last executing test programs: 2m49.980315769s ago: executing program 0 (id=1565): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) readv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/228, 0xe4}], 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x6, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, 0xffffffffffffffff, 0xcd2, 0x0, 0x3, 0x1, 0x7ff, 0x0, 0x2000000003, 0x0, 0x82c, 0xfffffffe, 0x81, 0x4, 0x0, 0xc02a}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) 2m48.008462679s ago: executing program 0 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="96a6", 0x2}, {&(0x7f0000000a80)="01639b8a7adf76a596dc7603572fd5162b7be8e1de50d236eed43db325a51576bd9ed242d96de5a2fe685cef4802d2cc7339ed8c90d50f6162c922a6a4adaa230eb76571c0814d2cf0a44498438d173cf856294be399e42d8ea6916498fc3e52c09bcbed1d000000000000009cb163bf751be891c5f965591fbe56f2223b8eda1780406f61a512b5a0f49c8995ba8851cc2a633af7616c9d616c4f25c38a72e4ceaff69c7710b58f85f0be10ceb7ef1b2d5984794e0fee2931ea186a68da2053a6c11d4155410207c2c40d9bdfbeebda688710f17265a62caae90671", 0xdc}], 0x2}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x44000004, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) socket$kcm(0x10, 0x2, 0x4) 2m46.184422014s ago: executing program 0 (id=1573): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x10, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000003e00000004000000000000001800000000000000290000003200000029000000000000005918d3aeed11b60f45aee66e50ff232f87fa25ac9ba572518ae2caed7d40e75945ba016d99f31e6b5e43306c1c57faaf"], 0x30}, 0x20040000) r2 = epoll_create1(0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r3, 0x9, &(0x7f0000000100)={0x9, 0x5}, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x2}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x4008}) 2m45.735633566s ago: executing program 0 (id=1579): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=0x0], 0x0, 0x6e, 0x0, 0x3, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$midi(0x0, 0x200000000000002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100, 0x1000}, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1e, 0x0, 0x1d, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b80)={0x78, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x5c, 0xd, 0x0, 0x1, [@nested={0x4, 0x13a}, @nested={0x52, 0xd9, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@loopback}, @generic="bdd10d8d2487e202f9525c5514f775bd1e0394210048ef282776cbcb3f1d1bf1e1db1f247a42b4bc5cfb9f73788e", @typed={0x4, 0x13d}, @generic="cc2c886748e3cfe7b588f55537b3a6818de979a0"]}]}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000}) shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r8, &(0x7f0000001c80)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 2m44.694437882s ago: executing program 0 (id=1581): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$poke(0x6, r0, &(0x7f0000000180), 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6MASK={0x11, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x567400, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) gettid() ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) close(0x3) 2m41.567123378s ago: executing program 0 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x580, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5e0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x80002, 0x800000000400000, 0x8081, 0x0, {0x101, 0xfffffffffffffffd, 0xb0, 0x80000000004, 0x400000000000, 0x4000000000005, 0x0, 0xfffffffd, 0x2, 0x2000, 0x400000, r3, r4, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x580, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5e0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000ddc0)={0x2020}, 0x2020) (async) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x80002, 0x800000000400000, 0x8081, 0x0, {0x101, 0xfffffffffffffffd, 0xb0, 0x80000000004, 0x400000000000, 0x4000000000005, 0x0, 0xfffffffd, 0x2, 0x2000, 0x400000, r3, r4, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2m26.294199663s ago: executing program 32 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x580, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5e0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x80002, 0x800000000400000, 0x8081, 0x0, {0x101, 0xfffffffffffffffd, 0xb0, 0x80000000004, 0x400000000000, 0x4000000000005, 0x0, 0xfffffffd, 0x2, 0x2000, 0x400000, r3, r4, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x580, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x5e0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000ddc0)={0x2020}, 0x2020) (async) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x80002, 0x800000000400000, 0x8081, 0x0, {0x101, 0xfffffffffffffffd, 0xb0, 0x80000000004, 0x400000000000, 0x4000000000005, 0x0, 0xfffffffd, 0x2, 0x2000, 0x400000, r3, r4, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1m11.027099931s ago: executing program 2 (id=1813): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000100), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCNXCL(r6, 0x540d) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r8, 0x80184151, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m5.527983078s ago: executing program 2 (id=1825): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x64}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x13, 0x0, &(0x7f0000000400)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x8, 0x7fff, 0x10, 0x0, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x481}, 0x2004c080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffe5ffffffffaaaaaaaaaaaa86dd6002adf700303a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000641a00043a01ff010000000000000000000000000001ff010000000035ce5e69a2ed6ac77d5c00000000000000000001"], 0x0) 1m2.859602051s ago: executing program 2 (id=1834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, &(0x7f0000000700)=""/115, 0x73, 0x5) r3 = syz_io_uring_setup(0x4b88, &(0x7f0000000300)={0x0, 0xb867, 0x20, 0x800004, 0xb6}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000380)=0x76a, 0x0, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d22000000000000010902"], 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x12, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r2) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) 58.778252556s ago: executing program 2 (id=1845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'ip6tnl0\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x4, 0x900, 0x44, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x10, 0x10, 0x2, 0x5}}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pI4 \x00'}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0f000000000000da397690521579fa32330f80dbff3fd8215700"/38, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="03000000020000000400"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x15, &(0x7f0000001600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @alu={0x7, 0x1, 0x1, 0x0, 0xa, 0xffffffffffffffff, 0xfffffffffffffff1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x2, 0xb, 0x10, 0xc}], &(0x7f0000001180)='syzkaller\x00', 0x4, 0x17, &(0x7f00000011c0)=""/23, 0x41000, 0x62, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xc, 0x10000, 0x10000}, 0x10, 0x274f8, r0, 0x6, &(0x7f0000001440)=[r7, r1, 0xffffffffffffffff, r8], &(0x7f0000001480)=[{0x3, 0x2, 0x10, 0x8}, {0x3, 0x3, 0x1, 0x2}, {0x0, 0x3, 0x1}, {0x2, 0x1, 0x0, 0xc}, {0x4, 0x2, 0xa, 0x8}, {0x0, 0x5, 0xf, 0x11}], 0x10, 0x8}, 0x94) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x1c, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="020200020d000000000000020007e1b9ad7762d333fde2080008000000a4ff000800000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000008100020000000000020000270af4cf18e78e949cacb4890000000000000001001400"/120], 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 58.053716825s ago: executing program 2 (id=1848): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_fc_commit_start\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x400006, 0x0, 0x9, '\x00', '\x00', '\x00', 0x0, 0x81, 0x3, 0xba, "b6855a32474f04ed0000ddcffbffffff"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 56.97635393s ago: executing program 2 (id=1850): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001000000040000002b000000000000071200000000"], 0x30}, 0x0) 41.778964693s ago: executing program 33 (id=1850): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001000000040000002b000000000000071200000000"], 0x30}, 0x0) 20.482495652s ago: executing program 5 (id=1926): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mlockall(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)={0x94, 0x79, 0x400, 0x70bd2a, 0x0, "", [@typed={0x82, 0x0, 0x0, 0x0, @binary="f21cdde0ad06eedb2dea4d7d38fc8ad1b2263af29a26d79b2c7e9c18be6c6610c0bf7a0cfa254cde19a0b5c3fc8ef54268690da4d5fca2c086a0359c70cbd176a1cfdc4c0ab6a03d72c341dfcbca5be81f95a9e834f6b626a9fa07b8b4756174ca48a72c0474cb63ebebdbeeb838113932cc76ddb33fd36025f9e89aa1ed"}]}, 0x94}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000034", @ANYRES32=0x0, @ANYBLOB="0315000000000000240012800b0001006970766c616e0000140002800600010000000000060002000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r6, &(0x7f0000000740)=""/184, 0xb8, 0x100000000000, 0x0) mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x4000, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2a]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1b9e}, @broadcast, @device_a, @random="95c2978aa78b", {0x8, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x3, @val=0x7, @void, @void}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 16.29403737s ago: executing program 4 (id=1932): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 16.13655279s ago: executing program 4 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdd253b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0980700ffffffffffff08021100000150505050505002"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44050) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4a0, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x4000}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x1d0, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r6}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sync_file_range(r8, 0x3, 0x8, 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b6b000/0x4000)=nil, 0x4000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 15.854369871s ago: executing program 5 (id=1935): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x8, 0x9d, {0x9d, 0x31, "1a69e7b9ed94b16811b7dc560cd579523b0526a9c9abf04c1196a56859e7fbe53beb17ac766982de5221cd4e6e88202effa75545971ccabdd297e53f4c3310c7f2393ba696d7b30081266545f3904e367a60fd453bace44da2f85524006e10c8d1906867727d007536909def93e569f57ed9d413f9dcd33182a9a620528c60a527e43918dd848f9f8ab48e152847098e3fc319f70e5ed2a43aa950"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0x6, 0x80, "aab43f320d485a61fa7ea343675bc9a0f255370e17ef0b7baadf23ffa38a83b75376c2a6dfa065365882348d5aae03a3e36add399eee44cf1a7197335cdc6eebec1a1cd221110b674514a590f68fbcfb6f95a226020651f1f0969fb0d7dd3d9e561c2c9644e26dc907356e7c341d6a467eeb045de1f7451b00484ad719926a26"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}}) 14.051571201s ago: executing program 4 (id=1936): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd000000000d0000006d0e6f11523b39000158bc", 0x1f}, {&(0x7f0000000b40)="9030d4958e56e924c155a400b1025876b70f7cea389d895a81f4f217a265d32410a0ce7339f005ec3cfabf3dc682ccc242b8c74ca222fbb248cc4bcb7818dfdcecf71a9923b0c20ab63efd6c12346d4b178dae4cd036ffff6542f27a89d2f3a166fa4abf2665bb135d474aed250ce1cfcbc2b776e5c88501dfc3014f363b2bfe57bf1120dfe198815a0e37372b7f6149fb66a7ea2dff1d9d4d85b5dc9a8c23b7b10c9b048683e9550b214263ef6142a960c0e52a5e03f360cf93c8cfea19ff56d9194b9063008cc50ee4ae5a9a5d96c33382080060d3c70576d1fb3d3d34cc0c2193ffbd44290347dafba63b37ece7dd3909b6", 0xf3}, {&(0x7f0000000840)="b442cf36dd4bfd4f879e4769a8b3c1724652b1c2ed412e9481f6200321884c17f0a4c6b0f51fad1797741762a6c6422534e716e47dc9ae3eaadd3dd229927202b1c0573450c70729d305133d1776eeb23a87acca3932ad500dec91a43c8a7df2945ca608ec0c26354255d86429ac", 0x7c}, {&(0x7f0000000680)="0898a9ff58569147df85d037ebab693ae4534e345819a36057f93dca8f4545225f63b7c9373108b956f22be214ba0691013c17a166345e5a3cf5ec0bf7d6a407d9d73923a5f79b19e03eb13201333cc831da86bcab2d095b5c9d9d7d80a147186a4610b98845b9694ca62db2a12c63fd6785c8737037109ba5b3d5d766b15ddba4fdeaa223b2a6d46c2f950e78f214b7dbe9c9aafe7176fb56c9ba66d51294cdc1113a7f850f339b87396a0a8ec8c61e4b4876d2ccf1c41942a85784cc00fd97ac617aaa53b955417db1fbe337ae45d2", 0x117}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b6198cf1cf4ae822f1f84abd5520339c722aa7f6d87f0926c484455c67b7a9259ac3f36154b65263200800e72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245efe1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee000000000000000000", 0xbd}, {&(0x7f0000000640)="52f8380baa", 0x5}], 0x2}}], 0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x2, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x60, 0x185100}) 12.015868557s ago: executing program 4 (id=1938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="96a6", 0x2}, {&(0x7f0000000a80)="01639b8a7adf76a596dc7603572fd5162b7be8e1de50d236eed43db325a51576bd9ed242d96de5a2fe685cef4802d2cc7339ed8c90d50f6162c922a6a4adaa230eb76571c0814d2cf0a44498438d173cf856294be399e42d8ea6916498fc3e52c09bcbed1d000000000000009cb163bf751be891c5f965591fbe56f2223b8eda1780406f61a512b5a0f49c8995ba8851cc2a633af7616c9d616c4f25c38a72e4ceaff69c7710b58f85f0be10ceb7ef1b2d5984794e0fee2931ea186a68da2053a6c11d4155410207c2c40d9bdfbeebda688710f17265a62caae90671", 0xdc}], 0x2}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x44000004, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 11.048169352s ago: executing program 1 (id=1940): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) syz_open_procfs(0x0, &(0x7f0000001280)='net/ip_tables_matches\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r1, r2], 0x2}) 10.951710205s ago: executing program 5 (id=1941): mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x1, 0x377}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e25, 0x0, 0x800, 0x0, 0x2, 0x80, 0x80, 0x1, 0x0, 0xffffffffffffffff}, {0x2, 0x109, 0x3, 0x6, 0x9, 0xbfffffffffffffff, 0x5, 0x8}, {0x4, 0x1000000000009, 0x1, 0x6}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x80a3321024960b21}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4cb, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x1, 0x1, 0x0, 0x4, 0x1}}, 0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x61, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ext2\x00', 0x208000, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) 10.720091491s ago: executing program 3 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount(&(0x7f0000000980)=@filename='./file0\x00', 0x0, &(0x7f0000000a00)='ocfs2_dlmfs\x00', 0x100000, 0x0) mlockall(0x7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r7, &(0x7f0000005b40), 0x0, 0xc080) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7278, 0x400, 0x1, 0x18d}, &(0x7f0000000000), &(0x7f00000000c0)) mprotect(&(0x7f0000454000/0x2000)=nil, 0x2000, 0x0) 9.956239391s ago: executing program 1 (id=1943): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 9.799813111s ago: executing program 5 (id=1944): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 9.607943434s ago: executing program 1 (id=1945): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f2ffef0e0000000000000000850000009ec5d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0xb388, 0x2, 0x9652, 0x8, 0x5}) r4 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0x657, 0x2006f, 0x7, '<\x00\x00\r\x00', 0x4, 0x1ff}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x2) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5, @ANYRES16=r0, @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) recvmsg$unix(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r12}, &(0x7f0000000280), &(0x7f0000000140)=r9}, 0x22) close(0x3) read$eventfd(r8, &(0x7f0000000280), 0x8) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f0000000080)={'bond_slave_0\x00'}) 9.389022289s ago: executing program 3 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05027a0c"], 0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x42, 0x185) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x22141) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00000001c0)=0x6, 0x4) inotify_init() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x0, 0x0, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x872}) fallocate(r1, 0x0, 0x1000000, 0x3) 8.089649782s ago: executing program 5 (id=1947): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000005002000000000000000002"]) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) (async) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r8 = syz_io_uring_setup(0x1dfe, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x1, 0x2, 0x0, r7}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f00000000c0)={r9, 0x7, 0x8, 0x5, 0x5, 0x1ff, 0x6b67f358}) (async) ioctl$VT_RESIZEX(r0, 0x560f, 0x0) (async) dup(r0) 4.112817338s ago: executing program 1 (id=1948): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd000000000d0000006d0e6f11523b39000158bc", 0x1f}, {&(0x7f0000000b40)="9030d4958e56e924c155a400b1025876b70f7cea389d895a81f4f217a265d32410a0ce7339f005ec3cfabf3dc682ccc242b8c74ca222fbb248cc4bcb7818dfdcecf71a9923b0c20ab63efd6c12346d4b178dae4cd036ffff6542f27a89d2f3a166fa4abf2665bb135d474aed250ce1cfcbc2b776e5c88501dfc3014f363b2bfe57bf1120dfe198815a0e37372b7f6149fb66a7ea2dff1d9d4d85b5dc9a8c23b7b10c9b048683e9550b214263ef6142a960c0e52a5e03f360cf93c8cfea19ff56d9194b9063008cc50ee4ae5a9a5d96c33382080060d3c70576d1fb3d3d34cc0c2193ffbd44290347dafba63b37ece7dd3909b6", 0xf3}, {&(0x7f0000000840)="b442cf36dd4bfd4f879e4769a8b3c1724652b1c2ed412e9481f6200321884c17f0a4c6b0f51fad1797741762a6c6422534e716e47dc9ae3eaadd3dd229927202b1c0573450c70729d305133d1776eeb23a87acca3932ad500dec91a43c8a7df2945ca608ec0c26354255d86429ac", 