private=0xa010102]}, @cipso={0x86, 0x64, 0x2, [{0x0, 0xc, "4b36ee2bf70a9bf43141"}, {0x7, 0x6, "e2d6039a"}, {0x6, 0xe, "cb63201b94f1accd630f239c"}, {0x7, 0x9, "340711eb1fe6f7"}, {0x5, 0xa, "db25ed2eff18d91c"}, {0x1, 0x6, "4cf11d05"}, {0x6, 0x10, "225941d23d9b78183d60173060ad"}, {0x1, 0xe, "3ec7aa6dacaf6d0abfbd9af6"}, {0x0, 0x7, "fd9190745f"}]}, @ssrr={0x89, 0x1f, 0x88, [@remote, @rand_addr=0x64010102, @multicast1, @broadcast, @rand_addr=0x64010101, @private=0xa010100, @multicast1]}, @lsrr={0x83, 0x17, 0x32, [@local, @rand_addr=0x64010101, @multicast2, @empty, @remote]}, @lsrr={0x83, 0x7, 0x39, [@dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x1b, 0x7f, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010102]}, @noop, @generic={0x82, 0x2}]}}}}}) sendto$packet(r3, &(0x7f0000000180)="1003", 0x2, 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 963.040354ms ago: executing program 1 (id=1714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x40014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000300), 0x2, 0x80000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r4, &(0x7f0000000140)=""/250, 0xfa, 0x359) r5 = dup3(r3, r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2120, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r9, 0xf, 0x7929, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000480)=[@acquire], 0x0, 0x0, 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r13, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="dc000000000901080000000000000000010000040c00048008000140000000070c0004800800014000000c7c08000340000001ff740002001400018008000100ac1414bb08000200ac1e01011408018008000100ac1e010108000200ac1414bb2c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000aa06000340000300000c000280050001003a000000060003400000000008000340000000062c0002001400018008000100ac1414aa08000200ffffffff14000180080001000000000008000200ac1414bb"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000000)={0x6, 0x4, 0x7e73}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)=ANY=[@ANYBLOB="18bc000000010201010000000000e28cc1065c88021dae7cc7f695011d0ab8c29d8abd87d5c96000000004000180"], 0x18}}, 0x0) 698.050066ms ago: executing program 4 (id=1715): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 298.743792ms ago: executing program 5 (id=1716): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24041410) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 281.933994ms ago: executing program 2 (id=1717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="09f800", 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 213.755234ms ago: executing program 1 (id=1718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 0s ago: executing program 5 (id=1719): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) kernel console output (not intermixed with test programs): [ 192.749664][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.760862][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.834870][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 193.080622][ T748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.090277][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.107170][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.144842][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 193.180170][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 193.240001][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.388602][ T7976] loop2: detected capacity change from 0 to 2048 [ 193.400948][ T7976] udf: Bad value for 'rootdir' [ 193.456822][ T7976] loop2: detected capacity change from 0 to 4096 [ 193.506591][ T7976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.704126][ T10] usb 6-1: USB disconnect, device number 4 [ 193.715002][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.715119][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.739758][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.785114][ T5912] usb 2-1: USB disconnect, device number 3 [ 193.801736][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.549327][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.603'. [ 195.010023][ T7999] syzkaller0: entered promiscuous mode [ 195.037607][ T7999] syzkaller0: entered allmulticast mode [ 195.455079][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 195.462208][ T8015] netlink: 248 bytes leftover after parsing attributes in process `syz.3.613'. [ 195.497738][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 195.818680][ T8019] loop3: detected capacity change from 0 to 2048 [ 195.846712][ T8019] udf: Bad value for 'rootdir' [ 195.997566][ T5927] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 196.084517][ T8019] loop3: detected capacity change from 0 to 4096 [ 196.108062][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.175655][ T8019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.207566][ T5927] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.233448][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.244314][ T5927] usb 3-1: Product: syz [ 196.248605][ T5927] usb 3-1: Manufacturer: syz [ 196.253224][ T5927] usb 3-1: SerialNumber: syz [ 196.262430][ T5927] usb 3-1: config 0 descriptor?? [ 196.367508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.386703][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.407942][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.416015][ T10] usb 2-1: Product: syz [ 196.459164][ T10] usb 2-1: Manufacturer: syz [ 196.475996][ T10] usb 2-1: SerialNumber: syz [ 196.493740][ T5927] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.617394][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.636839][ T8029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.736057][ T10] net_ratelimit: 9 callbacks suppressed [ 196.736091][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 196.805418][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 196.838821][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 196.919044][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.953963][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 197.001567][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.010365][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.126817][ T5927] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 197.264891][ T8029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.916469][ T8029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.029642][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.038008][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.115233][ T8029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.197168][ T8052] nbd: must specify a size in bytes for the device [ 198.246893][ T8054] netlink: 248 bytes leftover after parsing attributes in process `syz.3.627'. [ 198.305121][ T69] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.367127][ T1126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.393434][ T1126] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.439882][ T69] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.823652][ T29] usb 2-1: USB disconnect, device number 4 [ 198.830128][ T6525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.839724][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.869305][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.904889][ T5851] usb 3-1: USB disconnect, device number 6 [ 198.909296][ T8071] xt_CT: No such helper "syz1" [ 199.120852][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.186016][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 199.442475][ T8092] tipc: Started in network mode [ 199.460857][ T8092] tipc: Node identity 4a268f2f9166, cluster identity 4711 [ 199.471137][ T8092] tipc: Enabled bearer , priority 0 [ 199.480042][ T8096] syzkaller0: entered promiscuous mode [ 199.485629][ T8096] syzkaller0: entered allmulticast mode [ 199.563403][ T8084] tipc: Resetting bearer [ 199.647954][ T8083] tipc: Resetting bearer [ 199.712165][ T8103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.638'. [ 199.725440][ T8083] tipc: Disabling bearer [ 200.754328][ T8110] nbd: must specify a size in bytes for the device [ 200.967842][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.642'. [ 201.121826][ T8117] netlink: 248 bytes leftover after parsing attributes in process `syz.5.645'. [ 201.359841][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'. [ 201.443566][ T8123] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.595854][ T8123] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.694762][ T6367] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.715529][ T8123] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.726004][ T5927] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 201.857657][ T6367] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.878727][ T6367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.888902][ T8123] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.893022][ T5927] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.923693][ T6367] usb 6-1: Product: syz [ 201.934939][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.945081][ T6367] usb 6-1: Manufacturer: syz [ 201.962508][ T5912] net_ratelimit: 7 callbacks suppressed [ 201.962536][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.963630][ T6367] usb 6-1: SerialNumber: syz [ 201.985609][ T5927] usb 5-1: Product: syz [ 201.994089][ T5927] usb 5-1: Manufacturer: syz [ 202.004124][ T5927] usb 5-1: SerialNumber: syz [ 202.027255][ T5927] usb 5-1: config 0 descriptor?? [ 202.244620][ T6367] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 202.269694][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.279179][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.297690][ T5927] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.306407][ T6367] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 202.323254][ T6367] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 202.345690][ T6367] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 202.357908][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.400321][ T8131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.409064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.467061][ T1098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.493405][ T1098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.533175][ T8131] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.647946][ T69] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.689279][ T8131] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.802307][ T1098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.906302][ T5927] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 202.961170][ T8131] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.113277][ T8131] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.203320][ T8139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.653'. [ 203.221321][ T162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.268274][ T162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.309800][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.318135][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.346147][ T162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.383674][ T1098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.974116][ T748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.136570][ T8150] loop1: detected capacity change from 0 to 2048 [ 204.168792][ T8150] udf: Bad value for 'rootdir' [ 204.429636][ T8150] loop1: detected capacity change from 0 to 4096 [ 204.438666][ T6367] usb 6-1: USB disconnect, device number 5 [ 204.514234][ T8155] nbd: must specify a size in bytes for the device [ 204.517099][ T8150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.832912][ T5951] usb 5-1: USB disconnect, device number 3 [ 204.849290][ T8160] netlink: 'syz.5.659': attribute type 1 has an invalid length. [ 204.856974][ T8160] netlink: 224 bytes leftover after parsing attributes in process `syz.5.659'. [ 205.174261][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.283427][ T8170] vlan3: entered allmulticast mode [ 205.584674][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 206.053472][ T8186] netlink: 64 bytes leftover after parsing attributes in process `syz.5.666'. [ 206.737592][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 206.902127][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 206.917559][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.947840][ T10] usb 6-1: Product: syz [ 206.952068][ T10] usb 6-1: Manufacturer: syz [ 206.956682][ T10] usb 6-1: SerialNumber: syz [ 207.237650][ T5924] net_ratelimit: 12 callbacks suppressed [ 207.237679][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.286917][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 207.327563][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 207.388126][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 207.407739][ T5927] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 207.469784][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 207.547998][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.556439][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.582184][ T5927] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.602279][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.631715][ T5927] usb 5-1: Product: syz [ 207.646089][ T5927] usb 5-1: Manufacturer: syz [ 207.659718][ T5927] usb 5-1: SerialNumber: syz [ 207.684095][ T5927] usb 5-1: config 0 descriptor?? [ 207.919182][ T5927] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.428172][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.434979][ T8227] syzkaller0: entered promiscuous mode [ 208.445479][ T8227] syzkaller0: entered allmulticast mode [ 208.502319][ T8224] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 208.525050][ T8224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.679'. [ 208.532004][ T5927] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 208.588038][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.596532][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.692117][ T8232] tipc: Enabled bearer , priority 0 [ 208.700260][ T8232] syzkaller0: entered promiscuous mode [ 208.705814][ T8232] syzkaller0: entered allmulticast mode [ 208.746215][ T8062] Set syz1 is full, maxelem 65536 reached [ 208.753060][ T8232] tipc: Resetting bearer [ 208.772567][ T8231] tipc: Resetting bearer [ 208.840992][ T8231] tipc: Disabling bearer [ 208.956486][ T8239] netlink: 64 bytes leftover after parsing attributes in process `syz.3.684'. [ 209.060212][ T8240] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.216117][ T8240] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.324089][ T8240] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.346341][ T8251] loop2: detected capacity change from 0 to 2048 [ 209.375129][ T8251] udf: Bad value for 'rootdir' [ 209.419997][ T10] usb 6-1: USB disconnect, device number 6 [ 209.525016][ T8240] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.566923][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 209.628535][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.637008][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.722775][ T8251] loop2: detected capacity change from 0 to 512 [ 209.732654][ T8251] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.784091][ T162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.811921][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.853507][ T8251] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.857183][ T162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.905681][ T8251] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.687: corrupted inode contents [ 209.941361][ T748] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.976732][ T8251] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #2: comm syz.2.687: mark_inode_dirty error [ 209.993569][ T1126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.015634][ T8251] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.687: corrupted inode contents [ 210.054190][ T8251] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.687: mark_inode_dirty error [ 210.092265][ T8273] EXT4-fs warning (device loop2): ext4_es_cache_extent:1079: inode #2: comm syz.2.687: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 210.092265][ T8273] [ 210.168461][ T8273] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.687: corrupted inode contents [ 210.203566][ T8273] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.687: mark_inode_dirty error [ 210.226971][ T8273] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 210.264618][ T5912] usb 5-1: USB disconnect, device number 4 [ 210.812910][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.815499][ T8280] netlink: 'syz.5.694': attribute type 1 has an invalid length. [ 210.830093][ T8280] netlink: 224 bytes leftover after parsing attributes in process `syz.5.694'. [ 211.060420][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.696'. [ 211.174321][ T8299] syzkaller0: entered promiscuous mode [ 211.195404][ T8299] syzkaller0: entered allmulticast mode [ 211.540591][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 211.660358][ T5967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 211.834354][ T5967] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.852614][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.876119][ T5967] usb 2-1: Product: syz [ 211.889594][ T5967] usb 2-1: Manufacturer: syz [ 211.902079][ T5967] usb 2-1: SerialNumber: syz [ 211.970612][ T8325] loop0: detected capacity change from 0 to 2048 [ 211.978630][ T8325] udf: Bad value for 'rootdir' [ 212.029208][ T8327] netlink: 156 bytes leftover after parsing attributes in process `syz.5.710'. [ 212.057676][ T5912] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 212.102752][ T8325] loop0: detected capacity change from 0 to 4096 [ 212.126419][ T5967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 212.151925][ T5967] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 212.172083][ T5967] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 212.181501][ T8325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.264036][ T5912] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.313676][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.349656][ T5912] usb 4-1: Product: syz [ 212.353866][ T5912] usb 4-1: Manufacturer: syz [ 212.413952][ T5912] usb 4-1: SerialNumber: syz [ 212.448296][ T5912] usb 4-1: config 0 descriptor?? [ 212.626318][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.669306][ T5912] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 212.758079][ T5905] net_ratelimit: 11 callbacks suppressed [ 212.758106][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.828333][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.843060][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.899994][ T8345] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 212.929210][ T8345] netlink: 224 bytes leftover after parsing attributes in process `syz.0.716'. [ 212.930987][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 213.054229][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.717'. [ 213.111282][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.719'. [ 213.278420][ T5912] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 213.515995][ T8368] netlink: 156 bytes leftover after parsing attributes in process `syz.4.724'. [ 213.557723][ T8368] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 213.866165][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 213.875005][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.884069][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.944928][ T8386] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 214.425784][ T5967] usb 2-1: USB disconnect, device number 5 [ 214.507801][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.830506][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.848011][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 214.908257][ T5924] usb 4-1: USB disconnect, device number 4 [ 214.914186][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.922697][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.271797][ T8434] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.404155][ T8439] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 215.775300][ T8434] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.797822][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.878623][ T5967] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.904715][ T8460] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 215.911325][ T8460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.956946][ T8460] vhci_hcd vhci_hcd.0: Device attached [ 216.027304][ T8463] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 216.033936][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.081180][ T5967] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 216.099488][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.110406][ T8434] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.120944][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 216.139911][ T5967] usb 5-1: Product: syz [ 216.144718][ T5967] usb 5-1: Manufacturer: syz [ 216.167672][ T5967] usb 5-1: SerialNumber: syz [ 216.277917][ T5924] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 216.748497][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 216.758250][ T8434] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.777549][ T5967] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 216.810231][ T8464] vhci_hcd: connection closed [ 216.813913][ T162] vhci_hcd vhci_hcd.2: stop threads [ 216.834800][ T8461] vhci_hcd: connection reset by peer [ 216.847715][ T162] vhci_hcd vhci_hcd.2: release socket [ 216.858101][ T162] vhci_hcd vhci_hcd.2: disconnect device [ 216.875527][ T162] vhci_hcd vhci_hcd.2: stop threads [ 216.877753][ T5967] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 216.884254][ T162] vhci_hcd vhci_hcd.2: release socket [ 216.898090][ T162] vhci_hcd vhci_hcd.2: disconnect device [ 217.065745][ T1126] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.087687][ T1126] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.108893][ T162] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.139907][ T162] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.287573][ T5967] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 217.453998][ T5967] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.473706][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.532963][ T5967] usb 1-1: Product: syz [ 217.548709][ T5967] usb 1-1: Manufacturer: syz [ 217.557779][ T5967] usb 1-1: SerialNumber: syz [ 217.573004][ T5967] usb 1-1: config 0 descriptor?? [ 217.807891][ T5967] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.024742][ T8495] __nla_validate_parse: 6 callbacks suppressed [ 218.024769][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'. [ 218.035789][ T29] net_ratelimit: 7 callbacks suppressed [ 218.035811][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.077102][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.313396][ T8500] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 218.331787][ T8500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.771'. [ 218.410350][ T5967] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 218.507740][ T5967] usb 5-1: USB disconnect, device number 5 [ 218.837910][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.059545][ T8523] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 219.066266][ T8523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.092447][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.123431][ T8523] vhci_hcd vhci_hcd.0: Device attached [ 219.150552][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.161176][ T8529] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 219.167724][ T8529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.180578][ T8529] vhci_hcd vhci_hcd.0: Device attached [ 219.313977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.325166][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.340200][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.350694][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.440242][ T5912] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 219.891264][ T8530] vhci_hcd: connection closed [ 219.891964][ T8524] vhci_hcd: connection reset by peer [ 219.902420][ T50] vhci_hcd vhci_hcd.3: stop threads [ 219.933349][ T50] vhci_hcd vhci_hcd.3: release socket [ 219.950750][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 219.972943][ T50] vhci_hcd vhci_hcd.3: stop threads [ 219.984458][ T50] vhci_hcd vhci_hcd.3: release socket [ 220.007619][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 220.120682][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.147797][ T5967] usb 1-1: USB disconnect, device number 2 [ 220.418754][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 220.690219][ T6367] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 220.892269][ T6367] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 220.902593][ T6367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.916634][ T6367] usb 2-1: Product: syz [ 220.921273][ T6367] usb 2-1: Manufacturer: syz [ 220.926481][ T6367] usb 2-1: SerialNumber: syz [ 220.951363][ T8566] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 221.042413][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 221.155705][ T8544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.167038][ T8566] bond1 (unregistering): Released all slaves [ 221.204233][ T6367] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 221.241922][ T6367] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.324560][ T6367] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 221.388227][ T5924] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 221.992275][ T8591] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 221.998226][ T6367] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 221.998891][ T8591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.001812][ T8591] vhci_hcd vhci_hcd.0: Device attached [ 222.150286][ T8591] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 222.156912][ T8591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.191670][ T6367] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.201680][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.207727][ T8591] vhci_hcd vhci_hcd.0: Device attached [ 222.217650][ T6367] usb 4-1: Product: syz [ 222.226337][ T6367] usb 4-1: Manufacturer: syz [ 222.256123][ T6367] usb 4-1: SerialNumber: syz [ 222.346728][ T5905] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 222.393637][ T6367] usb 4-1: config 0 descriptor?? [ 222.835210][ T6367] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.886822][ T8594] vhci_hcd: connection closed [ 222.888869][ T6525] vhci_hcd vhci_hcd.0: stop threads [ 222.900829][ T6525] vhci_hcd vhci_hcd.0: release socket [ 222.911007][ T8592] vhci_hcd: connection reset by peer [ 222.916688][ T6525] vhci_hcd vhci_hcd.0: disconnect device [ 222.926534][ T6525] vhci_hcd vhci_hcd.0: stop threads [ 222.939888][ T6525] vhci_hcd vhci_hcd.0: release socket [ 222.952589][ T6525] vhci_hcd vhci_hcd.0: disconnect device [ 222.972607][ T8598] tipc: Enabled bearer , priority 0 [ 222.989978][ T8598] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 223.010639][ T8598] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 223.055783][ T8598] tipc: Resetting bearer [ 223.315702][ T5951] net_ratelimit: 8 callbacks suppressed [ 223.315739][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.337921][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.399471][ T10] usb 2-1: USB disconnect, device number 6 [ 223.467696][ T6367] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 223.620104][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 223.865973][ T8413] Set syz1 is full, maxelem 65536 reached [ 224.067946][ T10] tipc: Node number set to 3678441263 [ 224.074421][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.813'. [ 224.320048][ T8632] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 224.355078][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.378284][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.453661][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.506747][ T8632] bond1 (unregistering): Released all slaves [ 224.577679][ T5912] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 224.596577][ T8648] tipc: Enabled bearer , priority 0 [ 224.638228][ T8649] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 224.647856][ T8652] syzkaller0: entered promiscuous mode [ 224.653381][ T8652] syzkaller0: entered allmulticast mode [ 224.659956][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.4.817'. [ 224.705806][ T8649] netlink: 658 bytes leftover after parsing attributes in process `syz.4.817'. [ 224.708710][ T8643] tipc: Resetting bearer [ 224.741146][ T8649] netlink: 1 bytes leftover after parsing attributes in process `syz.4.817'. [ 224.788664][ T8642] tipc: Resetting bearer [ 224.821759][ T10] usb 4-1: USB disconnect, device number 5 [ 224.878457][ T8642] tipc: Disabling bearer [ 224.917545][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.091790][ T5851] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 225.098936][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 225.110570][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.110618][ T5851] usb 2-1: Product: syz [ 225.110647][ T5851] usb 2-1: Manufacturer: syz [ 225.110675][ T5851] usb 2-1: SerialNumber: syz [ 225.150397][ T8674] netlink: 248 bytes leftover after parsing attributes in process `syz.5.825'. [ 225.366014][ T5851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 