0x7c}, {&(0x7f0000000680)="0898a9ff58569147df85d037ebab693ae4534e345819a36057f93dca8f4545225f63b7c9373108b956f22be214ba0691013c17a166345e5a3cf5ec0bf7d6a407d9d73923a5f79b19e03eb13201333cc831da86bcab2d095b5c9d9d7d80a147186a4610b98845b9694ca62db2a12c63fd6785c8737037109ba5b3d5d766b15ddba4fdeaa223b2a6d46c2f950e78f214b7dbe9c9aafe7176fb56c9ba66d51294cdc1113a7f850f339b87396a0a8ec8c61e4b4876d2ccf1c41942a85784cc00fd97ac617aaa53b955417db1fbe337ae45d2", 0x117}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b6198cf1cf4ae822f1f84abd5520339c722aa7f6d87f0926c484455c67b7a9259ac3f36154b65263200800e72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245efe1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee000000000000000000", 0xbd}, {&(0x7f0000000640)="52f8380baa", 0x5}], 0x2}}], 0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x2, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x60, 0x185100}) 4.08381596s ago: executing program 3 (id=1949): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mlockall(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)={0x94, 0x79, 0x400, 0x70bd2a, 0x0, "", [@typed={0x82, 0x0, 0x0, 0x0, @binary="f21cdde0ad06eedb2dea4d7d38fc8ad1b2263af29a26d79b2c7e9c18be6c6610c0bf7a0cfa254cde19a0b5c3fc8ef54268690da4d5fca2c086a0359c70cbd176a1cfdc4c0ab6a03d72c341dfcbca5be81f95a9e834f6b626a9fa07b8b4756174ca48a72c0474cb63ebebdbeeb838113932cc76ddb33fd36025f9e89aa1ed"}]}, 0x94}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000034", @ANYRES32=0x0, @ANYBLOB="0315000000000000240012800b0001006970766c616e0000140002800600010000000000060002000000000008000500", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r6, &(0x7f0000000740)=""/184, 0xb8, 0x100000000000, 0x0) mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x54, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2a]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1b9e}, @broadcast, @device_a, @random="95c2978aa78b", {0x8, 0x10}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x6, {0x0, 0x3, @val=0x7, @void, @void}}}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 3.606784746s ago: executing program 5 (id=1950): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getxattr(0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$can_raw(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x1d, r5}, 0x10, &(0x7f0000000440)={&(0x7f0000000380)=@can={{0x3}, 0x4, 0x3, 0x0, 0x0, "4d6453645de9ed1a"}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fff32ba0aabc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095dab7d71fcf1fd6822a9973fa7173af71a98255215c148d89915603f47e3ba8261bbc0890a3234acef8d7ed0e796fb3f4bcbe2812098520745259abf87eafe12f492fa01b96cca51bc0c149f29b73dc3fec5c1fddc4fa7160a56629363faa99f12458181bec0d47187bb5eb9e197d6085d56ff5222e42277cd0c0014cb980f3f432ed430bc9115764df6bbbbe923a2b42b33c8022d345dcc0"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8fff32ba0aabc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095dab7d71fcf1fd6822a9973fa7173af71a98255215c148d89915603f47e3ba8261bbc0890a3234acef8d7ed0e796fb3f4bcbe2812098520745259abf87eafe12f492fa01b96cca51bc0c149f29b73dc3fec5c1fddc4fa7160a56629363faa99f12458181bec0d47187bb5eb9e197d6085d56ff5222e42277cd0c0014cb980f3f432ed430bc9115764df6bbbbe923a2b42b33c8022d345dcc0"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, &(0x7f00000006c0)={0x0, 0xd, 0xa2, {0xa2, 0x23, "0a29c2c600a953555b4937e16bc67fe40f2fbb5de651fceeef1747aa9d101ce3e750438920447ffda5785b3b2590f468aace5553eee144deac74ab289440232fd016d6e3fbe3304024854daf7c28b1de32c04da91885d751938f24836856403d9f7b6d6bd963e2d74fea71a5869a9a955af32750c515f45c8083a6db847deab1ee26e969f34fb4fd23bce4469ae61de3b0bf388b2bb12353d244624d63c08cf4"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000180)={0x0, 0x22, 0x1e, {[@main=@item_012={0x2, 0x0, 0x8, "5dab"}, @global=@item_4={0x3, 0x1, 0x9, "950c8c76"}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_012={0x2, 0x1, 0x4, ')<'}, @local=@item_4={0x3, 0x2, 0x1d, "e3db98a0"}, @global=@item_012={0x2, 0x1, 0x5, "2e96"}, @local=@item_012={0x2, 0x2, 0x8, '_%'}, @main=@item_4={0x3, 0x0, 0xc, "b8d00469"}, @main=@item_012={0x1, 0x0, 0x8, 'v'}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7e, 0x1, {0x22, 0x2b6}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x40, 0x5, 0x61, "376b09ef12540445864c63eb526dbdf56247d7e16268d23ca4f8ec0d7182dd5f20fb5cecfa6c5fadc1c0c5b0987aa9715210b677c1a0cccc7b4fa37d5dae175eac609998db9cd1091e80d071cf2b3c20d72ffae0b1466e2ce37668ac1b5c977902"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x1, 0x26, "57defd595c196b6ea7317c1eea716c65cb94c1724858bdf11572d087e7afa230bc5601ca76eb"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, &(0x7f00000006c0)={0x0, 0xd, 0xa2, {0xa2, 0x23, "0a29c2c600a953555b4937e16bc67fe40f2fbb5de651fceeef1747aa9d101ce3e750438920447ffda5785b3b2590f468aace5553eee144deac74ab289440232fd016d6e3fbe3304024854daf7c28b1de32c04da91885d751938f24836856403d9f7b6d6bd963e2d74fea71a5869a9a955af32750c515f45c8083a6db847deab1ee26e969f34fb4fd23bce4469ae61de3b0bf388b2bb12353d244624d63c08cf4"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000180)={0x0, 0x22, 0x1e, {[@main=@item_012={0x2, 0x0, 0x8, "5dab"}, @global=@item_4={0x3, 0x1, 0x9, "950c8c76"}, @global=@item_012={0x0, 0x1, 0xa}, @global=@item_012={0x2, 0x1, 0x4, ')<'}, @local=@item_4={0x3, 0x2, 0x1d, "e3db98a0"}, @global=@item_012={0x2, 0x1, 0x5, "2e96"}, @local=@item_012={0x2, 0x2, 0x8, '_%'}, @main=@item_4={0x3, 0x0, 0xc, "b8d00469"}, @main=@item_012={0x1, 0x0, 0x8, 'v'}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7e, 0x1, {0x22, 0x2b6}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x40, 0x5, 0x61, "376b09ef12540445864c63eb526dbdf56247d7e16268d23ca4f8ec0d7182dd5f20fb5cecfa6c5fadc1c0c5b0987aa9715210b677c1a0cccc7b4fa37d5dae175eac609998db9cd1091e80d071cf2b3c20d72ffae0b1466e2ce37668ac1b5c977902"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x1, 0x26, "57defd595c196b6ea7317c1eea716c65cb94c1724858bdf11572d087e7afa230bc5601ca76eb"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xa, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022030000e4a501a8"], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.113460541s ago: executing program 6 (id=1891): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/71, 0x8000, 0x0, 0x5, 0x3}, 0x20) 3.110853831s ago: executing program 1 (id=1951): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x2, "39aab5ea464d3850b32d6fd0f298d5a9ab616a35881c55a3ccd259b04f3da15f", 0x38414262}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006060000005f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.99036334s ago: executing program 4 (id=1952): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000000000006a0000000400004084000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200000000000003"], 0x48) 2.931861107s ago: executing program 6 (id=1953): add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "f8d0795308ab7dcd6b16d60155f0e4f75257ebcea827aa2b9a5308dae765cb33cb35badf4802defde177e36aaa76b3ce4309f1c31b0bea734d5fa2f289be35c9", 0x2a}, 0x48, 0xfffffffffffffffb) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket(0x2, 0x3, 0xff) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c00020002000000080000000600030001e1"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x6, 0x900}}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r7, 0x7cb, &(0x7f0000000980)={&(0x7f0000000100)={{@hyper}, {@local}, 0x400, "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"}, 0x418}) sendmmsg$inet(r4, 0x0, 0x0, 0x448d5) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x85, 0x0, 0xfe, 0xd2, 0x0, 0x5f, 0xfb, 0x0, 0xa6, 0x4, 0xff, 0x0, 0xf7fffffffffffdfc}, {0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0xac, 0x5, 0x14, 0x9, 0x5}], 0xfffffffd}) r9 = mq_open(&(0x7f0000000040)='!~\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000540)={[0x3, 0x100000000, 0x42b5, 0x3ff, 0xbf0, 0x64fd, 0x1c7aa2f9, 0x6, 0x7, 0x584, 0xffffffffffffb786, 0xa0a, 0x7fffffff, 0x1, 0xa, 0xffffffff], 0x8000000, 0xa000}) mq_timedreceive(r9, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r9, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0x2, 0x1ffc], 0x80a0000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.406796416s ago: executing program 3 (id=1954): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 1.201854597s ago: executing program 6 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000040), 0x4000) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000001480)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0xffffb645, @remote, 0x69}}}, 0xa0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) epoll_create1(0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @empty}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 1.143856299s ago: executing program 4 (id=1956): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, &(0x7f00000001c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x80000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1210820, &(0x7f0000000140)={[{@inode32}, {}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket(0x22, 0x2, 0x4) getsockname(r5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) 1.115958272s ago: executing program 3 (id=1957): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r4 = socket(0x10, 0x6, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 63.851022ms ago: executing program 3 (id=1958): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r3, 0x10, "7d940c2d3f7c168132b1d802617fdbfb"}, &(0x7f0000000180)=0xfffffffffffffda0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x45b51000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRESHEX=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x9, 0x7, {{0x2c, 0x4, 0x0, 0x4, 0xb0, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x26, 0x1, [{0x2, 0x7, "f21cbc3803"}, {0x2, 0x8, "80c58be7ef0b"}, {0x0, 0x3, "9f"}, {0x6, 0xe, "6c916e98eb18a0178c2113be"}]}, @generic={0x86, 0xf, "37cc713c29c869b098e42cbb3a"}, @timestamp={0x44, 0x8, 0x16, 0x0, 0x4, [0x2]}, @timestamp_addr={0x44, 0x34, 0x7e, 0x1, 0x1, [{@local, 0x2856}, {@multicast1, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0x0, [{@broadcast, 0x7}, {@local, 0xfffffffc}, {@local, 0x80000001}]}, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x7, [{@local, 0xfffffffd}]}]}}}}}) connect$can_j1939(r7, &(0x7f00000002c0)={0x1d, r8, 0x0, {0x0, 0x1}, 0xfe}, 0x18) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0xde}) mkdir(&(0x7f0000001900)='./file1\x00', 0xbe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 0s ago: executing program 1 (id=1959): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000006700110000"], 0x30}, 0x0) kernel console output (not intermixed with test programs): 5898] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 581.112588][ T5898] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 581.128383][ T5898] em28xx 1-1:0.0: No AC97 audio processor [ 581.155583][ T5898] usb 1-1: USB disconnect, device number 3 [ 581.167708][ T5898] em28xx 1-1:0.0: Disconnecting em28xx [ 581.187460][ T5898] em28xx 1-1:0.0: Freeing device [ 581.510985][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.530457][T11282] overlayfs: missing 'lowerdir' [ 582.537486][ T5841] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 582.768525][ T24] kernel write not supported for file /input/event2 (pid: 24 comm: kworker/1:0) [ 582.778340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.797601][T11286] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1469'. [ 582.858822][T11286] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1469'. [ 583.259355][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.435256][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.594587][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 583.742685][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 583.776332][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 583.807512][ T5841] usb 5-1: SerialNumber: syz [ 583.855308][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.947711][ T5841] usb 5-1: bad CDC descriptors [ 583.966024][ T5841] usb-storage 5-1:1.0: USB Mass Storage device detected [ 583.966791][T11296] kvm: pic: single mode not supported [ 584.531910][T11296] kvm: pic: single mode not supported [ 584.562459][ T5841] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 584.811984][ T5841] scsi host1: usb-storage 5-1:1.0 [ 584.919963][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.577479][ T5841] usb 5-1: USB disconnect, device number 53 [ 585.942476][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.092012][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.194243][T11331] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 586.221711][T11331] CIFS mount error: No usable UNC path provided in device string! [ 586.221711][T11331] [ 586.232811][T11331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 586.798586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.041743][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.639021][T11338] overlayfs: missing 'lowerdir' [ 587.673657][ T5841] kernel write not supported for file /input/event2 (pid: 5841 comm: kworker/1:3) [ 587.981644][T11341] bpq0: entered promiscuous mode [ 588.136152][T11341] bpq0: entered allmulticast mode [ 588.205958][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.625628][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.777483][T11355] random: crng reseeded on system resumption [ 589.870615][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.970369][T11361] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 590.651823][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.662023][T11361] syz.4.1487 (11361) used greatest stack depth: 17992 bytes left [ 591.592126][T11384] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 591.692093][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.893823][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.234648][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.423671][T11404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.732615][ T5898] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 593.931733][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.642002][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 594.651966][ T5898] usb 5-1: not running at top speed; connect to a high speed hub [ 594.671273][ T5898] usb 5-1: config 7 has an invalid interface number: 143 but max is 0 [ 594.681808][ T5898] usb 5-1: config 7 has no interface number 0 [ 594.700519][ T5898] usb 5-1: config 7 interface 143 altsetting 1 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 594.741648][ T5898] usb 5-1: config 7 interface 143 altsetting 1 endpoint 0x8B has invalid maxpacket 11730, setting to 64 [ 594.781774][ T5898] usb 5-1: config 7 interface 143 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.821189][ T5898] usb 5-1: config 7 interface 143 has no altsetting 0 [ 594.853193][ T5898] usb 5-1: string descriptor 0 read error: -22 [ 594.861705][ T5898] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01d7, bcdDevice=d6.31 [ 595.562402][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.598299][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.654157][ T5898] ftdi_sio 5-1:7.143: FTDI USB Serial Device converter detected [ 595.715534][ T5898] ftdi_sio ttyUSB0: unknown device type: 0xd631 [ 595.751659][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.863988][ T5898] usb 5-1: USB disconnect, device number 54 [ 595.890617][ T5898] ftdi_sio 5-1:7.143: device disconnected [ 596.784886][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.806343][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.964391][T11457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.992495][T11457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.164002][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 598.209294][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.541036][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 598.552211][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 598.573362][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 598.581753][ T10] usb 3-1: config 0 has no interface number 0 [ 598.590595][T11471] netlink: 'syz.0.1518': attribute type 11 has an invalid length. [ 598.598576][T11471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1518'. [ 598.783590][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 598.801626][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.809676][ T10] usb 3-1: Product: syz [ 598.810123][T11475] fuse: Unknown parameter '184467440737095516150xffffffffffffffff ' [ 598.814066][ T10] usb 3-1: Manufacturer: syz [ 598.814090][ T10] usb 3-1: SerialNumber: syz [ 598.817446][ T10] usb 3-1: config 0 descriptor?? [ 598.852539][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 599.544875][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.851811][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.300183][ T10] usb 3-1: qt2_attach - failed to power on unit: -71 [ 600.300482][ T10] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 600.326597][ T10] usb 3-1: USB disconnect, device number 30 [ 600.582194][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.669049][T11508] tmpfs: Cannot change global quota limit on remount [ 600.689042][T11508] sp0: Synchronizing with TNC [ 600.745971][T11507] [U] è [ 602.180273][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.655640][T11533] ipvlan4: entered promiscuous mode [ 603.306402][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.368222][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.857937][T11550] loop2: detected capacity change from 0 to 7 [ 603.904065][T11550] Dev loop2: unable to read RDB block 7 [ 603.924357][T11550] loop2: AHDI p1 p2 p3 [ 603.935311][T11550] loop2: partition table partially beyond EOD, truncated [ 604.139253][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.148214][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.164677][T11550] loop2: p1 start 1601398130 is beyond EOD, truncated [ 604.184924][T11550] loop2: p2 start 1702059890 is beyond EOD, truncated [ 604.417532][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.822616][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.087543][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'. [ 