225.394324][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.402646][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.402969][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.423487][ T5851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 225.479881][ T5851] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 225.561776][ T5851] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 225.743326][ T8690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 226.277643][ T6367] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 226.355173][ T8715] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.838'. [ 226.416080][ T8717] binder: 8710:8717 ioctl 402c5639 200000000000 returned -22 [ 226.445941][ T6367] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.461732][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.470598][ T6367] usb 4-1: Product: syz [ 226.474939][ T6367] usb 4-1: Manufacturer: syz [ 226.480435][ T6367] usb 4-1: SerialNumber: syz [ 226.489925][ T6367] usb 4-1: config 0 descriptor?? [ 226.704972][ T6367] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 226.807569][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 226.862359][ T8718] tipc: Enabled bearer , priority 0 [ 226.888346][ T8719] syzkaller0: entered promiscuous mode [ 226.893899][ T8719] syzkaller0: entered allmulticast mode [ 226.999254][ T8728] ip6t_srh: unknown srh invflags BA61 [ 227.053799][ T8728] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.127702][ T8725] tipc: Resetting bearer [ 227.152286][ T8713] tipc: Resetting bearer [ 227.193433][ T8713] tipc: Disabling bearer [ 227.215931][ T8728] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.313364][ T6367] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 227.371843][ T8728] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.482956][ T8728] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.548993][ T5905] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 227.654908][ T6526] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.677890][ T6526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.702589][ T5851] usb 2-1: USB disconnect, device number 7 [ 227.817619][ T6525] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.826542][ T1098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.009314][ T8753] netlink: 'syz.5.850': attribute type 4 has an invalid length. [ 228.111510][ T8757] Cannot find add_set index 2 as target [ 228.415910][ T8774] binder: 8767:8774 ioctl 402c5639 200000000000 returned -22 [ 228.430945][ T5851] net_ratelimit: 12 callbacks suppressed [ 228.430970][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.516273][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.524937][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.533360][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.022461][ T8791] __nla_validate_parse: 3 callbacks suppressed [ 229.022490][ T8791] netlink: 248 bytes leftover after parsing attributes in process `syz.2.865'. [ 229.087988][ T5951] usb 4-1: USB disconnect, device number 6 [ 229.226039][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 229.269812][ T8799] netlink: 'syz.0.869': attribute type 4 has an invalid length. [ 229.562325][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.570515][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.579560][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.604353][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.612923][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.532918][ T8813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.540984][ T8813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.547062][ T8813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.553177][ T8813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.559258][ T8813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 230.565272][ T8813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.598564][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.647764][ T8848] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.885'. [ 230.693638][ T8848] binder: 8846:8848 ioctl 402c5639 200000000000 returned -22 [ 230.773875][ T8850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 230.867719][ T5951] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 231.034191][ T5951] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.066801][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.100607][ T5951] usb 5-1: Product: syz [ 231.104834][ T5951] usb 5-1: Manufacturer: syz [ 231.116468][ T5951] usb 5-1: SerialNumber: syz [ 231.140607][ T5951] usb 5-1: config 0 descriptor?? [ 231.213957][ T8864] tipc: Enabled bearer , priority 0 [ 231.222353][ T8864] syzkaller0: entered promiscuous mode [ 231.248784][ T8864] syzkaller0: entered allmulticast mode [ 231.296464][ T8863] tipc: Resetting bearer [ 231.368815][ T5951] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.381654][ T8863] tipc: Disabling bearer [ 231.464694][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 231.822895][ T8887] netlink: 'syz.0.902': attribute type 3 has an invalid length. [ 231.831424][ T8887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.902'. [ 232.143138][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 232.352570][ T8875] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.358738][ T8875] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.364843][ T8875] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.371189][ T8875] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.377393][ T8875] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 232.385925][ T8875] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.431405][ T5951] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 233.060411][ T8920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.142356][ T8926] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.911'. [ 233.189693][ T8920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.194070][ T8928] binder: 8921:8928 ioctl 402c5639 200000000000 returned -22 [ 233.278845][ T8920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.364111][ T8931] tipc: Enabled bearer , priority 0 [ 233.394925][ T8920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.438962][ T8931] syzkaller0: entered promiscuous mode [ 233.445459][ T8931] syzkaller0: entered allmulticast mode [ 233.554277][ T8930] tipc: Resetting bearer [ 233.573067][ T6367] usb 5-1: USB disconnect, device number 6 [ 233.612400][ T8930] tipc: Disabling bearer [ 233.750798][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.775282][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 233.784693][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.815903][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.854580][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.987640][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.919'. [ 234.256194][ T8936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.262524][ T8936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.268637][ T8936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.274734][ T8936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.280947][ T8936] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 234.287074][ T8936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.670036][ C0] net_ratelimit: 12 callbacks suppressed [ 234.670065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.707123][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.716613][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.747178][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.821096][ T8974] netlink: 'syz.2.930': attribute type 3 has an invalid length. [ 234.854012][ T8974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.930'. [ 234.982872][ T8984] tipc: Started in network mode [ 234.997602][ T8984] tipc: Node identity 080211000001, cluster identity 4711 [ 235.012716][ T8984] tipc: Enabled bearer , priority 0 [ 235.031100][ T8986] netlink: 248 bytes leftover after parsing attributes in process `syz.5.935'. [ 235.039342][ T8984] tipc: Resetting bearer [ 235.040423][ T5951] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 235.073631][ T8987] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.933'. [ 235.116395][ T8987] binder: 8981:8987 ioctl 402c5639 200000000000 returned -22 [ 235.230214][ T5951] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.260851][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.279104][ T5951] usb 2-1: Product: syz [ 235.290137][ T5951] usb 2-1: Manufacturer: syz [ 235.314038][ T5951] usb 2-1: SerialNumber: syz [ 235.331979][ T5951] usb 2-1: config 0 descriptor?? [ 235.551233][ T5951] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.949100][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.958869][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.969440][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.992681][ T8991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.999002][ T8991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.005259][ T8991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.011442][ T8991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.017778][ T8991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 236.023940][ T8991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.058121][ T5905] tipc: Node number set to 134418688 [ 236.254072][ T9023] netlink: 164 bytes leftover after parsing attributes in process `syz.2.948'. [ 236.611624][ T5951] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 236.719152][ T9029] syzkaller1: entered promiscuous mode [ 236.724688][ T9029] syzkaller1: entered allmulticast mode [ 237.006218][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.278060][ T9051] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.957'. [ 237.292906][ T9051] binder: 9044:9051 ioctl 402c5639 200000000000 returned -22 [ 237.307752][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.414136][ T9056] netlink: 248 bytes leftover after parsing attributes in process `syz.2.961'. [ 237.729265][ T30] usb 2-1: USB disconnect, device number 8 [ 237.869434][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.886741][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.973387][ T9072] tipc: Enabling of bearer rejected, already enabled [ 238.097985][ T9050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.104240][ T9050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.110406][ T9050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.118540][ T9050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 238.124615][ T9050] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.130851][ T9050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.735213][ T9086] xt_CT: No such helper "syz1" [ 239.190354][ T9111] netlink: 248 bytes leftover after parsing attributes in process `syz.3.975'. [ 239.389337][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.490409][ T5851] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 239.684818][ T5851] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.705150][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.724656][ T9123] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.978'. [ 239.737728][ T9121] binder: 9117:9121 ioctl 402c5639 200000000000 returned -22 [ 239.755365][ T5851] usb 6-1: Product: syz [ 239.768309][ T5851] usb 6-1: Manufacturer: syz [ 239.798115][ T6526] net_ratelimit: 13 callbacks suppressed [ 239.798151][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.819750][ T5851] usb 6-1: SerialNumber: syz [ 239.827167][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.838852][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.889750][ T5851] usb 6-1: config 0 descriptor?? [ 239.916500][ T9129] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 239.924773][ T9129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.980'. [ 240.032020][ T9129] can: request_module (can-proto-5) failed. [ 240.037431][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.124782][ T5851] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.194959][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.195003][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.201150][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.201200][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 240.204137][ T9135] tipc: Enabling of bearer rejected, already enabled [ 240.209571][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.216643][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 240.456438][ T9137] netem: change failed [ 240.648825][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.983'. [ 241.114436][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.154153][ T9162] netlink: 248 bytes leftover after parsing attributes in process `syz.2.990'. [ 241.257652][ T5851] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 241.672162][ T9171] tipc: Enabled bearer , priority 0 [ 241.680061][ T9171] syzkaller0: entered promiscuous mode [ 241.685558][ T9171] syzkaller0: entered allmulticast mode [ 241.713674][ T9170] tipc: Resetting bearer [ 241.722338][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.735135][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.744344][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.764877][ T9170] tipc: Disabling bearer [ 241.785013][ T9181] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.996'. [ 241.795718][ T9181] binder: 9176:9181 ioctl 402c5639 200000000000 returned -22 [ 242.189187][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.271161][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.280232][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 242.358809][ T30] usb 6-1: USB disconnect, device number 7 [ 242.754422][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.760668][ T9207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1002'. [ 242.809536][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 242.856431][ T9213] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1004'. [ 243.267338][ T9224] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1008'. [ 243.371971][ T9225] tipc: Enabled bearer , priority 0 [ 243.384819][ T9225] syzkaller0: entered promiscuous mode [ 243.407637][ T9225] syzkaller0: entered allmulticast mode [ 243.428335][ T9229] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 243.436116][ T9229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1010'. [ 243.457023][ T9225] tipc: Resetting bearer [ 243.497772][ T9223] tipc: Resetting bearer [ 243.600635][ T5951] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 243.661680][ T9223] tipc: Disabling bearer [ 243.953210][ T5951] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.977516][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.985579][ T5951] usb 3-1: Product: syz [ 244.003247][ T9246] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1014'. [ 244.017503][ T5951] usb 3-1: Manufacturer: syz [ 244.022142][ T5951] usb 3-1: SerialNumber: syz [ 244.039974][ T9246] binder: 9243:9246 ioctl 402c5639 200000000000 returned -22 [ 244.120652][ T5951] usb 3-1: config 0 descriptor?? [ 244.367850][ T5951] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 244.377236][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.831088][ T30] net_ratelimit: 3 callbacks suppressed [ 244.831127][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.098840][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 245.221182][ T9267] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.368294][ T5951] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 245.391578][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.477163][ T9267] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.550649][ T748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.562171][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.571135][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.593763][ T9083] Set syz1 is full, maxelem 65536 reached [ 245.634471][ T9267] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.666366][ T9286] tipc: Enabling of bearer rejected, already enabled [ 245.761620][ T9267] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.818868][ T9289] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 245.826785][ T9289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1028'. [ 245.867790][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.940265][ T9296] loop1: detected capacity change from 0 to 2048 [ 245.950248][ T9296] udf: Bad value for 'rootdir' [ 245.967978][ T162] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.047595][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.134483][ T9296] loop1: detected capacity change from 0 to 4096 [ 246.154686][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.181484][ T162] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.237079][ T9296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.431025][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.501627][ T30] usb 3-1: USB disconnect, device number 7 [ 246.694665][ T9319] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 246.701280][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.778261][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 246.822065][ T9319] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 246.828635][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.839734][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.849825][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.899471][ T9329] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.1034'. [ 246.924385][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 246.936065][ T9329] binder: 9320:9329 ioctl 402c5639 200000000000 returned -22 [ 247.027812][ T30] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 247.524744][ T9321] vhci_hcd: connection reset by peer [ 247.530724][ T9327] vhci_hcd: connection closed [ 247.531316][ T748] vhci_hcd vhci_hcd.3: stop threads [ 247.588653][ T748] vhci_hcd vhci_hcd.3: release socket [ 247.607621][ T748] vhci_hcd vhci_hcd.3: disconnect device [ 247.680815][ T748] vhci_hcd vhci_hcd.3: stop threads [ 247.686103][ T748] vhci_hcd vhci_hcd.3: release socket [ 247.736909][ T748] vhci_hcd vhci_hcd.3: disconnect device [ 247.796108][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.003087][ T9341] tipc: Enabled bearer , priority 0 [ 248.074417][ T9341] syzkaller0: entered promiscuous mode [ 248.113340][ T9341] syzkaller0: entered allmulticast mode [ 248.153745][ T9341] tipc: Resetting bearer [ 248.218282][ T9340] tipc: Resetting bearer [ 248.348489][ T9340] tipc: Disabling bearer [ 248.530944][ T9343] xt_CT: No such helper "syz1" [ 248.766750][ T9364] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 248.795167][ T9364] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1046'. [ 249.597888][ T5851] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 249.671930][ T9380] ip6t_srh: unknown srh invflags BA61 [ 249.678851][ T9380] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1050'. [ 249.741497][ T9381] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.785247][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.805981][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.821736][ T5851] usb 4-1: Product: syz [ 249.825985][ T5851] usb 4-1: Manufacturer: syz [ 249.830768][ T5851] usb 4-1: SerialNumber: syz [ 249.844517][ T5851] usb 4-1: config 0 descriptor?? [ 249.867952][ T5905] net_ratelimit: 110 callbacks suppressed [ 249.867975][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.955040][ T9381] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.965671][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.035327][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.049832][ T9381] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.065238][ T5851] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.252550][ T9381] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.390058][ T9390] loop5: detected capacity change from 0 to 2048 [ 250.401003][ T9390] udf: Bad value for 'rootdir' [ 250.535292][ T9390] loop5: detected capacity change from 0 to 4096 [ 250.594199][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.637761][ T1163] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.646101][ T1163] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.684714][ T9390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.696615][ T1163] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.752708][ T69] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.958987][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.068689][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.110448][ T5851] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 251.304689][ T9404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 251.311356][ T9404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.320104][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.331117][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.333101][ T9404] vhci_hcd vhci_hcd.0: Device attached [ 251.345640][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.387623][ T9409] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 251.394253][ T9409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.423537][ T9409] vhci_hcd vhci_hcd.0: Device attached [ 251.648400][ T5851] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 251.676505][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.030213][ T9410] vhci_hcd: connection closed [ 252.030625][ T69] vhci_hcd vhci_hcd.0: stop threads [ 252.052912][ T9406] vhci_hcd: connection reset by peer [ 252.071196][ T69] vhci_hcd vhci_hcd.0: release socket [ 252.082789][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 252.092429][ T69] vhci_hcd vhci_hcd.0: stop threads [ 252.098436][ T69] vhci_hcd vhci_hcd.0: release socket [ 252.104147][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 252.110430][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.227105][ T9422] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 252.235131][ T9422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1061'. [ 252.260327][ T30] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 252.407855][ T9428] tipc: Enabled bearer , priority 0 [ 252.459839][ T9428] syzkaller0: entered promiscuous mode [ 252.465344][ T9428] syzkaller0: entered allmulticast mode [ 252.475937][ T5905] usb 4-1: USB disconnect, device number 7 [ 252.664791][ T9427] tipc: Resetting bearer [ 252.674534][ T9433] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1064'. [ 252.880252][ T9427] tipc: Disabling bearer [ 253.415463][ T9456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1068'. [ 253.742396][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 254.383356][ T9473] tipc: Enabling of bearer rejected, already enabled [ 254.451006][ T9479] syzkaller1: entered promiscuous mode [ 254.462352][ T9479] syzkaller1: entered allmulticast mode [ 254.597554][ T30] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 254.656797][ T9483] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 254.663404][ T9483] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.700285][ T9483] vhci_hcd vhci_hcd.0: Device attached [ 254.722336][ T9488] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 254.728969][ T9488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.753036][ T9488] vhci_hcd vhci_hcd.0: Device attached [ 254.763098][ T30] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.777532][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.858357][ T30] usb 6-1: Product: syz [ 254.887031][ T30] usb 6-1: Manufacturer: syz [ 254.892728][ T5951] net_ratelimit: 254 callbacks suppressed [ 254.892755][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.953053][ T30] usb 6-1: SerialNumber: syz [ 255.159331][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.179053][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.238207][ T30] usb 6-1: config 0 descriptor?? [ 255.245593][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.401255][ T9489] vhci_hcd: connection closed [ 255.404496][ T6526] vhci_hcd vhci_hcd.0: stop threads [ 255.418543][ T6526] vhci_hcd vhci_hcd.0: release socket [ 255.431591][ T9484] vhci_hcd: connection closed [ 255.436666][ T9492] tipc: Enabling of bearer rejected, already enabled [ 255.453714][ T6526] vhci_hcd vhci_hcd.0: disconnect device [ 255.460425][ T6526] vhci_hcd vhci_hcd.0: stop threads [ 255.465790][ T6526] vhci_hcd vhci_hcd.0: release socket [ 255.476121][ T6526] vhci_hcd vhci_hcd.0: disconnect device [ 255.488599][ T30] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.636273][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.857250][ T9350] Set syz1 is full, maxelem 65536 reached [ 255.951408][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.959583][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.155815][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 256.268160][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.288541][ T9508] loop0: detected capacity change from 0 to 2048 [ 256.308894][ T9511] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1089'. [ 256.319867][ T9508] udf: Bad value for 'rootdir' [ 256.329333][ T9511] binder: 9506:9511 ioctl 402c5639 200000000000 returned -22 [ 256.364445][ T9514] tipc: Enabling of bearer rejected, already enabled [ 256.426354][ T9508] loop0: detected capacity change from 0 to 4096 [ 256.433929][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.445020][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.456795][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.501591][ T30] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 256.518959][ T9508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.780133][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.828978][ T5851] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 256.859550][ T9525] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 256.907820][ T9525] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1093'. [ 257.124875][ T9540] syzkaller1: entered promiscuous mode [ 257.130800][ T9540] syzkaller1: entered allmulticast mode [ 257.335378][ T9546] tipc: Enabling of bearer rejected, already enabled [ 257.546861][ T30] usb 6-1: USB disconnect, device number 8 [ 257.724217][ T9554] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 257.730791][ T9554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.793157][ T9554] vhci_hcd vhci_hcd.0: Device attached [ 257.839530][ T9558] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 257.846120][ T9558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.892747][ T9558] vhci_hcd vhci_hcd.0: Device attached [ 257.930598][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 258.045843][ T6367] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 258.277002][ T9555] vhci_hcd: connection reset by peer [ 258.282568][ T9559] vhci_hcd: connection closed [ 258.283128][ T6525] vhci_hcd vhci_hcd.5: stop threads [ 258.323761][ T6525] vhci_hcd vhci_hcd.5: release socket [ 258.333876][ T9568] xt_CT: No such helper "syz1" [ 258.343073][ T6525] vhci_hcd vhci_hcd.5: disconnect device [ 258.370245][ T6525] vhci_hcd vhci_hcd.5: stop threads [ 258.392489][ T6525] vhci_hcd vhci_hcd.5: release socket [ 258.400660][ T6525] vhci_hcd vhci_hcd.5: disconnect device [ 258.470511][ T9574] tipc: Enabled bearer , priority 0 [ 258.543175][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.552026][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.719894][ T9580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.747132][ T9580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.031867][ T9595] ip6t_srh: unknown srh invflags BA61 [ 259.039511][ T9595] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1111'. [ 259.122608][ T9580] tipc: Resetting bearer [ 259.160300][ T9573] tipc: Disabling bearer [ 259.179288][ T9581] vlan3: entered allmulticast mode [ 259.184765][ T9581] bridge0: port 3(vlan3) entered blocking state [ 259.191749][ T9581] bridge0: port 3(vlan3) entered disabled state [ 259.201120][ T9581] vlan3: entered promiscuous mode [ 259.231550][ T6525] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.241130][ T6525] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.252099][ T6525] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.264134][ T6525] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.330014][ T9595] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.401758][ T9601] tipc: Enabled bearer , priority 0 [ 259.409850][ T9599] syzkaller0: entered promiscuous mode [ 259.416966][ T9599] syzkaller0: entered allmulticast mode [ 259.426510][ T9606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1115'. [ 259.532317][ T9609] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 259.569938][ T9595] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.602901][ T9598] tipc: Resetting bearer [ 259.616853][ T9598] tipc: Disabling bearer [ 259.706514][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 259.740125][ T9611] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.753823][ T9611] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 259.799928][ T9595] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.874555][ T9613] bond1: (slave gretap1): making interface the new active one [ 259.888472][ T9613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 259.928673][ T9609] macvlan2: entered promiscuous mode [ 259.934108][ T9609] macvlan2: entered allmulticast mode [ 259.984107][ T9609] bond1: entered promiscuous mode [ 259.999549][ T9609] gretap1: entered promiscuous mode [ 260.005869][ T9609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.036907][ T9609] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 260.079277][ T9609] bond1: left promiscuous mode [ 260.084173][ T9609] gretap1: left promiscuous mode [ 260.109330][ T5951] net_ratelimit: 18 callbacks suppressed [ 