606.177047][T11571] FAULT_INJECTION: forcing a failure. [ 606.177047][T11571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.223514][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.3.1546 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 606.223545][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.223560][T11571] Call Trace: [ 606.223568][T11571] [ 606.223578][T11571] dump_stack_lvl+0x189/0x250 [ 606.223609][T11571] ? __pfx____ratelimit+0x10/0x10 [ 606.223633][T11571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.223658][T11571] ? __pfx__printk+0x10/0x10 [ 606.223702][T11571] should_fail_ex+0x414/0x560 [ 606.223731][T11571] _copy_to_user+0x31/0xb0 [ 606.223764][T11571] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 606.223803][T11571] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 606.223836][T11571] ? __fget_files+0x2a/0x420 [ 606.223867][T11571] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 606.223899][T11571] bpf_prog_test_run+0x2c7/0x340 [ 606.223945][T11571] __sys_bpf+0x4a4/0x860 [ 606.223981][T11571] ? __pfx___sys_bpf+0x10/0x10 [ 606.224028][T11571] ? ksys_write+0x22a/0x250 [ 606.224052][T11571] ? __pfx_ksys_write+0x10/0x10 [ 606.224069][T11571] ? rcu_is_watching+0x15/0xb0 [ 606.224103][T11571] __x64_sys_bpf+0x7c/0x90 [ 606.224133][T11571] do_syscall_64+0xfa/0x3b0 [ 606.224157][T11571] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.224179][T11571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.224202][T11571] ? clear_bhb_loop+0x60/0xb0 [ 606.224229][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.224250][T11571] RIP: 0033:0x7f632d18e9a9 [ 606.224269][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.224288][T11571] RSP: 002b:00007f632e07e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.224311][T11571] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18e9a9 [ 606.224328][T11571] RDX: 000000000000000c RSI: 0000200000000cc0 RDI: 000000000000000a [ 606.224342][T11571] RBP: 00007f632e07e090 R08: 0000000000000000 R09: 0000000000000000 [ 606.224355][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.224368][T11571] R13: 0000000000000000 R14: 00007f632d3b5fa0 R15: 00007ffd3d15aed8 [ 606.224403][T11571] [ 606.435857][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.512857][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.658664][T11586] overlayfs: failed to resolve './file1': -2 [ 606.695958][T11588] vlan2: entered promiscuous mode [ 606.715188][T11588] syz_tun: entered promiscuous mode [ 606.938878][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.925404][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.432567][T11608] FAULT_INJECTION: forcing a failure. [ 609.432567][T11608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.475465][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.4.1556 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 609.475494][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.475507][T11608] Call Trace: [ 609.475515][T11608] [ 609.475524][T11608] dump_stack_lvl+0x189/0x250 [ 609.475552][T11608] ? __pfx____ratelimit+0x10/0x10 [ 609.475581][T11608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.475604][T11608] ? __pfx__printk+0x10/0x10 [ 609.475630][T11608] ? __might_fault+0xb0/0x130 [ 609.475663][T11608] should_fail_ex+0x414/0x560 [ 609.475690][T11608] _copy_from_user+0x2d/0xb0 [ 609.475721][T11608] kstrtouint_from_user+0xc4/0x170 [ 609.475747][T11608] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 609.475791][T11608] proc_fail_nth_write+0x88/0x240 [ 609.475817][T11608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.475849][T11608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.475875][T11608] vfs_write+0x27e/0xa90 [ 609.475904][T11608] ? __pfx_vfs_write+0x10/0x10 [ 609.475926][T11608] ? __fget_files+0x2a/0x420 [ 609.475954][T11608] ? __fget_files+0x3a0/0x420 [ 609.475975][T11608] ? __fget_files+0x2a/0x420 [ 609.476008][T11608] ksys_write+0x145/0x250 [ 609.476026][T11608] ? __fget_files+0x3a0/0x420 [ 609.476049][T11608] ? __pfx_ksys_write+0x10/0x10 [ 609.476074][T11608] ? do_syscall_64+0xbe/0x3b0 [ 609.476102][T11608] do_syscall_64+0xfa/0x3b0 [ 609.476123][T11608] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.476144][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.476164][T11608] ? clear_bhb_loop+0x60/0xb0 [ 609.476189][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.476209][T11608] RIP: 0033:0x7f2d3558d45f [ 609.476226][T11608] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 609.476244][T11608] RSP: 002b:00007f2d3643c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 609.476265][T11608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d3558d45f [ 609.476279][T11608] RDX: 0000000000000001 RSI: 00007f2d3643c0a0 RDI: 0000000000000006 [ 609.476292][T11608] RBP: 00007f2d3643c090 R08: 0000000000000000 R09: 0000000000000000 [ 609.476304][T11608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 609.476316][T11608] R13: 0000000000000000 R14: 00007f2d357b6080 R15: 00007ffce1796118 [ 609.476348][T11608] [ 609.531893][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.055053][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.157649][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.905808][T11635] overlayfs: failed to resolve './file1': -2 [ 612.189205][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.595483][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.239280][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.617641][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.632463][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.640606][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.649331][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.625127][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.018721][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.403522][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 616.523319][T11699] Mount JFS Failure: -22 [ 616.527926][T11699] jfs_mount failed w/return code = -22 [ 616.582321][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 616.621546][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 616.751843][ T5911] usb 1-1: device descriptor read/64, error -71 [ 616.805378][ T24] usb 2-1: config 5 has an invalid interface number: 52 but max is 1 [ 616.813874][ T24] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 616.839174][ T24] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 616.858759][ T24] usb 2-1: config 5 has no interface number 0 [ 617.542387][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.550695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.568803][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.579638][ T24] usb 2-1: config 5 has no interface number 1 [ 617.588573][ T24] usb 2-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.602653][ T24] usb 2-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.614915][ T24] usb 2-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 617.628720][ T24] usb 2-1: config 5 interface 52 has no altsetting 0 [ 617.890159][ T24] usb 2-1: config 5 interface 4 has no altsetting 0 [ 617.922256][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 618.492017][ T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 618.501142][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.526539][ T24] usb 2-1: Product: syz [ 618.530780][ T24] usb 2-1: Manufacturer: syz [ 618.536356][ T24] usb 2-1: SerialNumber: syz [ 618.561861][ T5911] usb 1-1: device descriptor read/64, error -71 [ 618.582944][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.651891][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.672076][ T5911] usb usb1-port1: attempt power cycle [ 618.788878][ T24] cytherm 2-1:5.52: Cypress thermometer device now attached [ 618.803605][ T5928] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 618.834750][ T24] cytherm 2-1:5.4: Cypress thermometer device now attached [ 618.855898][ T24] usb 2-1: USB disconnect, device number 45 [ 618.865608][ T24] cytherm 2-1:5.52: Cypress thermometer now disconnected [ 618.878875][ T24] cytherm 2-1:5.4: Cypress thermometer now disconnected [ 618.971774][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 618.983964][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.002062][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 619.013152][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 619.021630][ T5911] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 619.022357][ T5928] usb 4-1: Product: syz [ 619.033781][ T5928] usb 4-1: SerialNumber: syz [ 619.103127][ T5928] usb 4-1: config 0 descriptor?? [ 619.156086][T11711] ipvlan5: entered promiscuous mode [ 619.276732][ T5911] usb 1-1: device descriptor read/8, error -71 [ 619.669277][T11723] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.678318][T11723] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 619.688972][T11723] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.697040][T11723] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 619.724990][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.741717][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.070567][T11745] futex_wake_op: syz.1.1597 tries to shift op by 32; fix this program [ 621.088210][T11745] netlink: 'syz.1.1597': attribute type 27 has an invalid length. [ 621.201549][ T5928] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 621.383690][ T5928] usb 5-1: not running at top speed; connect to a high speed hub [ 621.396299][ T5928] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 621.408621][ T5928] usb 5-1: config 95 has no interface number 0 [ 621.431342][ T5928] usb 5-1: config 95 interface 1 has no altsetting 0 [ 621.453480][ T5928] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 621.468498][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.489003][ T5928] usb 5-1: Product: syz [ 621.499941][ T5928] usb 5-1: Manufacturer: syz [ 621.507293][ T5928] usb 5-1: SerialNumber: syz [ 621.692473][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.771772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.875055][ T5928] usb 5-1: USB disconnect, device number 55 [ 621.986678][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.477556][ T5841] usb 4-1: USB disconnect, device number 33 [ 622.909461][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.981651][ T5898] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 623.543434][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 623.565893][ T5898] usb 5-1: config 1 interface 0 has no altsetting 0 [ 623.579752][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.40 [ 623.602445][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.624792][ T5898] usb 5-1: Product: syz [ 623.629037][ T5898] usb 5-1: Manufacturer: ꯫㹑ᩦ邭Ꜻ筟뾛ç¹é˜¿ãŒç£ˆæ¦‚룜泚⾧呩è´ë§œâ¼ ç±–ﶦ諳â¤í”˜åŽ—ê’–ï¢¦æ™¯æŠ½î¯·å¶’ç€“â‰£ä©¿ä˜ëŠ¤çš‚å° é„¥ï·˜í˜ì©å²Œî´¯ã ¤æ„Œé‚€ä¹«ê¶…ឋ깃刻澨舔⻟鹽䄵况䟧çƒë³œë°¬æ·ïº›íš˜ã¡Œç¦ˆâº„ì§î”æ’´ [ 623.687475][ T5898] usb 5-1: SerialNumber: syz [ 624.314358][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.322548][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.475109][ T5898] usbhid 5-1:1.0: can't add hid device: -71 [ 624.481185][ T5898] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 624.513105][ T5898] usb 5-1: USB disconnect, device number 56 [ 625.125465][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.383227][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.626154][T11795] ipvlan5: entered promiscuous mode [ 625.855468][T11795] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.863518][T11795] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 625.872109][T11795] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.879961][T11795] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 626.778641][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.787732][ T5841] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 626.941593][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 626.959035][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.105065][ T5841] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 627.131530][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 627.139755][ T5841] usb 5-1: Product: syz [ 627.146910][ T5841] usb 5-1: SerialNumber: syz [ 627.159262][ T5841] usb 5-1: config 0 descriptor?? [ 627.852583][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.949586][T11821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.958481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.981703][T11821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.056067][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.067602][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.132232][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.141641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.331677][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.867036][T11818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.895372][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.306037][T11830] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 629.437238][ T5898] usb 5-1: USB disconnect, device number 57 [ 629.620138][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.111926][T11838] comedi comedi4: bad chanlist[0]=0x00000401 chan=1025 range length=2 [ 631.998426][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 632.007756][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 632.445451][T11858] fuse: Bad value for 'user_id' [ 632.450376][T11858] fuse: Bad value for 'user_id' [ 632.703625][T11865] ipvlan6: entered promiscuous mode [ 632.860561][T11865] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.868487][T11865] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 632.878115][T11865] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.885971][T11865] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 633.221533][ T5841] net_ratelimit: 11 callbacks suppressed [ 633.221555][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.321767][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 633.458639][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.492917][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 633.503821][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.540404][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 633.561543][ T10] usb 3-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 633.593592][ T10] usb 3-1: Product: syz [ 633.597833][ T10] usb 3-1: SerialNumber: syz [ 633.618924][T11875] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 633.634138][ T10] usb 3-1: config 0 descriptor?? [ 633.690299][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'. [ 633.805287][T11880] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.1639'. [ 634.134239][T11876] team0 (unregistering): Port device team_slave_0 removed [ 634.167229][T11876] team0 (unregistering): Port device team_slave_1 removed [ 634.218385][T11876] team0 (unregistering): Port device geneve0 removed [ 634.251868][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.411970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.231842][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 635.299571][T11901] ip6t_srh: unknown srh match flags 4000 [ 635.311343][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.458766][T11903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.538280][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 636.408358][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.039749][ T10] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 637.050618][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.061884][ T10] usb 2-1: Product: syz [ 637.066113][ T10] usb 2-1: Manufacturer: syz [ 637.070743][ T10] usb 2-1: SerialNumber: syz [ 637.082408][ T10] usb 2-1: config 0 descriptor?? [ 637.100390][ T10] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 637.524613][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.683775][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.720694][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 637.731132][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 637.743377][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 637.752790][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 637.760552][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 637.764531][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 638.261558][ T43] usb 2-1: USB disconnect, device number 46 [ 638.986684][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.094556][ T5898] usb 3-1: USB disconnect, device number 31 [ 639.283427][T11909] chnl_net:caif_netlink_parms(): no params data found [ 639.464923][T11909] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.472738][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.480394][T11909] bridge_slave_0: entered allmulticast mode [ 639.519154][T11909] bridge_slave_0: entered promiscuous mode [ 639.540445][T11909] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.551327][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.563814][T11909] bridge_slave_1: entered allmulticast mode [ 639.607513][T11909] bridge_slave_1: entered promiscuous mode [ 639.728768][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.760022][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.854403][ T5844] Bluetooth: hci5: command tx timeout [ 639.873713][T11909] team0: Port device team_slave_0 added [ 639.904833][T11909] team0: Port device team_slave_1 added [ 640.012853][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 640.023475][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.104783][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.118519][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.153691][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.170578][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.172461][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 640.179168][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.213664][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.219099][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.261593][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 