260.109359][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.135863][ T9595] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.302574][ T6525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.386703][ T9630] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 260.393401][ T9630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.454810][ T9630] vhci_hcd vhci_hcd.0: Device attached [ 260.478731][ T9636] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 260.485355][ T9636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.495347][ T6525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.528089][ T6525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.550854][ T9636] vhci_hcd vhci_hcd.0: Device attached [ 260.568758][ T6525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.162691][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.189362][ T9645] tipc: Enabling of bearer rejected, already enabled [ 261.232203][ T9631] vhci_hcd: connection closed [ 261.232517][ T9639] vhci_hcd: connection closed [ 261.233602][ T748] vhci_hcd vhci_hcd.5: stop threads [ 261.261575][ T9646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1128'. [ 261.300599][ T748] vhci_hcd vhci_hcd.5: release socket [ 261.318361][ T748] vhci_hcd vhci_hcd.5: disconnect device [ 261.337583][ T748] vhci_hcd vhci_hcd.5: stop threads [ 261.342847][ T748] vhci_hcd vhci_hcd.5: release socket [ 261.386904][ T748] vhci_hcd vhci_hcd.5: disconnect device [ 261.527998][ T9653] tipc: Enabled bearer , priority 0 [ 261.544748][ T9653] syzkaller0: entered promiscuous mode [ 261.553920][ T9653] syzkaller0: entered allmulticast mode [ 261.561479][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 261.597417][ T9651] tipc: Resetting bearer [ 261.669024][ T9651] tipc: Disabling bearer [ 261.817909][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 262.011807][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 262.046412][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.054775][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.076242][ T30] usb 3-1: Product: syz [ 262.092323][ T30] usb 3-1: Manufacturer: syz [ 262.115944][ T30] usb 3-1: SerialNumber: syz [ 262.146361][ T9678] ip6t_srh: unknown srh invflags BA61 [ 262.168682][ T9678] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1141'. [ 262.188964][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.200021][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.208829][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.217035][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.347908][ T30] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 262.369186][ T30] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 262.370645][ T9678] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.380572][ T30] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 262.454066][ T9685] tipc: Enabled bearer , priority 0 [ 262.481179][ T30] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 262.493816][ T9685] tipc: Resetting bearer [ 262.574284][ T9684] tipc: Disabling bearer [ 262.601365][ T9678] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.658160][ T9691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1145'. [ 262.733755][ T9678] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.833030][ T9678] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.856517][ T9701] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1151'. [ 262.875438][ T9701] netlink: 'syz.4.1151': attribute type 2 has an invalid length. [ 262.919770][ T9699] netlink: 'syz.5.1150': attribute type 1 has an invalid length. [ 262.943296][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1150'. [ 263.080048][ T6526] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.103753][ T748] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.229946][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.311296][ T748] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.313610][ T6367] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 263.356653][ T6526] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.719454][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 263.866735][ T9733] block nbd1: not configured, cannot reconfigure [ 264.270266][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.320361][ T9752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1163'. [ 264.387623][ T9754] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1165'. [ 264.396719][ T9754] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 264.556403][ T5967] usb 3-1: USB disconnect, device number 8 [ 264.683921][ T9767] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 264.693235][ T9767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1167'. [ 264.752609][ T9774] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1169'. [ 264.843553][ T9775] binder: 9760:9775 ioctl 402c5639 200000000000 returned -22 [ 265.311337][ T6367] net_ratelimit: 1 callbacks suppressed [ 265.311364][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.379218][ T9794] lo: entered allmulticast mode [ 265.465505][ T9797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1180'. [ 265.654703][ T9805] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1182'. [ 265.696091][ T9805] netlink: 'syz.5.1182': attribute type 2 has an invalid length. [ 265.913001][ T9814] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1188'. [ 266.007747][ T6367] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 266.120259][ T9819] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 266.138631][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1189'. [ 266.189000][ T6367] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 266.199589][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.220566][ T6367] usb 4-1: Product: syz [ 266.229263][ T6367] usb 4-1: Manufacturer: syz [ 266.239537][ T6367] usb 4-1: SerialNumber: syz [ 266.358256][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.465145][ T6367] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 266.497875][ T6367] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 266.527729][ T6367] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 266.546718][ T6367] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 266.739805][ T9834] binder: 9832:9834 ioctl 402c5639 200000000000 returned -22 [ 266.873254][ T9846] netlink: 'syz.2.1200': attribute type 2 has an invalid length. [ 267.169914][ T9856] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.307308][ T9856] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 267.390975][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.696562][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.704366][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.801951][ T9878] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 267.949038][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.955249][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.958938][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.969824][ T9885] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 267.981630][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.996338][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.119059][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.173807][ T9868] vlan2: entered allmulticast mode [ 268.184642][ T9868] bridge0: port 3(vlan2) entered blocking state [ 268.191818][ T9868] bridge0: port 3(vlan2) entered disabled state [ 268.201440][ T9868] vlan2: entered promiscuous mode [ 268.320457][ T9888] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.360646][ T9888] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 268.380989][ T6526] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.389878][ T6526] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.410280][ T9889] bond1: (slave gretap1): making interface the new active one [ 268.418963][ T9889] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 268.432991][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.440505][ T9890] macvlan2: entered promiscuous mode [ 268.446688][ T9890] macvlan2: entered allmulticast mode [ 268.453143][ T9890] bond1: entered promiscuous mode [ 268.458655][ T9890] gretap1: entered promiscuous mode [ 268.464783][ T9890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.476603][ T9890] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 268.494328][ T9890] bond1: left promiscuous mode [ 268.499577][ T9895] __nla_validate_parse: 5 callbacks suppressed [ 268.499600][ T9895] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.1213'. [ 268.502689][ T9890] gretap1: left promiscuous mode [ 268.553430][ T6526] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.577802][ T6526] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.633386][ T9898] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1214'. [ 268.729555][ T6367] usb 4-1: USB disconnect, device number 8 [ 268.874351][ T9902] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1216'. [ 268.917535][ T9902] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 268.963467][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 268.992712][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1218'. [ 269.082953][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'. [ 269.094596][ T9913] tipc: Enabled bearer , priority 0 [ 269.149238][ T9913] tipc: Resetting bearer [ 269.300428][ T9907] tipc: Disabling bearer [ 269.468183][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.561617][ T9931] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 269.569962][ T9931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1228'. [ 269.729762][ T9942] loop3: detected capacity change from 0 to 2048 [ 269.750836][ T9942] udf: Bad value for 'rootdir' [ 269.986648][ T9942] loop3: detected capacity change from 0 to 512 [ 270.034677][ T9942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 270.133748][ T9949] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1232'. [ 270.169045][ T9942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.208517][ T9942] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.238441][ T9942] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1230: corrupted inode contents [ 270.251272][ T9942] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.1230: mark_inode_dirty error [ 270.317791][ T9954] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1231'. [ 270.347924][ T9942] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1230: corrupted inode contents [ 270.454909][ T9942] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1230: mark_inode_dirty error [ 270.504734][ T9955] EXT4-fs warning (device loop3): ext4_es_cache_extent:1079: inode #2: comm syz.3.1230: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 270.504734][ T9955] [ 270.529575][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.547533][ T9955] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1230: corrupted inode contents [ 270.596380][ T9955] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.1230: mark_inode_dirty error [ 270.641460][ T9955] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 271.157607][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.243715][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.326038][ T9980] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1245'. [ 271.367543][ T5924] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 271.435736][ T9984] ip6t_srh: unknown srh invflags BA61 [ 271.508011][ T5924] usb 1-1: device descriptor read/64, error -71 [ 271.549453][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.726151][ T9995] sctp: [Deprecated]: syz.5.1250 (pid 9995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.726151][ T9995] Use struct sctp_sack_info instead [ 271.767905][ T5924] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 271.907628][ T5924] usb 1-1: device descriptor read/64, error -71 [ 272.028724][ T5924] usb usb1-port1: attempt power cycle [ 272.387662][ T5924] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 272.401954][T10016] loop2: detected capacity change from 0 to 2048 [ 272.449161][ T5924] usb 1-1: device descriptor read/8, error -71 [ 272.467710][T10016] udf: Bad value for 'rootdir' [ 272.588941][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.696332][T10016] loop2: detected capacity change from 0 to 4096 [ 272.717619][ T5924] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 272.733742][T10016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.749713][ T5924] usb 1-1: device descriptor read/8, error -71 [ 272.862915][ T5924] usb usb1-port1: unable to enumerate USB device [ 273.338202][T10032] syzkaller0: entered promiscuous mode [ 273.345391][T10032] syzkaller0: entered allmulticast mode [ 273.639621][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.712187][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.190617][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.528776][T10076] __nla_validate_parse: 3 callbacks suppressed [ 274.528805][T10076] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1273'. [ 274.685533][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.722050][T10084] loop2: detected capacity change from 0 to 2048 [ 274.742925][T10084] udf: Bad value for 'rootdir' [ 274.976872][T10084] loop2: detected capacity change from 0 to 4096 [ 275.069604][T10084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.718160][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.777745][ T5905] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 275.937548][ T5905] usb 1-1: device descriptor read/64, error -71 [ 275.985980][T10104] syzkaller0: entered promiscuous mode [ 276.004473][T10104] syzkaller0: entered allmulticast mode [ 276.022782][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.208241][ T5905] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 276.367844][ T5905] usb 1-1: device descriptor read/64, error -71 [ 276.488032][ T5905] usb usb1-port1: attempt power cycle [ 276.754391][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.869020][ T5905] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 276.883548][T10136] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1297'. [ 276.911910][ T5905] usb 1-1: device descriptor read/8, error -71 [ 277.167762][ T5905] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 277.209430][ T5905] usb 1-1: device descriptor read/8, error -71 [ 277.233404][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.340461][ T5905] usb usb1-port1: unable to enumerate USB device [ 277.605572][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.795396][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.229012][T10175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.238110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.325448][T10175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.338365][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.438810][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.743171][T10181] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.842196][T10181] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.866410][T10196] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1323'. [ 278.968295][T10181] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.101379][T10181] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.221390][T10201] syzkaller0: entered promiscuous mode [ 279.228050][T10201] syzkaller0: entered allmulticast mode [ 279.967900][ T5851] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 280.110998][ T5851] usb 6-1: device descriptor read/64, error -71 [ 280.369769][ T5851] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 280.511380][ T5851] usb 6-1: device descriptor read/64, error -71 [ 280.602430][ T69] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.632668][ T5851] usb usb6-port1: attempt power cycle [ 280.658566][ T6525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.761407][ T69] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.780202][ T69] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.844478][T10230] loop2: detected capacity change from 0 to 2048 [ 280.860791][T10230] udf: Bad value for 'rootdir' [ 280.946418][ T6367] net_ratelimit: 16 callbacks suppressed [ 280.946445][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.997597][ T5851] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 281.060811][ T5851] usb 6-1: device descriptor read/8, error -71 [ 281.111693][T10230] loop2: detected capacity change from 0 to 4096 [ 281.168668][T10230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.317862][ T5851] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 281.382811][ T5851] usb 6-1: device descriptor read/8, error -71 [ 281.518364][ T5851] usb usb6-port1: unable to enumerate USB device [ 281.885027][T10257] ip6t_srh: unknown srh invflags BA61 [ 281.902787][T10257] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1344'. [ 281.955006][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.976570][T10257] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.109242][T10257] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.208234][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.210803][T10257] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.299660][T10257] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.596786][ T69] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.615541][ T69] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.672456][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.751903][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.864826][T10270] syzkaller0: entered promiscuous mode [ 282.870501][T10270] syzkaller0: entered allmulticast mode [ 282.994012][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.309527][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.034126][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.871159][T10298] syzkaller0: entered promiscuous mode [ 284.876933][T10298] syzkaller0: entered allmulticast mode [ 285.076217][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.093281][T10310] netlink: 'syz.0.1356': attribute type 1 has an invalid length. [ 285.353270][T10321] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 285.435729][T10321] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 285.877572][ T5967] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 286.009003][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'. [ 286.018087][ T5967] usb 6-1: device descriptor read/64, error -71 [ 286.080259][T10360] loop3: detected capacity change from 0 to 2048 [ 286.093319][T10360] udf: Bad value for 'rootdir' [ 286.122888][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.124200][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.165380][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.253889][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.260616][T10358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.277636][ T5967] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 286.295131][T10360] loop3: detected capacity change from 0 to 512 [ 286.298351][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.306569][T10358] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.311447][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.326679][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.338590][T10358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.355696][T10360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.364713][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.368140][T10361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.411274][T10360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.423994][ T5967] usb 6-1: device descriptor read/64, error -71 [ 286.443775][T10360] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.507211][T10360] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1369: corrupted inode contents [ 286.551484][ T5967] usb usb6-port1: attempt power cycle [ 286.564716][T10360] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.1369: mark_inode_dirty error [ 286.578781][T10360] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1369: corrupted inode contents [ 286.592208][T10360] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1369: mark_inode_dirty error [ 286.608068][T10370] EXT4-fs warning (device loop3): ext4_es_cache_extent:1079: inode #2: comm syz.3.1369: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 286.608068][T10370] [ 286.661441][T10372] syzkaller0: entered promiscuous mode [ 286.666990][T10372] syzkaller0: entered allmulticast mode [ 286.673946][T10370] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.1369: corrupted inode contents [ 286.687160][T10370] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.1369: mark_inode_dirty error [ 286.701693][T10370] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 286.851168][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.928183][ T5967] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 286.991711][ T5967] usb 6-1: device descriptor read/8, error -71 [ 287.239256][ T5967] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 287.272549][ T5967] usb 6-1: device descriptor read/8, error -71 [ 287.390367][ T5967] usb usb6-port1: unable to enumerate USB device [ 288.427735][T10328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.461976][T10375] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1372'. [ 288.949733][T10392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.956728][T10397] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 288.998398][T10392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.033937][T10392] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.066850][T10392] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.127653][T10392] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 289.162201][T10406] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.197686][T10392] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.204923][T10406] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 289.371243][T10421] loop1: detected capacity change from 0 to 2048 [ 289.408060][T10421] udf: Bad value for 'rootdir' [ 289.681320][T10421] loop1: detected capacity change from 0 to 4096 [ 289.761410][T10421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.844504][T10408] bond1: (slave gretap1): making interface the new active one [ 289.865480][T10408] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 290.054473][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.263469][T10433] syzkaller0: entered promiscuous mode [ 290.287566][T10433] syzkaller0: entered allmulticast mode [ 290.425642][T10454] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1390'. [ 290.667956][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.923770][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1394'. [ 290.950736][ T5912] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 291.068214][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.074635][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.074726][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.100933][ T5912] usb 4-1: device descriptor read/64, error -71 [ 291.150324][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 291.229277][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.368948][ T5912] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 291.395600][ T30] net_ratelimit: 164 callbacks suppressed [ 291.395631][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.518328][ T5912] usb 4-1: device descriptor read/64, error -71 [ 291.735881][ T5912] usb usb4-port1: attempt power cycle [ 292.108788][ T5912] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 292.138754][ T5912] usb 4-1: device descriptor read/8, error -71 [ 292.397645][ T5912] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 292.428327][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.430123][ T5912] usb 4-1: device descriptor read/8, error -71 [ 292.443593][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.476163][T10446] syzkaller0: entered promiscuous mode [ 292.481903][T10446] syzkaller0: entered allmulticast mode [ 292.559592][ T5912] usb usb4-port1: unable to enumerate USB device [ 292.609797][T10476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.627311][T10476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.643598][T10476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.718039][T10476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 292.725911][T10476] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 292.737617][T10476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.956664][T10486] loop5: detected capacity change from 0 to 2048 [ 293.139986][T10486] udf: Bad value for 'rootdir' [ 293.396822][T10486] loop5: detected capacity change from 0 to 4096 [ 293.454647][T10486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.530155][T10503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1405'. [ 293.795407][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.100655][T10501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.110482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.137006][T10519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 294.443045][T10522] syzkaller0: entered promiscuous mode [ 294.448767][T10522] syzkaller0: entered allmulticast mode [ 294.667669][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.673849][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.674950][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.751423][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.751478][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 294.757641][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.472140][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.481990][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.491624][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.582421][T10547] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1418'. [ 296.187569][ T5967] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 296.321228][ T5967] usb 2-1: device descriptor read/64, error -71 [ 296.567534][ T5967] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 296.721431][ T5967] usb 2-1: device descriptor read/64, error -71 [ 296.758868][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.769283][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.780521][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.840948][ T5967] usb usb2-port1: attempt power cycle [ 297.036122][ T5912] IPVS: starting estimator thread 0... [ 297.127561][T10570] IPVS: using max 22 ests per chain, 52800 per kthread [ 297.188868][ T5967] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 297.191573][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1427'. [ 297.215261][ T5967] usb 2-1: device descriptor read/8, error -71 [ 297.460343][ T5967] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 297.494429][ T5967] usb 2-1: device descriptor read/8, error -71 [ 297.611193][ T5967] usb usb2-port1: unable to enumerate USB device [ 298.561045][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.115091][T10600] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1436'. [ 299.502170][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1441'. [ 299.673503][T10613] syzkaller0: entered promiscuous mode [ 299.679837][T10613] syzkaller0: entered allmulticast mode [ 299.948295][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.957732][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.968334][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.980896][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.087404][T10624] loop5: detected capacity change from 0 to 2048 [ 300.129988][T10624] udf: Bad value for 'rootdir' [ 300.545034][T10624] loop5: detected capacity change from 0 to 4096 [ 300.608074][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.612376][T10624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.629383][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.300263][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.753359][T10654] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1454'. [ 301.871244][ T162] net_ratelimit: 2 callbacks suppressed [ 301.871272][ T162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.886207][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.896933][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.028577][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.038387][T10676] ip6t_srh: unknown srh invflags BA61 [ 303.056166][T10676] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1462'. [ 303.077225][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.108017][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.251574][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.271926][T10686] xt_CT: No such helper "syz1" [ 304.513995][T10704] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1469'. [ 305.316373][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.708141][ T748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.721241][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.927563][ T30] net_ratelimit: 3 callbacks suppressed [ 306.927592][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.086322][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.107118][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.116328][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.125381][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.136233][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.144948][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.153736][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.162283][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.170710][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.571668][T10749] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1485'. [ 