640.294494][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 640.344576][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.387977][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 640.429372][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.453108][ T10] usb 2-1: Product: syz [ 640.457341][ T10] usb 2-1: Manufacturer: syz [ 640.485756][ T10] usb 2-1: SerialNumber: syz [ 640.722770][ T10] usb 2-1: config 0 descriptor?? [ 641.611809][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.683081][ T10] xbox_remote_probe: Unexpected endpoint_in [ 641.701494][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.971684][ T5844] Bluetooth: hci5: command tx timeout [ 642.276782][T11909] hsr_slave_0: entered promiscuous mode [ 642.310024][T11909] hsr_slave_1: entered promiscuous mode [ 642.791859][ T5911] usb 2-1: USB disconnect, device number 47 [ 642.877984][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.085715][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.258170][T11974] overlay: Unknown parameter 'euid>00000000000000000000' [ 644.163286][ T5844] Bluetooth: hci5: command tx timeout [ 644.482233][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.672789][T11909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 644.684971][T11909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 644.706698][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.730023][T11909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 644.775071][T11909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 644.851958][ T43] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 645.001530][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 645.016657][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.047144][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.166782][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 645.185132][T12004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.651381][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.742478][ T43] usb 2-1: config 0 descriptor?? [ 645.781096][ T43] hub 2-1:0.0: USB hub found [ 645.799311][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.890486][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.957140][ T43] hub 2-1:0.0: 1 port detected [ 645.971292][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.999674][T12010] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 646.181920][ T5848] Bluetooth: hci5: command tx timeout [ 646.930621][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.653152][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.660329][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.690247][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.697525][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.915928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.969724][ T43] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 647.977249][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.002138][ T43] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 648.177917][T12018] binder: BINDER_SET_CONTEXT_MGR already set [ 648.184170][T12018] binder: 12015:12018 ioctl 4018620d 200000000040 returned -16 [ 648.624549][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 648.630606][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 648.885517][ T43] usb 2-1: USB disconnect, device number 48 [ 649.067409][T12022] FAULT_INJECTION: forcing a failure. [ 649.067409][T12022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.081795][T12022] CPU: 0 UID: 0 PID: 12022 Comm: syz.1.1673 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 649.081823][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.081835][T12022] Call Trace: [ 649.081844][T12022] [ 649.081853][T12022] dump_stack_lvl+0x189/0x250 [ 649.081887][T12022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.081911][T12022] ? __pfx__printk+0x10/0x10 [ 649.081956][T12022] should_fail_ex+0x414/0x560 [ 649.081985][T12022] _copy_from_user+0x2d/0xb0 [ 649.082015][T12022] ___sys_sendmsg+0x158/0x2a0 [ 649.082052][T12022] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.082134][T12022] ? __fget_files+0x2a/0x420 [ 649.082157][T12022] ? __fget_files+0x3a0/0x420 [ 649.082193][T12022] __x64_sys_sendmsg+0x19b/0x260 [ 649.082229][T12022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.082280][T12022] ? __pfx_ksys_write+0x10/0x10 [ 649.082326][T12022] ? do_syscall_64+0xbe/0x3b0 [ 649.082356][T12022] do_syscall_64+0xfa/0x3b0 [ 649.082383][T12022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.082404][T12022] ? asm_sysvec_call_function_single+0x1a/0x20 [ 649.082426][T12022] ? clear_bhb_loop+0x60/0xb0 [ 649.082453][T12022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.082475][T12022] RIP: 0033:0x7f472c38e9a9 [ 649.082494][T12022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.082514][T12022] RSP: 002b:00007f472d1f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.082537][T12022] RAX: ffffffffffffffda RBX: 00007f472c5b6080 RCX: 00007f472c38e9a9 [ 649.082554][T12022] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 649.082568][T12022] RBP: 00007f472d1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 649.082582][T12022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.082595][T12022] R13: 0000000000000000 R14: 00007f472c5b6080 R15: 00007ffd865ea988 [ 649.082630][T12022] [ 649.497449][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.239914][T12036] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.248102][T12036] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 650.256712][T12036] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.264789][T12036] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 650.331765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.598495][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.971866][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.087011][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.163681][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1681'. [ 651.511678][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 651.612861][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.729515][ T24] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 651.740375][ T24] usb 2-1: config 0 has no interface number 0 [ 651.771563][ T24] usb 2-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 651.791145][ T24] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.826956][ T24] usb 2-1: config 0 interface 109 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 651.876650][ T24] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 651.898739][T11909] veth0_vlan: entered promiscuous mode [ 651.910585][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.936445][ T24] usb 2-1: config 0 descriptor?? [ 651.949068][T11909] veth1_vlan: entered promiscuous mode [ 651.966051][ T24] cxacru 2-1:0.109: cxacru_bind: interface has incorrect endpoints [ 651.988367][ T24] cxacru 2-1:0.109: usbatm_usb_probe: bind failed: -19! [ 652.053595][T11909] veth0_macvtap: entered promiscuous mode [ 652.093679][T11909] veth1_macvtap: entered promiscuous mode [ 652.155504][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.170225][ T5898] usb 2-1: USB disconnect, device number 49 [ 652.248301][T12064] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 652.257804][T12064] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 652.266573][T12064] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 652.274573][T12064] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 652.395015][T12066] FAULT_INJECTION: forcing a failure. [ 652.395015][T12066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.408390][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.3.1685 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 652.408417][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.408430][T12066] Call Trace: [ 652.408438][T12066] [ 652.408446][T12066] dump_stack_lvl+0x189/0x250 [ 652.408473][T12066] ? __pfx____ratelimit+0x10/0x10 [ 652.408494][T12066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.408516][T12066] ? __pfx__printk+0x10/0x10 [ 652.408556][T12066] should_fail_ex+0x414/0x560 [ 652.408582][T12066] _copy_from_user+0x2d/0xb0 [ 652.408610][T12066] __copy_msghdr+0x3c5/0x5b0 [ 652.408643][T12066] ___sys_sendmsg+0x1a5/0x2a0 [ 652.408676][T12066] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.408761][T12066] ? __fget_files+0x2a/0x420 [ 652.408785][T12066] ? __fget_files+0x3a0/0x420 [ 652.408820][T12066] __x64_sys_sendmsg+0x19b/0x260 [ 652.408856][T12066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.408898][T12066] ? __pfx_ksys_write+0x10/0x10 [ 652.408922][T12066] ? do_syscall_64+0xbe/0x3b0 [ 652.408950][T12066] do_syscall_64+0xfa/0x3b0 [ 652.408974][T12066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.408999][T12066] ? asm_sysvec_call_function_single+0x1a/0x20 [ 652.409020][T12066] ? clear_bhb_loop+0x60/0xb0 [ 652.409043][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.409060][T12066] RIP: 0033:0x7f632d18e9a9 [ 652.409078][T12066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.409093][T12066] RSP: 002b:00007f632e05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.409112][T12066] RAX: ffffffffffffffda RBX: 00007f632d3b6080 RCX: 00007f632d18e9a9 [ 652.409125][T12066] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 652.409138][T12066] RBP: 00007f632e05d090 R08: 0000000000000000 R09: 0000000000000000 [ 652.409151][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.409162][T12066] R13: 0000000000000000 R14: 00007f632d3b6080 R15: 00007ffd3d15aed8 [ 652.409195][T12066] [ 652.610630][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.676394][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.684581][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.215369][T12038] ipvlan6: entered promiscuous mode [ 653.299547][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.363833][T11909] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.398768][T11909] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.399041][T12073] cgroup: No subsys list or none specified [ 653.432116][T11909] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.440985][T11909] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.702568][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.319686][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.476195][ T5928] kernel write not supported for file /input/event2 (pid: 5928 comm: kworker/1:6) [ 654.504706][T12078] overlayfs: missing 'lowerdir' [ 654.696126][T12069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.704767][T12069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.744693][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.769756][T12069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.795723][T12069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.988791][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 656.000946][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.280044][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 657.330621][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.340072][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 657.350235][ T24] usb 4-1: can't read configurations, error -71 [ 657.386439][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.514889][T12105] FAULT_INJECTION: forcing a failure. [ 657.514889][T12105] name failslab, interval 1, probability 0, space 0, times 0 [ 657.528072][T12105] CPU: 0 UID: 0 PID: 12105 Comm: syz.2.1695 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 657.528101][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.528119][T12105] Call Trace: [ 657.528128][T12105] [ 657.528137][T12105] dump_stack_lvl+0x189/0x250 [ 657.528166][T12105] ? __pfx____ratelimit+0x10/0x10 [ 657.528187][T12105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.528218][T12105] ? __pfx__printk+0x10/0x10 [ 657.528249][T12105] ? __pfx___might_resched+0x10/0x10 [ 657.528273][T12105] ? fs_reclaim_acquire+0x7d/0x100 [ 657.528303][T12105] should_fail_ex+0x414/0x560 [ 657.528332][T12105] should_failslab+0xa8/0x100 [ 657.528356][T12105] __kmalloc_noprof+0xcb/0x4f0 [ 657.528376][T12105] ? sock_kmalloc+0xd6/0x160 [ 657.528401][T12105] sock_kmalloc+0xd6/0x160 [ 657.528425][T12105] ____sys_sendmsg+0x1b5/0x830 [ 657.528466][T12105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.528510][T12105] ? import_iovec+0x74/0xa0 [ 657.528544][T12105] ___sys_sendmsg+0x21f/0x2a0 [ 657.528591][T12105] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.528664][T12105] ? __fget_files+0x2a/0x420 [ 657.528687][T12105] ? __fget_files+0x3a0/0x420 [ 657.528723][T12105] __x64_sys_sendmsg+0x19b/0x260 [ 657.528778][T12105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.528842][T12105] do_syscall_64+0xfa/0x3b0 [ 657.528868][T12105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.528890][T12105] ? asm_sysvec_call_function_single+0x1a/0x20 [ 657.528912][T12105] ? clear_bhb_loop+0x60/0xb0 [ 657.528938][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.528957][T12105] RIP: 0033:0x7f54b338e9a9 [ 657.528976][T12105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.528995][T12105] RSP: 002b:00007f54b423f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.529017][T12105] RAX: ffffffffffffffda RBX: 00007f54b35b6080 RCX: 00007f54b338e9a9 [ 657.529034][T12105] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 657.529047][T12105] RBP: 00007f54b423f090 R08: 0000000000000000 R09: 0000000000000000 [ 657.529061][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.529073][T12105] R13: 0000000000000000 R14: 00007f54b35b6080 R15: 00007fff6f2963d8 [ 657.529108][T12105] [ 657.758389][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.333458][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.580444][T12120] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1700'. [ 658.804897][T12124] ipvlan2: entered promiscuous mode [ 658.818552][T12124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 658.826704][T12124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 658.835697][T12124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 658.843976][T12124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 658.849417][T12123] binder: 12122:12123 ioctl c018620c 200000000380 returned -22 [ 659.492772][T12131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1704'. [ 659.536074][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.020231][ T43] kernel write not supported for file /input/event2 (pid: 43 comm: kworker/1:1) [ 660.023413][T12129] overlayfs: missing 'lowerdir' [ 660.425742][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.696100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.811935][T12141] tty tty26: ldisc open failed (-12), clearing slot 25 [ 661.982539][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.310019][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.489656][ T5898] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 662.804581][T12158] FAULT_INJECTION: forcing a failure. [ 662.804581][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.818116][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.4.1709 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 662.818146][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.818160][T12158] Call Trace: [ 662.818170][T12158] [ 662.818180][T12158] dump_stack_lvl+0x189/0x250 [ 662.818208][T12158] ? __pfx____ratelimit+0x10/0x10 [ 662.818225][T12158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.818242][T12158] ? __pfx__printk+0x10/0x10 [ 662.818263][T12158] ? __might_fault+0xb0/0x130 [ 662.818287][T12158] should_fail_ex+0x414/0x560 [ 662.818307][T12158] _copy_from_user+0x2d/0xb0 [ 662.818330][T12158] ____sys_sendmsg+0x2fe/0x830 [ 662.818360][T12158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.818391][T12158] ? import_iovec+0x74/0xa0 [ 662.818416][T12158] ___sys_sendmsg+0x21f/0x2a0 [ 662.818442][T12158] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.818495][T12158] ? __fget_files+0x2a/0x420 [ 662.818512][T12158] ? __fget_files+0x3a0/0x420 [ 662.818538][T12158] __x64_sys_sendmsg+0x19b/0x260 [ 662.818564][T12158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.818608][T12158] do_syscall_64+0xfa/0x3b0 [ 662.818647][T12158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.818662][T12158] ? asm_sysvec_call_function_single+0x1a/0x20 [ 662.818677][T12158] ? clear_bhb_loop+0x60/0xb0 [ 662.818701][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.818717][T12158] RIP: 0033:0x7f2d3558e9a9 [ 662.818731][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.818744][T12158] RSP: 002b:00007f2d3643c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.818759][T12158] RAX: ffffffffffffffda RBX: 00007f2d357b6080 RCX: 00007f2d3558e9a9 [ 662.818771][T12158] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 662.818780][T12158] RBP: 00007f2d3643c090 R08: 0000000000000000 R09: 0000000000000000 [ 662.818789][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.818799][T12158] R13: 0000000000000000 R14: 00007f2d357b6080 R15: 00007ffce1796118 [ 662.818823][T12158] [ 663.522468][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.553227][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.735675][ T5898] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 663.761334][ T5898] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 663.778218][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.787302][ T5898] usb 6-1: Product: syz [ 663.796649][ T5898] usb 6-1: Manufacturer: syz [ 663.801761][ T5898] usb 6-1: SerialNumber: syz [ 664.675521][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.808389][ T5898] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 665.253341][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 665.275207][ T5928] kernel write not supported for file /input/event2 (pid: 5928 comm: kworker/1:6) [ 665.288429][T12183] overlayfs: missing 'lowerdir' [ 665.307455][ T5898] usb 6-1: device firmware changed [ 665.465457][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.488193][ T5898] usb 6-1: USB disconnect, device number 2 [ 665.488198][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.503678][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.512391][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.693497][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.863363][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.971548][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.121787][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.554278][T12202] netlink: 'syz.3.1722': attribute type 12 has an invalid length. [ 666.562274][T12202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1722'. [ 666.571599][T12203] netlink: 'syz.3.1722': attribute type 12 has an invalid length. [ 666.579563][T12203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1722'. [ 666.591573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.602507][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.004472][T12231] lo speed is unknown, defaulting to 1000 [ 669.012412][T12231] lo speed is unknown, defaulting to 1000 [ 669.067471][T12231] lo speed is unknown, defaulting to 1000 [ 669.471279][T12231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 669.491934][T12231] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 669.540370][T12231] lo speed is unknown, defaulting to 1000 [ 669.548804][T12231] lo speed is unknown, defaulting to 1000 [ 669.558588][T12231] lo speed is unknown, defaulting to 1000 [ 669.566628][T12231] lo speed is unknown, defaulting to 1000 [ 669.574993][T12231] lo speed is unknown, defaulting to 1000 [ 669.582741][T12231] lo speed is unknown, defaulting to 1000 [ 669.972204][T12239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1734'. [ 670.126618][T12244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1734'. [ 671.118351][ T43] net_ratelimit: 5 callbacks suppressed [ 671.118389][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.163127][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.172139][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.180923][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.297727][T12253] input: syz1 as /devices/virtual/input/input63 [ 671.335004][T12237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.347318][T12237] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 671.366989][T12237] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.378930][T12237] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 671.399504][T12237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 671.405794][T12237] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 671.423403][T12237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 671.429359][T12237] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 671.552657][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 671.692364][ T43] usb 6-1: device descriptor read/64, error -71 [ 671.864160][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.878066][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 671.933320][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 672.385290][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.393646][ T10] usb 2-1: config 131 has an invalid interface number: 242 but max is 0 [ 672.422270][T12237] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 672.443687][ T10] usb 2-1: config 131 has no interface number 0 [ 672.451476][T12237] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 672.465770][ T43] usb 6-1: device descriptor read/64, error -71 [ 672.467786][ T10] usb 2-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64 [ 672.629001][ T43] usb usb6-port1: attempt power cycle [ 672.633019][ T10] usb 2-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0 [ 672.721612][ T10] usb 2-1: config 131 interface 242 has no altsetting 0 [ 672.759028][ T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10 [ 672.768582][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 672.803994][ T10] usb 2-1: Product: syz [ 672.820797][ T10] usb 2-1: Manufacturer: syz [ 672.840436][ T10] usb 2-1: SerialNumber: syz [ 672.861129][T12265] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 672.891543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.973686][T12284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.041794][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 673.072564][ T43] usb 6-1: device descriptor read/8, error -71 [ 673.095030][ T10] kvaser_usb 2-1:131.242: error -ENODEV: Cannot get usb endpoint(s) [ 673.103745][ T5911] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 673.148618][ T10] usb 2-1: USB disconnect, device number 50 [ 673.311628][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 673.386300][ T43] usb 6-1: device descriptor read/8, error -71 [ 673.441685][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 673.457449][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.459808][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.486547][ T5911] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 673.500472][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 673.502123][ T43] usb usb6-port1: unable to enumerate USB device [ 673.511144][ T5911] usb 3-1: Product: syz [ 673.519662][ T5911] usb 3-1: SerialNumber: syz [ 673.538840][ T5911] usb 3-1: config 0 descriptor?? [ 673.653730][ T6001] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 673.823063][ T6001] usb 4-1: Using ep0 maxpacket: 32 [ 673.848058][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.887415][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.931551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.954982][ T6001] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 674.759251][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.804913][ T6001] usb 4-1: config 0 descriptor?? [ 676.359804][ T6001] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 676.552238][ T6001] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 676.614860][ T5928] usb 3-1: USB disconnect, device number 32 [ 676.693041][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.735208][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.911764][ T6001] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 676.923659][ T24] net_ratelimit: 6 callbacks suppressed [ 676.923675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.953736][ T6001] ft260 0003:0403:6030.0008: i2c bus error: 0x22 [ 677.051588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.183220][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.322674][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.572143][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.620920][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.941668][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.972261][ T10] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 677.979049][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.999171][T12345] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1754'. [ 678.973800][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.102900][T12344] lo speed is unknown, defaulting to 1000 [ 679.365301][ T6001] usb 4-1: USB disconnect, device number 36 [ 680.012248][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.944188][T12364] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 681.023123][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.095314][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.161715][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.177600][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.254199][T12376] ceph: No mds server is up or the cluster is laggy [ 682.563321][ T24] libceph: connect (1)[c::]:6789 error -101 [ 682.592069][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 682.862161][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.871140][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.880308][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.211732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.482357][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.538728][T12384] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 684.261533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.504784][T12393] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 684.512686][T12393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.675662][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.023007][T12395] FAULT_INJECTION: forcing a failure. [ 685.023007][T12395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.045510][T12395] CPU: 0 UID: 0 PID: 12395 Comm: syz.4.1765 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 685.045539][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.045552][T12395] Call Trace: [ 685.045560][T12395] [ 685.045569][T12395] dump_stack_lvl+0x189/0x250 [ 685.045598][T12395] ? __pfx____ratelimit+0x10/0x10 [ 685.045620][T12395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.045642][T12395] ? __pfx__printk+0x10/0x10 [ 685.045668][T12395] ? __might_fault+0xb0/0x130 [ 685.045700][T12395] should_fail_ex+0x414/0x560 [ 685.045727][T12395] _copy_from_user+0x2d/0xb0 [ 685.045774][T12395] ___sys_sendmsg+0x158/0x2a0 [ 685.045812][T12395] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.045886][T12395] ? __fget_files+0x2a/0x420 [ 685.045909][T12395] ? __fget_files+0x3a0/0x420 [ 685.045945][T12395] __x64_sys_sendmsg+0x19b/0x260 [ 685.045981][T12395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.046026][T12395] ? __pfx_ksys_write+0x10/0x10 [ 685.046044][T12395] ? rcu_is_watching+0x15/0xb0 [ 685.046073][T12395] ? do_syscall_64+0xbe/0x3b0 [ 685.046102][T12395] do_syscall_64+0xfa/0x3b0 [ 685.046124][T12395] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.046146][T12395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.046168][T12395] ? clear_bhb_loop+0x60/0xb0 [ 685.046194][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.046214][T12395] RIP: 0033:0x7f2d3558e9a9 [ 685.046233][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.046252][T12395] RSP: 002b:00007f2d3645d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.046274][T12395] RAX: ffffffffffffffda RBX: 00007f2d357b5fa0 RCX: 00007f2d3558e9a9 [ 685.046290][T12395] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 685.046303][T12395] RBP: 00007f2d3645d090 R08: 0000000000000000 R09: 0000000000000000 [ 685.046316][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.046328][T12395] R13: 0000000000000000 R14: 00007f2d357b5fa0 R15: 00007ffce1796118 [ 685.046362][T12395] [ 686.917996][T12403] FAULT_INJECTION: forcing a failure. [ 686.917996][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 686.931058][T12403] CPU: 1 UID: 0 PID: 12403 Comm: syz.3.1766 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 686.931078][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 686.931087][T12403] Call Trace: [ 686.931094][T12403] [ 686.931110][T12403] dump_stack_lvl+0x189/0x250 [ 686.931131][T12403] ? __pfx____ratelimit+0x10/0x10 [ 686.931148][T12403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.931166][T12403] ? __pfx__printk+0x10/0x10 [ 686.931188][T12403] ? __pfx___might_resched+0x10/0x10 [ 686.931206][T12403] ? fs_reclaim_acquire+0x7d/0x100 [ 686.931228][T12403] should_fail_ex+0x414/0x560 [ 686.931249][T12403] should_failslab+0xa8/0x100 [ 686.931267][T12403] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 686.931283][T12403] ? __alloc_skb+0x112/0x2d0 [ 686.931303][T12403] ? is_bpf_text_address+0x292/0x2b0 [ 686.931322][T12403] __alloc_skb+0x112/0x2d0 [ 686.931347][T12403] alloc_skb_with_frags+0xca/0x890 [ 686.931415][T12403] sock_alloc_send_pskb+0x857/0x990 [ 686.931459][T12403] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 686.931479][T12403] ? ip6_make_skb+0x1bd/0x410 [ 686.931507][T12403] ? udpv6_sendmsg+0x1b83/0x24c0 [ 686.931532][T12403] ? __sock_sendmsg+0xe5/0x270 [ 686.931547][T12403] ? ____sys_sendmsg+0x505/0x830 [ 686.931569][T12403] ? ___sys_sendmsg+0x21f/0x2a0 [ 686.931590][T12403] ? __x64_sys_sendmsg+0x19b/0x260 [ 686.931612][T12403] ? do_syscall_64+0xfa/0x3b0 [ 686.931627][T12403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.931651][T12403] __ip6_append_data+0x2ab5/0x3de0 [ 686.931690][T12403] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 686.931717][T12403] ? ip6_mtu+0x7d/0x3f0 [ 686.931740][T12403] ? __pfx___ip6_append_data+0x10/0x10 [ 686.931764][T12403] ? ip6_setup_cork+0xa1c/0x10e0 [ 686.931790][T12403] ip6_make_skb+0x2ce/0x410 [ 686.931815][T12403] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 686.931834][T12403] ? __pfx_ip6_make_skb+0x10/0x10 [ 686.931867][T12403] ? ip6_dst_hoplimit+0x96/0x350 [ 686.931883][T12403] ? ip6_dst_hoplimit+0x96/0x350 [ 686.931902][T12403] udpv6_sendmsg+0x1b83/0x24c0 [ 686.931933][T12403] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 686.931952][T12403] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 686.931977][T12403] ? __lock_acquire+0xab9/0xd20 [ 686.932004][T12403] ? __local_bh_enable_ip+0x12d/0x1c0 [ 686.932020][T12403] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 686.932041][T12403] ? inet_send_prepare+0x1b9/0x270 [ 686.932060][T12403] ? inet_send_prepare+0x1b9/0x270 [ 686.932079][T12403] ? inet6_sendmsg+0xe4/0x120 [ 686.932104][T12403] __sock_sendmsg+0xe5/0x270 [ 686.932124][T12403] ____sys_sendmsg+0x505/0x830 [ 686.932152][T12403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.932183][T12403] ? import_iovec+0x74/0xa0 [ 686.932207][T12403] ___sys_sendmsg+0x21f/0x2a0 [ 686.932231][T12403] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.932286][T12403] ? __fget_files+0x2a/0x420 [ 686.932302][T12403] ? __fget_files+0x3a0/0x420 [ 686.932347][T12403] __x64_sys_sendmsg+0x19b/0x260 [ 686.932376][T12403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.932408][T12403] ? __pfx_ksys_write+0x10/0x10 [ 686.932427][T12403] ? do_syscall_64+0xbe/0x3b0 [ 686.932448][T12403] do_syscall_64+0xfa/0x3b0 [ 686.932464][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.932481][T12403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.932496][T12403] ? clear_bhb_loop+0x60/0xb0 [ 686.932515][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.932530][T12403] RIP: 0033:0x7f632d18e9a9 [ 686.932544][T12403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.932557][T12403] RSP: 002b:00007f632e07e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.932574][T12403] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18e9a9 [ 686.932586][T12403] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 686.932595][T12403] RBP: 00007f632e07e090 R08: 0000000000000000 R09: 0000000000000000 [ 686.932605][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.932614][T12403] R13: 0000000000000000 R14: 00007f632d3b5fa0 R15: 00007ffd3d15aed8 [ 686.932638][T12403] [ 687.331181][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.371514][ C0] net_ratelimit: 5 callbacks suppressed [ 687.371532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.218555][T12417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.226979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.467517][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.908500][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.933258][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.100816][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.400337][T12420] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 689.826772][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.201119][T12427] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 690.299515][T12428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1772'. [ 690.308681][T12428] tipc: Invalid UDP bearer configuration [ 690.308750][T12428] tipc: Enabling of bearer rejected, failed to enable media [ 690.956422][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.037750][T12429] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 691.048716][T12429] bond0: (slave wlan1): Opening slave failed [ 691.087912][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.380836][T12422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.015240][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.260638][T12443] input: syz1 as /devices/virtual/input/input64 [ 693.052211][ C0] net_ratelimit: 2 callbacks suppressed [ 693.052252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.581824][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.731855][T12454] Invalid logical block size (268435456) [ 694.101549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.223479][T12458] FAULT_INJECTION: forcing a failure. [ 694.223479][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.276710][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.1.1780 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 694.276745][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.276758][T12458] Call Trace: [ 694.276767][T12458] [ 694.276776][T12458] dump_stack_lvl+0x189/0x250 [ 694.276806][T12458] ? __pfx____ratelimit+0x10/0x10 [ 694.276830][T12458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.276853][T12458] ? __pfx__printk+0x10/0x10 [ 694.276897][T12458] should_fail_ex+0x414/0x560 [ 694.276926][T12458] _copy_from_user+0x2d/0xb0 [ 694.276958][T12458] __copy_msghdr+0x3c5/0x5b0 [ 694.276996][T12458] ___sys_sendmsg+0x1a5/0x2a0 [ 694.277034][T12458] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.277110][T12458] ? __fget_files+0x2a/0x420 [ 694.277135][T12458] ? __fget_files+0x3a0/0x420 [ 694.277171][T12458] __x64_sys_sendmsg+0x19b/0x260 [ 694.277209][T12458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.277268][T12458] ? __pfx_ksys_write+0x10/0x10 [ 694.277286][T12458] ? rcu_is_watching+0x15/0xb0 [ 694.277317][T12458] ? do_syscall_64+0xbe/0x3b0 [ 694.277346][T12458] do_syscall_64+0xfa/0x3b0 [ 694.277370][T12458] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.277393][T12458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.277415][T12458] ? clear_bhb_loop+0x60/0xb0 [ 694.277442][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.277463][T12458] RIP: 0033:0x7f472c38e9a9 [ 694.277481][T12458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.277500][T12458] RSP: 002b:00007f472d213038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.277523][T12458] RAX: ffffffffffffffda RBX: 00007f472c5b5fa0 