307.876889][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1487'. [ 308.288635][T10772] tipc: Enabling of bearer rejected, failed to enable media [ 312.104093][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'. [ 312.288378][ T5950] net_ratelimit: 115 callbacks suppressed [ 312.288412][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.288574][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.318232][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.460766][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.478013][ T5950] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 313.832111][ T5950] usb 2-1: no configurations [ 313.982762][ T5950] usb 2-1: can't read configurations, error -22 [ 314.267693][ T5950] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 314.356157][T10854] ip6t_srh: unknown srh invflags BA61 [ 314.368488][T10854] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1515'. [ 314.464486][T10856] netlink: 'syz.3.1516': attribute type 1 has an invalid length. [ 314.475336][T10856] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1516'. [ 314.477043][T10857] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.527783][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.537720][ T5950] usb 2-1: no configurations [ 314.542504][ T5950] usb 2-1: can't read configurations, error -22 [ 314.549739][ T5950] usb usb2-port1: attempt power cycle [ 314.677170][T10861] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1517'. [ 314.904401][T10857] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.973510][ T5950] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 315.055223][ T5950] usb 2-1: no configurations [ 315.060178][ T5950] usb 2-1: can't read configurations, error -22 [ 315.070197][T10857] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.197577][ T5950] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 315.219836][T10868] syzkaller0: entered promiscuous mode [ 315.230346][ T5950] usb 2-1: no configurations [ 315.234992][ T5950] usb 2-1: can't read configurations, error -22 [ 315.243448][ T5950] usb usb2-port1: unable to enumerate USB device [ 315.247579][T10868] syzkaller0: entered allmulticast mode [ 315.269234][T10857] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.554015][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.705599][T10882] loop2: detected capacity change from 0 to 16 [ 315.762195][T10882] erofs (device loop2): mounted with root inode @ nid 36. [ 315.926705][T10884] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 315.935315][T10884] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 315.948625][T10884] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 315.957027][T10884] erofs (device loop2): read error -117 @ 0 of nid 89 [ 316.357934][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.378841][ T31] audit: type=1800 audit(1775725152.282:2): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1522" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 316.484692][T10882] mmap: syz.2.1522 (10882) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.601660][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.613130][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.619938][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.730602][T10890] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1523'. [ 316.810852][T10893] binder: 10887:10893 ioctl 402c5639 200000000000 returned -22 [ 316.992962][T10679] Set syz1 is full, maxelem 65536 reached [ 317.236508][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.309701][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.790812][T10899] netem: change failed [ 319.427972][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.613985][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.651682][ T162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.687612][ T162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.858820][T10931] tipc: Enabling of bearer rejected, already enabled [ 319.869417][ T1126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.903023][ T1126] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.058735][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.079055][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.088043][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.097041][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.105537][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.114227][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.122941][T10932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.926121][T10945] xt_CT: No such helper "syz1" [ 322.071979][T10965] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1543'. [ 322.181633][T10967] binder: 10960:10967 ioctl 402c5639 200000000000 returned -22 [ 322.663374][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 323.066037][T10986] syzkaller0: entered promiscuous mode [ 323.072027][T10986] syzkaller0: entered allmulticast mode [ 323.113471][T10992] loop3: detected capacity change from 0 to 16 [ 323.132906][T10992] erofs (device loop3): mounted with root inode @ nid 36. [ 323.184386][T10985] syzkaller0: entered promiscuous mode [ 323.190178][T10985] syzkaller0: entered allmulticast mode [ 323.480289][T10999] ip6t_srh: unknown srh invflags BA61 [ 323.498211][T10999] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1552'. [ 323.955643][ T6367] net_ratelimit: 57 callbacks suppressed [ 323.955671][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.993935][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.562828][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.068940][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.848166][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.191004][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.250660][T10951] Set syz1 is full, maxelem 65536 reached [ 327.926970][T11035] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1558'. [ 327.988579][T11036] binder: 11033:11036 ioctl 402c5639 200000000000 returned -22 [ 328.239947][T11000] tipc: Enabling of bearer rejected, failed to enable media [ 328.272515][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.597780][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.677315][T11046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.730651][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 329.351211][ T6367] net_ratelimit: 2 callbacks suppressed [ 329.351237][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.378218][T11053] netem: change failed [ 331.098174][T11074] loop1: detected capacity change from 0 to 16 [ 331.108976][T11075] ip6t_srh: unknown srh invflags BA61 [ 331.128832][T11075] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1571'. [ 331.153403][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.168817][T11074] erofs (device loop1): mounted with root inode @ nid 36. [ 331.627859][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.922283][T11082] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 331.930394][T11082] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 331.938119][T11082] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 331.949585][T11082] erofs (device loop1): read error -117 @ 0 of nid 89 [ 331.992453][ T31] audit: type=1800 audit(1775725168.172:3): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1572" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 332.431119][T11078] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1573'. [ 332.442829][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.459359][T11078] binder: 11076:11078 ioctl 402c5639 200000000000 returned -22 [ 332.809086][T11083] syzkaller0: entered promiscuous mode [ 332.828492][T11083] syzkaller0: entered allmulticast mode [ 332.903683][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 333.478374][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.823465][T11105] xt_CT: No such helper "syz1" [ 334.527636][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.668081][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.774271][T11119] syzkaller0: entered promiscuous mode [ 334.798491][T11119] syzkaller0: entered allmulticast mode [ 334.986813][T11131] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.1587'. [ 335.039107][T11133] binder: 11127:11133 ioctl 402c5639 200000000000 returned -22 [ 335.146376][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.166732][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.176116][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.185147][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.194741][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.203544][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.212108][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.220681][T11134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.874269][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 337.322672][T11151] syzkaller0: entered promiscuous mode [ 337.328299][T11151] syzkaller0: entered allmulticast mode [ 337.344440][T11154] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 337.352508][T11154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1594'. [ 337.612389][T11162] ip6t_srh: unknown srh invflags BA61 [ 337.621228][T11162] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1597'. [ 338.072417][T11183] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1605'. [ 338.106840][T11183] binder: 11176:11183 ioctl 402c5639 200000000000 returned -22 [ 338.266858][T11185] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 339.306444][T11189] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 339.363231][T11189] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 339.444038][T11193] macvlan2: entered promiscuous mode [ 339.464318][T11193] macvlan2: entered allmulticast mode [ 339.484188][T11193] bond2: entered promiscuous mode [ 339.508501][T11193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 339.529214][T11193] bond2: left promiscuous mode [ 339.690395][T11205] syzkaller0: entered promiscuous mode [ 339.697740][T11205] syzkaller0: entered allmulticast mode [ 340.139639][ T5924] net_ratelimit: 111 callbacks suppressed [ 340.139693][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.193895][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.257524][T11218] ip6t_srh: unknown srh invflags BA61 [ 340.267677][T11218] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1614'. [ 341.415835][T11236] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1619'. [ 341.468167][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.468175][T11237] binder: 11234:11237 ioctl 402c5639 200000000000 returned -22 [ 342.048029][T11206] syzkaller1: entered promiscuous mode [ 342.056554][T11206] syzkaller1: entered allmulticast mode [ 342.521138][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.601290][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.616459][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.691955][T11256] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 343.751892][T11259] loop2: detected capacity change from 0 to 16 [ 343.758367][T11256] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.804572][T11259] erofs (device loop2): mounted with root inode @ nid 36. [ 343.828588][T11256] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 344.090243][T11263] macvlan2: entered promiscuous mode [ 344.170495][T11263] macvlan2: entered allmulticast mode [ 344.226365][T11263] bond2: entered promiscuous mode [ 344.268462][T11263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.305366][T11263] bond2: left promiscuous mode [ 344.674958][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.782335][T11286] syzkaller1: entered promiscuous mode [ 344.797613][T11286] syzkaller1: entered allmulticast mode [ 344.883315][T11290] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1632'. [ 344.905460][T11284] binder: 11283:11284 ioctl 402c5639 200000000000 returned -22 [ 345.017979][T11292] syzkaller0: entered promiscuous mode [ 345.044847][T11292] syzkaller0: entered allmulticast mode [ 345.850610][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.317210][T11295] syzkaller0: entered promiscuous mode [ 346.378355][T11295] syzkaller0: entered allmulticast mode [ 346.779322][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.789772][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.931939][T11329] loop0: detected capacity change from 0 to 16 [ 346.938448][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.001737][T11329] erofs (device loop0): mounted with root inode @ nid 36. [ 347.315275][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.378864][T11336] ip6t_srh: unknown srh invflags BA61 [ 347.416105][T11336] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1646'. [ 347.598088][T11343] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 347.620523][T11340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.629236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.962523][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.142429][T11352] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1649'. [ 348.212238][T11353] binder: 11349:11353 ioctl 402c5639 200000000000 returned -22 [ 348.590290][T11343] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 348.915544][T11357] syzkaller1: entered promiscuous mode [ 348.937833][T11357] syzkaller1: entered allmulticast mode [ 348.968238][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 349.020314][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.278633][T11370] syzkaller0: entered promiscuous mode [ 349.284271][T11370] syzkaller0: entered allmulticast mode [ 349.347673][T11379] loop4: detected capacity change from 0 to 16 [ 349.379722][T11379] erofs (device loop4): mounted with root inode @ nid 36. [ 349.704694][T11385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.883912][ T5905] net_ratelimit: 118 callbacks suppressed [ 350.883942][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.073892][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.175471][T11416] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1664'. [ 351.253358][T11419] binder: 11410:11419 ioctl 402c5639 200000000000 returned -22 [ 351.730514][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.748449][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.757327][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.766362][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.774884][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.785187][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.793868][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.802685][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.538359][T11433] syzkaller1: entered promiscuous mode [ 352.572433][T11433] syzkaller1: entered allmulticast mode [ 352.652263][T11441] ip6t_srh: unknown srh invflags BA61 [ 352.668316][T11441] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1672'. [ 