RCX: 00007f472c38e9a9 [ 694.277540][T12458] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 694.277554][T12458] RBP: 00007f472d213090 R08: 0000000000000000 R09: 0000000000000000 [ 694.277568][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.277580][T12458] R13: 0000000000000000 R14: 00007f472c5b5fa0 R15: 00007ffd865ea988 [ 694.277616][T12458] [ 694.702039][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.131695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.275499][T12468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.283771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.312941][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.347940][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.465240][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.567443][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 695.643096][T12472] No source specified [ 696.063266][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 696.370477][ T24] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 696.393268][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.458989][ T24] usb 6-1: config 0 has no interface number 0 [ 696.526307][ T24] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 696.636863][ T24] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 696.733471][ T24] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.817152][ T24] usb 6-1: config 0 interface 52 has no altsetting 0 [ 697.103136][ T24] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 697.176221][ T24] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 697.237941][ T24] usb 6-1: Product: syz [ 697.239479][T12477] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1786'. [ 697.244577][ T24] usb 6-1: SerialNumber: syz [ 697.264979][ T24] usb 6-1: config 0 descriptor?? [ 697.338273][ T24] usb 6-1: can't set config #0, error -71 [ 697.376446][ T24] usb 6-1: USB disconnect, device number 7 [ 697.775384][T12482] lo speed is unknown, defaulting to 1000 [ 698.083282][ T24] net_ratelimit: 5 callbacks suppressed [ 698.083301][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.098132][T12486] can: request_module (can-proto-0) failed. [ 698.245996][ T5841] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 698.413835][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 698.450191][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.471352][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.131797][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.183242][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.202021][ T5841] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 699.253810][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.535336][ T5841] usb 5-1: config 0 descriptor?? [ 699.851610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.251832][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.329679][T12518] FAULT_INJECTION: forcing a failure. [ 700.329679][T12518] name failslab, interval 1, probability 0, space 0, times 0 [ 700.387865][T12518] CPU: 0 UID: 0 PID: 12518 Comm: syz.5.1797 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 700.387894][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.387908][T12518] Call Trace: [ 700.387917][T12518] [ 700.387925][T12518] dump_stack_lvl+0x189/0x250 [ 700.387953][T12518] ? __pfx____ratelimit+0x10/0x10 [ 700.387975][T12518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.387998][T12518] ? __pfx__printk+0x10/0x10 [ 700.388026][T12518] ? __pfx___might_resched+0x10/0x10 [ 700.388049][T12518] ? fs_reclaim_acquire+0x7d/0x100 [ 700.388077][T12518] should_fail_ex+0x414/0x560 [ 700.388104][T12518] should_failslab+0xa8/0x100 [ 700.388127][T12518] __kmalloc_noprof+0xcb/0x4f0 [ 700.388146][T12518] ? sock_kmalloc+0xd6/0x160 [ 700.388170][T12518] sock_kmalloc+0xd6/0x160 [ 700.388193][T12518] ____sys_sendmsg+0x1b5/0x830 [ 700.388230][T12518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.388271][T12518] ? import_iovec+0x74/0xa0 [ 700.388303][T12518] ___sys_sendmsg+0x21f/0x2a0 [ 700.388338][T12518] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.388406][T12518] ? __fget_files+0x2a/0x420 [ 700.388428][T12518] ? __fget_files+0x3a0/0x420 [ 700.388462][T12518] __x64_sys_sendmsg+0x19b/0x260 [ 700.388496][T12518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.388537][T12518] ? __pfx_ksys_write+0x10/0x10 [ 700.388553][T12518] ? rcu_is_watching+0x15/0xb0 [ 700.388580][T12518] ? do_syscall_64+0xbe/0x3b0 [ 700.388607][T12518] do_syscall_64+0xfa/0x3b0 [ 700.388628][T12518] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.388649][T12518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.388669][T12518] ? clear_bhb_loop+0x60/0xb0 [ 700.388694][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.388713][T12518] RIP: 0033:0x7f7b66b8e9a9 [ 700.388731][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.388748][T12518] RSP: 002b:00007f7b6794d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.388769][T12518] RAX: ffffffffffffffda RBX: 00007f7b66db5fa0 RCX: 00007f7b66b8e9a9 [ 700.388784][T12518] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 700.388804][T12518] RBP: 00007f7b6794d090 R08: 0000000000000000 R09: 0000000000000000 [ 700.388816][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.388828][T12518] R13: 0000000000000000 R14: 00007f7b66db5fa0 R15: 00007fffc80ba428 [ 700.388860][T12518] [ 701.490794][ T5841] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 702.051991][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.085706][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.002590][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.131521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.705366][ T10] usb 5-1: USB disconnect, device number 58 [ 704.181521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.425635][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.474435][ T6001] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 705.221726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.451707][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.251487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.372146][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.492242][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.291628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.865452][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.332544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.812042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.894974][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.920437][T12556] lo speed is unknown, defaulting to 1000 [ 709.193429][T12574] FAULT_INJECTION: forcing a failure. [ 709.193429][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.212904][T12574] CPU: 1 UID: 0 PID: 12574 Comm: syz.1.1809 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 709.212935][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.212949][T12574] Call Trace: [ 709.212957][T12574] [ 709.212966][T12574] dump_stack_lvl+0x189/0x250 [ 709.212996][T12574] ? __pfx____ratelimit+0x10/0x10 [ 709.213020][T12574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.213045][T12574] ? __pfx__printk+0x10/0x10 [ 709.213073][T12574] ? __might_fault+0xb0/0x130 [ 709.213109][T12574] should_fail_ex+0x414/0x560 [ 709.213138][T12574] _copy_from_user+0x2d/0xb0 [ 709.213169][T12574] ____sys_sendmsg+0x2fe/0x830 [ 709.213211][T12574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.213256][T12574] ? import_iovec+0x74/0xa0 [ 709.213290][T12574] ___sys_sendmsg+0x21f/0x2a0 [ 709.213327][T12574] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.213404][T12574] ? __fget_files+0x2a/0x420 [ 709.213428][T12574] ? __fget_files+0x3a0/0x420 [ 709.213483][T12574] __x64_sys_sendmsg+0x19b/0x260 [ 709.213519][T12574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.213563][T12574] ? __pfx_ksys_write+0x10/0x10 [ 709.213581][T12574] ? rcu_is_watching+0x15/0xb0 [ 709.213610][T12574] ? do_syscall_64+0xbe/0x3b0 [ 709.213639][T12574] do_syscall_64+0xfa/0x3b0 [ 709.213661][T12574] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.213683][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.213704][T12574] ? clear_bhb_loop+0x60/0xb0 [ 709.213731][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.213751][T12574] RIP: 0033:0x7f472c38e9a9 [ 709.213769][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.213787][T12574] RSP: 002b:00007f472d213038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.213809][T12574] RAX: ffffffffffffffda RBX: 00007f472c5b5fa0 RCX: 00007f472c38e9a9 [ 709.213825][T12574] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 709.213838][T12574] RBP: 00007f472d213090 R08: 0000000000000000 R09: 0000000000000000 [ 709.213851][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.213863][T12574] R13: 0000000000000000 R14: 00007f472c5b5fa0 R15: 00007ffd865ea988 [ 709.213905][T12574] [ 709.371585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.841639][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.932261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.958486][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 710.411494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.228910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.281516][ T6001] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 711.351474][ T5911] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 711.542499][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.572912][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.605284][ T6001] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 711.631694][ T6001] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 711.640976][ T6001] usb 3-1: Manufacturer: syz [ 711.647142][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 711.681267][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.690664][ T6001] usb 3-1: config 0 descriptor?? [ 711.701227][ T6001] hub 3-1:0.0: USB hub found [ 711.709670][ T5911] usb 5-1: config 0 descriptor?? [ 711.731537][ T1225] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 712.558234][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.928588][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.181956][ T6001] hub 3-1:0.0: 1 port detected [ 713.306373][ T1225] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 713.324445][ T1225] usb 4-1: config 0 has no interface number 1 [ 713.558941][ T5911] ath6kl: mismatched byte count 0 vs. expected 12 [ 713.566169][ T1225] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 713.598401][ T5911] ath6kl: Failed to init ath6kl core: -22 [ 713.612479][ T5841] net_ratelimit: 1 callbacks suppressed [ 713.612497][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.613025][T12580] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1814' resets device [ 713.639074][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 713.650852][ T5911] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 713.931495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.269696][ T1225] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 714.282351][ T6001] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 714.296801][ T5911] usb 5-1: USB disconnect, device number 59 [ 714.309318][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 714.317832][ T6001] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 714.339938][ T1225] usb 4-1: SerialNumber: syz [ 714.349062][ T6001] usbhid 3-1:0.0: can't add hid device: -32 [ 714.360834][ T1225] usb 4-1: config 0 descriptor?? [ 714.368642][ T6001] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 714.573697][ T1225] usb 4-1: Found UVC 0.00 device (0002:0000) [ 714.673657][T12622] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 714.971541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.217257][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.381816][ T1225] usb 4-1: No valid video chain found. [ 715.402742][ T6001] usb 3-1: USB disconnect, device number 33 [ 715.442901][ T1225] usb 4-1: USB disconnect, device number 37 [ 715.540602][T12627] lo speed is unknown, defaulting to 1000 [ 716.011746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.441795][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.450040][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.051487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.451784][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.981472][ T5928] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 718.101459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.181447][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 718.396993][T12664] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 718.429121][T12611] kernel write not supported for file /sysvipc/msg (pid: 12611 comm: kworker/0:5) [ 718.557863][T12669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.597290][T12669] FAULT_INJECTION: forcing a failure. [ 718.597290][T12669] name failslab, interval 1, probability 0, space 0, times 0 [ 718.610578][T12669] CPU: 0 UID: 0 PID: 12669 Comm: syz.1.1836 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 718.610616][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.610630][T12669] Call Trace: [ 718.610638][T12669] [ 718.610648][T12669] dump_stack_lvl+0x189/0x250 [ 718.610679][T12669] ? __pfx____ratelimit+0x10/0x10 [ 718.610703][T12669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.610729][T12669] ? __pfx__printk+0x10/0x10 [ 718.610764][T12669] ? __pfx___might_resched+0x10/0x10 [ 718.610788][T12669] ? fs_reclaim_acquire+0x7d/0x100 [ 718.610821][T12669] should_fail_ex+0x414/0x560 [ 718.610850][T12669] should_failslab+0xa8/0x100 [ 718.610877][T12669] __kmalloc_noprof+0xcb/0x4f0 [ 718.610897][T12669] ? kfree+0x4d/0x440 [ 718.610927][T12669] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 718.610962][T12669] tomoyo_realpath_from_path+0xe3/0x5d0 [ 718.610993][T12669] ? tomoyo_domain+0xda/0x130 [ 718.611030][T12669] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 718.611054][T12669] tomoyo_path_number_perm+0x1e8/0x5a0 [ 718.611081][T12669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 718.611126][T12669] ? __lock_acquire+0xab9/0xd20 [ 718.611173][T12669] ? __fget_files+0x2a/0x420 [ 718.611201][T12669] ? __fget_files+0x2a/0x420 [ 718.611224][T12669] ? __fget_files+0x3a0/0x420 [ 718.611247][T12669] ? __fget_files+0x2a/0x420 [ 718.611277][T12669] security_file_ioctl+0xcb/0x2d0 [ 718.611305][T12669] __se_sys_ioctl+0x47/0x170 [ 718.611344][T12669] do_syscall_64+0xfa/0x3b0 [ 718.611370][T12669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.611390][T12669] ? asm_sysvec_call_function_single+0x1a/0x20 [ 718.611412][T12669] ? clear_bhb_loop+0x60/0xb0 [ 718.611439][T12669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.611461][T12669] RIP: 0033:0x7f472c38e9a9 [ 718.611480][T12669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.611499][T12669] RSP: 002b:00007f472d1f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.611522][T12669] RAX: ffffffffffffffda RBX: 00007f472c5b6080 RCX: 00007f472c38e9a9 [ 718.611538][T12669] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000006 [ 718.611552][T12669] RBP: 00007f472d1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 718.611565][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.611579][T12669] R13: 0000000000000000 R14: 00007f472c5b6080 R15: 00007ffd865ea988 [ 718.611628][T12669] [ 718.856552][T12669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.984063][ T5841] net_ratelimit: 2 callbacks suppressed [ 718.984084][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.094711][T12611] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 719.141684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.383956][ T5928] usb 5-1: device descriptor read/all, error -71 [ 719.453629][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.462651][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.472780][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.489207][T12611] usb 3-1: config index 0 descriptor too short (expected 60476, got 36) [ 719.508109][T12611] usb 3-1: config 217 has too many interfaces: 37, using maximum allowed: 32 [ 719.529997][T12611] usb 3-1: config 217 has an invalid descriptor of length 168, skipping remainder of the config [ 719.554452][T12611] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 37 [ 719.769543][T12611] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 719.779439][T12611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.171469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.539867][T12611] usb 3-1: string descriptor 0 read error: -71 [ 720.567548][T12611] usb 3-1: USB disconnect, device number 34 [ 720.609882][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.957913][T12690] lo speed is unknown, defaulting to 1000 [ 721.221454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.622444][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.101918][ T5928] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 722.251666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.921494][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 722.936792][ T5928] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.965213][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 723.013958][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 723.041684][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.226732][ T5928] usb 2-1: config 0 descriptor?? [ 723.304973][T12713] syz_tun: entered allmulticast mode [ 723.331168][T12713] syz_tun: left allmulticast mode [ 723.676130][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.718344][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.735453][ T30] audit: type=1326 audit(1753905919.972:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 723.772839][ T30] audit: type=1326 audit(1753905919.982:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 723.797443][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.832072][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.891222][ T30] audit: type=1326 audit(1753905920.012:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 723.967632][ T30] audit: type=1326 