352.682139][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 352.877922][ T5912] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 353.171978][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.201918][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.231763][ T5912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 353.247326][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.265158][ T5912] usb 5-1: Product: syz [ 353.272374][ T5912] usb 5-1: Manufacturer: syz [ 353.276996][ T5912] usb 5-1: SerialNumber: syz [ 353.286436][ T5912] usb 5-1: config 0 descriptor?? [ 354.526993][T11469] syzkaller0: entered promiscuous mode [ 354.534046][T11468] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 354.537498][T11469] syzkaller0: entered allmulticast mode [ 354.568909][T11464] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.1681'. [ 354.619988][T11471] binder: 11463:11471 ioctl 402c5639 200000000000 returned -22 [ 354.676592][T11474] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.700414][T11474] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 354.780868][T11475] macvlan2: entered promiscuous mode [ 354.797670][T11475] macvlan2: entered allmulticast mode [ 354.804201][T11475] bond2: entered promiscuous mode [ 354.838405][T11475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.937669][T11475] bond2: left promiscuous mode [ 355.401217][T11497] syzkaller1: entered promiscuous mode [ 355.475267][T11497] syzkaller1: entered allmulticast mode [ 355.749265][ T5851] usb 5-1: USB disconnect, device number 7 [ 355.850662][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 356.918400][ T5851] net_ratelimit: 56 callbacks suppressed [ 356.918431][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.942494][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.379034][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.594602][T11526] netem: change failed [ 357.984751][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.181168][T11531] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1699'. [ 358.218707][T11531] binder: 11530:11531 ioctl 402c5639 200000000000 returned -22 [ 358.821855][T11537] syzkaller0: entered promiscuous mode [ 358.884308][T11537] syzkaller0: entered allmulticast mode [ 359.244059][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.204687][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1706'. [ 360.282873][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.439843][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.718077][T11572] syzkaller1: entered promiscuous mode [ 360.737570][T11572] syzkaller1: entered allmulticast mode [ 360.841330][T11577] loop2: detected capacity change from 0 to 2048 [ 360.851205][T11577] udf: Bad value for 'rootdir' [ 361.027728][T11577] loop2: detected capacity change from 0 to 4096 [ 361.100229][T11577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.327998][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.527860][T11583] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.1714'. [ 361.578991][T11584] binder: 11582:11584 ioctl 402c5639 200000000000 returned -22 [ 361.676546][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.772224][T11586] syzkaller0: entered promiscuous mode [ 361.805797][T11586] syzkaller0: entered allmulticast mode [ 362.354126][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.669539][ C0] ------------[ cut here ]------------ [ 362.675339][ C0] ODEBUG: free active (active state 0) object: ffff88802b9f2c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 362.688348][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.1704/11550 [ 362.698859][ C0] Modules linked in: [ 362.703086][ C0] CPU: 0 UID: 0 PID: 11550 Comm: syz.0.1704 Not tainted syzkaller #0 PREEMPT(full) [ 362.712612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 362.722800][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 362.728684][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 362.748476][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 362.754586][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 362.762617][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 362.770671][ C0] RBP: 0000000000000001 R08: ffff88802b9f2c90 R09: ffffffff8bb2bba0 [ 362.778713][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 362.786737][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b88b0 R15: ffffc90000007b38 [ 362.794796][ C0] FS: 00007f0c594946c0(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 362.804099][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.810863][ C0] CR2: 00007f8ec35f8a90 CR3: 000000007ac57000 CR4: 0000000000350ef0 [ 362.818918][ C0] Call Trace: [ 362.822210][ C0] [ 362.825098][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 362.830821][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 362.836727][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.842441][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 362.848098][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 362.854227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.860023][ C0] ? mark_held_locks+0x40/0x70 [ 362.864888][ C0] ? kasan_quarantine_put+0x104/0x240 [ 362.870338][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.876162][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 362.881539][ C0] ? rose_timer_expiry+0x53f/0x630 [ 362.886741][ C0] kfree+0x38f/0x6b0 [ 362.890703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.896388][ C0] rose_timer_expiry+0x53f/0x630 [ 362.901436][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 362.906951][ C0] call_timer_fn+0x19a/0x670 [ 362.911651][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 362.916841][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.922561][ C0] ? __run_timers+0x747/0xb30 [ 362.927293][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.933029][ C0] ? rcu_is_watching+0x12/0xc0 [ 362.937878][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 362.943403][ C0] __run_timers+0x757/0xb30 [ 362.948023][ C0] ? __pfx___run_timers+0x10/0x10 [ 362.953119][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.958847][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 362.963976][ C0] run_timer_base+0x114/0x190 [ 362.968760][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 362.974014][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 362.979740][ C0] run_timer_softirq+0x1a/0x50 [ 362.984585][ C0] handle_softirqs+0x1eb/0x9e0 [ 362.989540][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 362.994886][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.000632][ C0] __irq_exit_rcu+0xef/0x150 [ 363.005272][ C0] irq_exit_rcu+0x9/0x30 [ 363.009591][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 363.015328][ C0] [ 363.018344][ C0] [ 363.021299][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.027326][ C0] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 363.033009][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 363.052730][ C0] RSP: 0018:ffffc900032a7ca0 EFLAGS: 00000246 [ 363.058865][ C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90010675000 [ 363.066924][ C0] RDX: 0000000000080000 RSI: ffffffff8256c8e1 RDI: ffffffff8c1b1ea0 [ 363.075070][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c8 [ 363.083161][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 000000000000ea67 [ 363.091216][ C0] R13: 0000000000000000 R14: 00002000003a9a80 R15: 0000000000010106 [ 363.099288][ C0] ? __might_fault+0x111/0x140 [ 363.104118][ C0] do_recvmmsg+0x32a/0x760 [ 363.108643][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 363.113631][ C0] ? __sched_setaffinity+0x17c/0x280 [ 363.119062][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.124745][ C0] ? do_futex+0x192/0x350 [ 363.129158][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.134865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.140602][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 363.145672][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 363.151326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.157023][ C0] do_syscall_64+0x106/0xf80 [ 363.161704][ C0] ? irqentry_exit+0x138/0x670 [ 363.166549][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.172787][ C0] RIP: 0033:0x7f0c5859c819 [ 363.177275][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.197058][ C0] RSP: 002b:00007f0c59494028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 363.205663][ C0] RAX: ffffffffffffffda RBX: 00007f0c58816090 RCX: 00007f0c5859c819 [ 363.213711][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 363.221771][ C0] RBP: 00007f0c58632c91 R08: 0000000000000000 R09: 0000000000000000 [ 363.229869][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 363.237926][ C0] R13: 00007f0c58816128 R14: 00007f0c58816090 R15: 00007ffebe97bf68 [ 363.245960][ C0] [ 363.249115][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.256684][ C0] CPU: 0 UID: 0 PID: 11550 Comm: syz.0.1704 Not tainted syzkaller #0 PREEMPT(full) [ 363.266085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 363.276164][ C0] Call Trace: [ 363.279477][ C0] [ 363.282338][ C0] dump_stack_lvl+0x100/0x190 [ 363.287061][ C0] vpanic+0x552/0x970 [ 363.291058][ C0] ? __pfx_vpanic+0x10/0x10 [ 363.295589][ C0] panic+0xd1/0xe0 [ 363.299330][ C0] ? __pfx_panic+0x10/0x10 [ 363.303864][ C0] ? check_panic_on_warn+0x1f/0x90 [ 363.309016][ C0] check_panic_on_warn.cold+0x19/0x34 [ 363.314411][ C0] ? debug_print_object+0x18e/0x2a0 [ 363.319620][ C0] __warn.cold+0x191/0x348 [ 363.324077][ C0] __report_bug+0x296/0x3d0 [ 363.328593][ C0] ? debug_print_object+0x18e/0x2a0 [ 363.333810][ C0] ? __pfx___report_bug+0x10/0x10 [ 363.338860][ C0] ? rose_timer_expiry+0x537/0x630 [ 363.344007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.349698][ C0] ? stack_trace_save+0x8e/0xc0 [ 363.354584][ C0] report_bug_entry+0xe1/0x290 [ 363.359364][ C0] ? debug_print_object+0x19b/0x2a0 [ 363.364607][ C0] handle_bug+0x1cd/0x2a0 [ 363.368969][ C0] exc_invalid_op+0x17/0x50 [ 363.373503][ C0] asm_exc_invalid_op+0x1a/0x20 [ 363.378369][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 363.384191][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 363.403933][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 363.410028][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 363.418016][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 363.426013][ C0] RBP: 0000000000000001 R08: ffff88802b9f2c90 R09: ffffffff8bb2bba0 [ 363.434020][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 363.442030][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b88b0 R15: ffffc90000007b38 [ 363.450039][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 363.455781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.461472][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 363.467140][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 363.472996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.478664][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 363.484339][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 363.490449][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.496216][ C0] ? mark_held_locks+0x40/0x70 [ 363.501024][ C0] ? kasan_quarantine_put+0x104/0x240 [ 363.511836][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.527981][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 363.533436][ C0] ? rose_timer_expiry+0x53f/0x630 [ 363.538597][ C0] kfree+0x38f/0x6b0 [ 363.542520][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.548195][ C0] rose_timer_expiry+0x53f/0x630 [ 363.553175][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 363.558670][ C0] call_timer_fn+0x19a/0x670 [ 363.563303][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 363.568450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.574151][ C0] ? __run_timers+0x747/0xb30 [ 363.578866][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.584559][ C0] ? rcu_is_watching+0x12/0xc0 [ 363.589359][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 363.594855][ C0] __run_timers+0x757/0xb30 [ 363.599417][ C0] ? __pfx___run_timers+0x10/0x10 [ 363.604516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.610302][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 363.615387][ C0] run_timer_base+0x114/0x190 [ 363.620117][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 363.625350][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.631018][ C0] run_timer_softirq+0x1a/0x50 [ 363.635826][ C0] handle_softirqs+0x1eb/0x9e0 [ 363.640679][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 363.645998][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.651671][ C0] __irq_exit_rcu+0xef/0x150 [ 363.656292][ C0] irq_exit_rcu+0x9/0x30 [ 363.660593][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 363.666251][ C0] [ 363.669186][ C0] [ 363.672118][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 363.678122][ C0] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 363.683702][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 363.703334][ C0] RSP: 0018:ffffc900032a7ca0 EFLAGS: 00000246 [ 363.709453][ C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90010675000 [ 363.717441][ C0] RDX: 0000000000080000 RSI: ffffffff8256c8e1 RDI: ffffffff8c1b1ea0 [ 363.725451][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c8 [ 363.733479][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 000000000000ea67 [ 363.741499][ C0] R13: 0000000000000000 R14: 00002000003a9a80 R15: 0000000000010106 [ 363.749693][ C0] ? __might_fault+0x111/0x140 [ 363.754539][ C0] do_recvmmsg+0x32a/0x760 [ 363.759013][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 363.764003][ C0] ? __sched_setaffinity+0x17c/0x280 [ 363.769349][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.775021][ C0] ? do_futex+0x192/0x350 [ 363.779389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.785084][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.790767][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 363.795820][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 363.801478][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 363.807152][ C0] do_syscall_64+0x106/0xf80 [ 363.811869][ C0] ? irqentry_exit+0x138/0x670 [ 363.816701][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.822621][ C0] RIP: 0033:0x7f0c5859c819 [ 363.827140][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.846783][ C0] RSP: 002b:00007f0c59494028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 363.855229][ C0] RAX: ffffffffffffffda RBX: 00007f0c58816090 RCX: 00007f0c5859c819 [ 363.863222][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 363.871215][ C0] RBP: 00007f0c58632c91 R08: 0000000000000000 R09: 0000000000000000 [ 363.879206][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 363.887539][ C0] R13: 00007f0c58816128 R14: 00007f0c58816090 R15: 00007ffebe97bf68 [ 363.895547][ C0] [ 363.899118][ C0] Kernel Offset: disabled [ 363.903480][ C0] Rebooting in 86400 seconds..