audit(1753905920.012:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.032890][ T30] audit: type=1326 audit(1753905920.012:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.091840][ T30] audit: type=1326 audit(1753905920.012:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.184162][ T30] audit: type=1326 audit(1753905920.012:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.244876][ T5928] usb 2-1: USB disconnect, device number 51 [ 724.263635][ T30] audit: type=1326 audit(1753905920.012:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.331756][ C1] net_ratelimit: 4 callbacks suppressed [ 724.331775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.366324][ T30] audit: type=1326 audit(1753905920.012:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.430474][ T30] audit: type=1326 audit(1753905920.012:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b338e9a9 code=0x7ffc0000 [ 724.811895][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.372953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.524756][ T2928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.533695][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.555883][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.851628][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.032039][T12743] syz.1.1857 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 726.411451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.897944][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.956847][T12753] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 728.949390][T12770] ip6t_srh: unknown srh match flags 4000 [ 729.131944][T12773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.531448][ C1] net_ratelimit: 5 callbacks suppressed [ 729.531472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.173002][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.571502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.634803][T12787] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1868'. [ 731.103050][T12793] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1871'. [ 731.214062][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.382616][ T6285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.398516][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.621680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.990791][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.046420][ T1225] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 732.661458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.726237][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.841547][ T1225] usb 6-1: Using ep0 maxpacket: 8 [ 732.878609][ T1225] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 732.891618][ T1225] usb 6-1: config 127 has no interface number 1 [ 732.911610][ T1225] usb 6-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81 [ 732.942576][ T1225] usb 6-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.959155][ T1225] usb 6-1: config 127 interface 171 has no altsetting 0 [ 732.968715][ T1225] usb 6-1: config 127 interface 0 has no altsetting 0 [ 733.307427][ T1225] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 733.316994][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.419347][T12807] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 734.047897][ T1225] usb 6-1: Product: syz [ 734.052182][ T1225] usb 6-1: Manufacturer: syz [ 734.056796][ T1225] usb 6-1: SerialNumber: syz [ 734.096514][ T1225] usb 6-1: can't set config #127, error -71 [ 734.132276][ T1225] usb 6-1: USB disconnect, device number 8 [ 734.224093][T12812] ip6t_srh: unknown srh match flags 4000 [ 734.364455][T12816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.732405][ C1] net_ratelimit: 2 callbacks suppressed [ 734.738139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.069998][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.220257][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.236783][T12813] xt_hashlimit: max too large, truncated to 1048576 [ 735.249611][T12813] No such timeout policy "syz1" [ 735.781469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.254249][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.811519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.974993][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.984300][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.309092][T12611] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 737.310068][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.459252][T12849] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 737.861740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.092476][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.107211][ T2989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.164322][T12611] usb 5-1: device descriptor read/64, error -71 [ 738.412757][T12611] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 739.391648][T12611] usb 5-1: device descriptor read/64, error -71 [ 739.521839][T12611] usb usb5-port1: attempt power cycle [ 739.905363][T12869] vlan2: entered allmulticast mode [ 739.910517][T12869] macvtap0: entered allmulticast mode [ 739.931511][ C1] net_ratelimit: 5 callbacks suppressed [ 739.931531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.948522][T12869] veth0_macvtap: entered allmulticast mode [ 740.344639][T12874] input: syz1 as /devices/virtual/input/input68 [ 740.426363][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.938158][T12877] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1895'. [ 740.953719][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 740.971659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.980554][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 740.991480][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 741.003439][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 741.011764][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.025896][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 741.038239][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 741.050418][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 741.058877][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 741.081683][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.131952][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.168224][T12878] lo speed is unknown, defaulting to 1000 [ 741.619182][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.021477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.682535][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.842960][T12894] syz.4.1898: attempt to access beyond end of device [ 742.842960][T12894] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 743.045156][T12878] chnl_net:caif_netlink_parms(): no params data found [ 743.061471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.245019][ T5853] Bluetooth: hci6: command tx timeout [ 743.271093][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.280816][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.380245][T12900] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 744.281239][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.316839][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.324463][T12878] bridge_slave_0: entered allmulticast mode [ 744.338281][T12878] bridge_slave_0: entered promiscuous mode [ 744.348873][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.361913][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.369417][T12878] bridge_slave_1: entered allmulticast mode [ 744.395140][T12878] bridge_slave_1: entered promiscuous mode [ 744.404484][ T5911] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 744.676036][T12911] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 745.035977][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 745.131457][ C1] net_ratelimit: 3 callbacks suppressed [ 745.131480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.201833][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.228202][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.251039][ T5911] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 745.260383][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.270711][ T5911] usb 2-1: config 0 descriptor?? [ 745.291619][ T5853] Bluetooth: hci6: command tx timeout [ 745.828038][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.848364][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.986215][T12878] team0: Port device team_slave_0 added [ 746.171509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.743252][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.752122][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.760877][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 746.832017][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.942010][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.957693][ T5911] waltop 0003:172F:0501.000B: unknown main item tag 0x0 [ 746.977942][T12878] team0: Port device team_slave_1 added [ 746.991504][ T5911] waltop 0003:172F:0501.000B: unknown main item tag 0x0 [ 747.026909][ T5911] waltop 0003:172F:0501.000B: unknown main item tag 0x0 [ 747.140753][ T5911] waltop 0003:172F:0501.000B: unknown main item tag 0x0 [ 747.171067][ T5911] waltop 0003:172F:0501.000B: unknown main item tag 0x0 [ 747.211706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.536229][ T5853] Bluetooth: hci6: command tx timeout [ 747.542018][ T5911] waltop 0003:172F:0501.000B: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 747.865207][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.939575][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 748.026200][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.036483][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.114991][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.149240][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.164607][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.198884][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.261526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.381681][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.428938][T12878] hsr_slave_0: entered promiscuous mode [ 748.436725][T12878] hsr_slave_1: entered promiscuous mode [ 748.448096][T12878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.456836][T12878] Cannot create hsr debugfs directory [ 748.490358][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.573153][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.638322][ T1225] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 748.653397][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.791878][ T1225] usb 5-1: Using ep0 maxpacket: 16 [ 748.808086][ T1225] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 748.856671][ T1225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 748.894322][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.897242][ T1225] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 748.947885][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.966761][ T1225] usb 5-1: Product: syz [ 748.972093][ T1225] usb 5-1: Manufacturer: syz [ 748.977184][ T1225] usb 5-1: SerialNumber: syz [ 748.986612][ T1225] usb 5-1: config 0 descriptor?? [ 748.997149][ T1225] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 749.006673][ T1225] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 749.078565][ T5928] usb 2-1: USB disconnect, device number 52 [ 749.145477][ T36] bridge_slave_0: left allmulticast mode [ 749.151762][ T36] bridge_slave_0: left promiscuous mode [ 749.169728][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.278356][T12946] input: syz1 as /devices/virtual/input/input70 [ 749.291552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.611596][ T5853] Bluetooth: hci6: command tx timeout [ 749.664718][ T1225] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 749.801490][T12957] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 750.331862][ C1] net_ratelimit: 3 callbacks suppressed [ 750.331883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.645122][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.755995][ T1225] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 750.795030][ T1225] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 750.821720][ T1225] em28xx 5-1:0.0: No AC97 audio processor [ 750.857084][ T1225] usb 5-1: USB disconnect, device number 65 [ 750.887334][ T1225] em28xx 5-1:0.0: Disconnecting em28xx [ 750.925063][ T1225] em28xx 5-1:0.0: Freeing device [ 751.371492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.708875][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.715489][T12971] ip6t_srh: unknown srh match flags 4000 [ 751.953738][T12975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.411482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.735217][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.031832][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.057357][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.451702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.093270][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.221447][T12984] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 754.229417][T12984] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 754.240614][T12984] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 754.248612][T12984] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 754.438523][ T36] team0: Port device geneve1 removed [ 754.501477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.796528][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.805724][ T36] bond_slave_0: left allmulticast mode [ 754.814506][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.824491][ T36] bond_slave_1: left allmulticast mode [ 754.832262][ T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 754.843720][ T36] bridge_slave_1: left allmulticast mode [ 754.851115][ T36] bond0 (unregistering): Released all slaves [ 754.954419][ T36] bond1 (unregistering): (slave wlan0): Releasing active interface [ 754.962558][ T36] vlan4: entered promiscuous mode [ 754.969375][ T36] bond1 (unregistering): (slave vlan4): Releasing active interface [ 754.980175][ T36] bond1 (unregistering): Released all slaves [ 755.024416][T12979] ipvlan3: entered promiscuous mode [ 755.289306][T12878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 755.399133][T12878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 755.531446][ C1] net_ratelimit: 4 callbacks suppressed [ 755.531465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.624526][T12878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 755.645476][ T36] tipc: Left network mode [ 755.661735][T12990] sp0: Synchronizing with TNC [ 756.321910][T12878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.342180][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.571738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.815329][T11314] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 756.956009][T13010] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 757.493881][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.621661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.832283][T11314] usb 5-1: device descriptor read/all, error -71 [ 758.091100][T13016] NILFS (nbd3): device size too small [ 758.651637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.774317][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.904977][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.691580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.932263][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.606016][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.614855][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.731466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.796872][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.934097][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.991386][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.115743][ T36] veth1_macvtap: left promiscuous mode [ 761.358672][ T36] veth0_macvtap: left promiscuous mode [ 761.381806][ T36] veth1_vlan: left promiscuous mode [ 761.388594][ T36] veth0_vlan: left promiscuous mode [ 761.614465][ T1225] IPVS: starting estimator thread 0... [ 761.704470][T13043] IPVS: using max 40 ests per chain, 96000 per kthread [ 761.781485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.853020][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.861509][ T1225] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 762.012503][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.032526][ T1225] usb 5-1: Using ep0 maxpacket: 8 [ 762.062291][ T1225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.092290][ T1225] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 762.129940][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.173654][ T1225] usb 5-1: config 0 descriptor?? [ 762.194398][ T1225] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 762.764058][T13052] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 762.772044][T13052] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 762.780634][T13052] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 762.788587][T13052] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 762.811799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.979073][ T1225] gspca_vc032x: reg_w err -110 [ 762.992924][ T1225] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 763.094413][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.400292][ T36] team0 (unregistering): Port device team_slave_1 removed [ 763.480316][ T36] team0 (unregistering): Port device team_slave_0 removed [ 763.861459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.169221][T13062] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 764.177318][T13062] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 764.188569][T13062] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 764.196588][T13062] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 764.451643][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.518873][ T1225] usb 5-1: USB disconnect, device number 68 [ 764.577049][T12878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.643547][T13049] ipvlan4: entered promiscuous mode [ 764.804668][T12878] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.891476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.995808][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.003043][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.018290][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.025507][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.066996][T13068] ip6t_srh: unknown srh match flags 4000 [ 765.256781][T13076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.351536][T12670] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 765.359391][T13074] kvm: apic: phys broadcast and lowest prio [ 765.931676][ C1] net_ratelimit: 2 callbacks suppressed [ 765.931698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.121474][T12670] usb 6-1: Using ep0 maxpacket: 8 [ 766.575604][T12670] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 766.585012][T12670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.593123][T12670] usb 6-1: Product: syz [ 766.597319][T12670] usb 6-1: Manufacturer: syz [ 766.601983][T12670] usb 6-1: SerialNumber: syz [ 766.614358][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.628089][T12670] usb 6-1: config 0 descriptor?? [ 766.844408][T12670] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 766.971550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.743569][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.941660][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.021487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.815314][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.853885][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.888721][ T36] IPVS: stop unused estimator thread 0... [ 769.061692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.183309][T12670] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 769.416139][T12670] usb 6-1: USB disconnect, device number 9 [ 769.852344][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.101453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.974829][ T1225] net_ratelimit: 1 callbacks suppressed [ 770.974849][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.131494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.141920][T12878] veth0_vlan: entered promiscuous mode [ 771.175635][T12878] veth1_vlan: entered promiscuous mode [ 771.320935][T12878] veth0_macvtap: entered promiscuous mode [ 771.363681][T12878] veth1_macvtap: entered promiscuous mode [ 771.386584][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.398686][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.408604][T13119] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 771.441305][T12878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.451044][T12878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.471406][T12878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.480169][T12878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.721443][ T1225] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 772.171902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.717026][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.882209][ T1225] usb 2-1: Using ep0 maxpacket: 8 [ 773.073339][ T1225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 773.211441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.267987][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.310810][ T1225] usb 2-1: config 4 interface 0 has no altsetting 0 [ 773.379323][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.839861][ T1225] usb 2-1: string descriptor 0 read error: -22 [ 774.060046][ T1225] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 774.120867][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.211993][ T1225] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 774.251457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.701718][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.301632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.300329][ T1225] usb 2-1: can't set config #4, error -71 [ 776.341467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.500848][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.710176][T13123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.753603][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.777526][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.821731][ T1225] usb 2-1: USB disconnect, device number 53 [ 777.166438][T12611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.381491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.682572][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.411663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.609487][T12670] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 778.655773][T13141] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1950'. [ 778.732111][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.793651][T12670] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 778.813462][T13135] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 778.821396][T13135] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 778.829898][T13135] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 778.838176][T13135] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 778.867654][T12670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.932773][T12670] usb 2-1: config 0 descriptor?? [ 779.146444][T12670] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 779.154174][ T5841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 779.341567][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 779.348929][T12670] [drm:udl_init] *ERROR* Selecting channel failed [ 779.358697][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.394261][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.409039][T12670] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 779.426283][ T5841] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 779.461509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.471101][T12670] [drm] Initialized udl on minor 2 [ 779.479686][T12670] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 779.498460][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.523780][T12670] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 779.561278][ T5841] usb 6-1: config 0 descriptor?? [ 779.585762][ T5897] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 779.595855][T12670] usb 2-1: USB disconnect, device number 54 [ 779.626369][ T5897] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 780.021303][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.048835][ T5841] corsair 0003:1B1C:1B02.000C: item fetching failed at offset 3/5 [ 780.078181][ T5841] corsair 0003:1B1C:1B02.000C: parse failed [ 780.162375][T13166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1957'. [ 780.173865][T13166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1957'. [ 780.501460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.663185][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1955'. [ 780.805798][ T5841] corsair 0003:1B1C:1B02.000C: probe with driver corsair failed with error -22 [ 781.310453][ T31] INFO: task syz.0.1591:11725 blocked for more than 143 seconds. [ 781.410266][ T31] Not tainted 6.16.0-syzkaller #0 [ 781.497282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 781.531663][ C1] net_ratelimit: 2 callbacks suppressed [ 781.531684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.366574][T13175] 9pnet_fd: Insufficient options for proto=fd [ 782.446925][T13172] overlayfs: missing 'lowerdir' [ 782.518806][ T5911] usb 6-1: USB disconnect, device number 10 [ 782.527251][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.538800][ T31] task:syz.0.1591 state:D stack:25768 pid:11725 tgid:11724 ppid:5834 task_flags:0x400140 flags:0x00004004 [ 782.563858][ T31] Call Trace: [ 782.567285][ T31] [ 782.571474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.584409][ T31] __schedule+0x16aa/0x4c90 [ 782.601227][ T31] ? __lock_acquire+0xab9/0xd20 [ 782.615396][ T31] ? schedule+0x165/0x360 [ 782.627324][ T31] ? __pfx___schedule+0x10/0x10 [ 782.641085][ T31] ? schedule+0x91/0x360 [ 782.660049][ T31] schedule+0x165/0x360 [ 782.674062][ T31] schedule_preempt_disabled+0x13/0x30 [ 782.689241][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 782.707985][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 782.725584][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 782.733796][ T31] ? __lock_acquire+0xab9/0xd20 [ 782.738942][ T31] ? do_lock_mount+0x200/0x510 [ 782.744227][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.750389][ T31] down_write+0x1ab/0x1f0 [ 782.755998][ T31] ? __pfx_down_write+0x10/0x10 [ 782.761091][ T31] ? __lock_acquire+0xab9/0xd20 [ 782.766530][ T31] do_lock_mount+0x200/0x510 [ 782.771546][ T31] ? __pfx_do_lock_mount+0x10/0x10 [ 782.777316][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 782.782787][ T31] ? mnt_warn_timestamp_expiry+0x133/0x2d0 [ 782.788799][ T31] ? _raw_spin_unlock+0x28/0x50 [ 782.794969][ T31] do_new_mount+0x389/0xa40 [ 782.799897][ T31] __se_sys_mount+0x317/0x410 [ 782.804923][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 782.810354][ T31] ? rcu_is_watching+0x15/0xb0 [ 782.816171][ T31] ? do_syscall_64+0xbe/0x3b0 [ 782.821056][ T31] ? __x64_sys_mount+0x20/0xc0 [ 782.826245][ T31] do_syscall_64+0xfa/0x3b0 [ 782.831464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.842222][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.848450][ T31] ? clear_bhb_loop+0x60/0xb0 [ 782.853687][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.859987][ T31] RIP: 0033:0x7fa202f8e9a9 [ 782.864855][ T31] RSP: 002b:00007fa203df3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 782.873813][ T31] RAX: ffffffffffffffda RBX: 00007fa2031b5fa0 RCX: 00007fa202f8e9a9 [ 782.882301][ T31] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 782.890468][ T31] RBP: 00007fa203010d69 R08: 0000200000002140 R09: 0000000000000000 [ 782.898987][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.908450][ T31] R13: 0000000000000000 R14: 00007fa2031b5fa0 R15: 00007ffd9456b8b8 [ 782.920097][ T31] [ 782.924501][ T31] INFO: task syz.0.1591:11729 blocked for more than 144 seconds. [ 782.946908][ T31] Not tainted 6.16.0-syzkaller #0 [ 782.969444][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 782.978702][ T31] task:syz.0.1591 state:D stack:27848 pid:11729 tgid:11724 ppid:5834 task_flags:0x400040 flags:0x00004004 [ 782.991217][ T31] Call Trace: [ 782.994953][ T31] [ 782.998030][ T31] __schedule+0x16aa/0x4c90 [ 783.003965][ T31] ? do_raw_spin_lock+0x121/0x290 [ 783.009185][ T31] ? schedule+0x165/0x360 [ 783.014819][ T31] ? __lock_acquire+0xab9/0xd20 [ 783.019819][ T31] ? __pfx___schedule+0x10/0x10 [ 783.025176][ T31] ? schedule+0x91/0x360 [ 783.029824][ T31] schedule+0x165/0x360 [ 783.034872][ T31] __fuse_simple_request+0xf15/0x18d0 [ 783.040719][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 783.047131][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 783.054119][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 783.060632][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 783.067277][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 783.072497][ T31] fuse_lookup_name+0x34c/0x860 [ 783.077804][ T31] ? __pfx_fuse_lookup_name+0x10/0x10 [ 783.083687][ T31] ? percpu_ref_get_many+0x19/0x140 [ 783.089349][ T31] fuse_lookup+0x1e9/0x640 [ 783.094994][ T31] ? __pfx_fuse_lookup+0x10/0x10 [ 783.100533][ T31] ? _raw_spin_unlock+0x28/0x50 [ 783.105938][ T31] ? d_alloc+0x144/0x190 [ 783.110651][ T31] lookup_one_qstr_excl_raw+0x115/0x280 [ 783.119822][ T31] filename_create+0x225/0x470 [ 783.127976][ T31] ? __pfx_filename_create+0x10/0x10 [ 783.135663][ T31] do_mkdirat+0xa0/0x590 [ 783.140343][ T31] ? __pfx_do_mkdirat+0x10/0x10 [ 783.145972][ T31] ? strncpy_from_user+0x150/0x290 [ 783.151672][ T31] ? getname_flags+0x1e5/0x540 [ 783.156807][ T31] __x64_sys_mkdir+0x6c/0x80 [ 783.161887][ T31] do_syscall_64+0xfa/0x3b0 [ 783.166864][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.172557][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.179256][ T31] ? clear_bhb_loop+0x60/0xb0 [ 783.184449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.190758][ T31] RIP: 0033:0x7fa202f8e9a9 [ 783.195691][ T31] RSP: 002b:00007fa203db1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 783.204633][ T31] RAX: ffffffffffffffda RBX: 00007fa2031b6160 RCX: 00007fa202f8e9a9 [ 783.215008][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 783.224667][ T31] RBP: 00007fa203010d69 R08: 0000000000000000 R09: 0000000000000000 [ 783.235794][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.245847][ T31] R13: 0000000000000000 R14: 00007fa2031b6160 R15: 00007ffd9456b8b8 [ 783.254837][ T31] [ 783.258431][ T31] [ 783.258431][ T31] Showing all locks held in the system: [ 783.270228][ T31] 1 lock held by ksoftirqd/1/23: [ 783.275685][ T31] #0: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 783.287737][ T31] 1 lock held by khungtaskd/31: [ 783.293178][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 783.303635][ T31] 3 locks held by kworker/u8:9/2994: [ 783.309272][ T31] #0: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 783.319747][ T31] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 783.334291][ T31] #2: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 783.348236][ T31] 2 locks held by getty/5597: [ 783.355728][ T31] #0: ffff8880356590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 783.366097][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 783.376494][ T31] 3 locks held by kworker/u8:25/6286: [ 783.382105][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 783.394118][ T31] #1: ffffc9001aea7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 783.406114][ T31] #2: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 783.416323][ T31] 1 lock held by syz.0.1591/11725: [ 783.421675][ T31] #0: ffff888056a7b248 (&type->i_mutex_dir_key#9){++++}-{4:4}, at: do_lock_mount+0x200/0x510 [ 783.432282][ T31] 2 locks held by syz.0.1591/11729: [ 783.437594][ T31] #0: ffff8880247d6428 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 783.447579][ T31] #1: ffff888056a7b248 (&type->i_mutex_dir_key#9/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470 [ 783.476684][ T31] [ 783.479149][ T31] ============================================= [ 783.479149][ T31] [ 783.487852][ T31] NMI backtrace for cpu 0 [ 783.487866][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 783.487888][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.487900][ T31] Call Trace: [ 783.487907][ T31] [ 783.487915][ T31] dump_stack_lvl+0x189/0x250 [ 783.487939][ T31] ? __wake_up_klogd+0xd9/0x110 [ 783.487967][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.487993][ T31] ? __pfx__printk+0x10/0x10 [ 783.488031][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 783.488062][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 783.488087][ T31] ? _printk+0xcf/0x120 [ 783.488115][ T31] ? __pfx__printk+0x10/0x10 [ 783.488142][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 783.488174][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 783.488205][ T31] watchdog+0xfee/0x1030 [ 783.488235][ T31] ? watchdog+0x1de/0x1030 [ 783.488270][ T31] kthread+0x70e/0x8a0 [ 783.488299][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.488325][ T31] ? __pfx_kthread+0x10/0x10 [ 783.488352][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.488370][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.488388][ T31] ? __pfx_kthread+0x10/0x10 [ 783.488414][ T31] ret_from_fork+0x3fc/0x770 [ 783.488435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 783.488459][ T31] ? __switch_to_asm+0x39/0x70 [ 783.488481][ T31] ? __switch_to_asm+0x33/0x70 [ 783.488503][ T31] ? __pfx_kthread+0x10/0x10 [ 783.488529][ T31] ret_from_fork_asm+0x1a/0x30 [ 783.488567][ T31] [ 783.488574][ T31] Sending NMI from CPU 0 to CPUs 1: [ 783.621503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.622838][ C1] NMI backtrace for cpu 1 [ 783.622852][ C1] CPU: 1 UID: 0 PID: 13170 Comm: syz.4.1956 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 783.622874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.622885][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 783.622919][ C1] Code: 0b 81 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8c f2 e0 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 97 48 2a 06 cc 44 89 f9 80 e1 07 38 c1 [ 783.622935][ C1] RSP: 0018:ffffc90000a07db0 EFLAGS: 00000006 [ 783.622951][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 783.622962][ C1] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 783.622974][ C1] RBP: 00000000000003f9 R08: 0000000000000003 R09: 0000000000000004 [ 783.622986][ C1] R10: dffffc0000000000 R11: ffffffff853f1a00 R12: dffffc0000000000 [ 783.623000][ C1] R13: dffffc0000000000 R14: ffffffff99dc20c0 R15: 0000000000000000 [ 783.623013][ C1] FS: 00007f2d3643c6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 783.623029][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 783.623042][ C1] CR2: 00007f472c5802d8 CR3: 00000000251be000 CR4: 00000000003526f0 [ 783.623058][ C1] Call Trace: [ 783.623065][ C1] [ 783.623075][ C1] serial8250_console_write+0x5f2/0x1ba0 [ 783.623112][ C1] ? __lock_acquire+0xab9/0xd20 [ 783.623131][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 783.623160][ C1] ? console_flush_all+0x13a/0xc40 [ 783.623185][ C1] ? console_flush_all+0x13a/0xc40 [ 783.623212][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 783.623236][ C1] ? console_flush_all+0x13a/0xc40 [ 783.623258][ C1] ? console_flush_all+0x13a/0xc40 [ 783.623283][ C1] console_flush_all+0x725/0xc40 [ 783.623308][ C1] ? console_flush_all+0x13a/0xc40 [ 783.623335][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 783.623366][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 783.623395][ C1] console_unlock+0xc4/0x270 [ 783.623418][ C1] ? __pfx_console_unlock+0x10/0x10 [ 783.623438][ C1] ? vprintk_emit+0x380/0x7a0 [ 783.623459][ C1] ? vprintk_emit+0x587/0x7a0 [ 783.623479][ C1] ? vprintk_emit+0x444/0x7a0 [ 783.623519][ C1] ? vprintk_emit+0x444/0x7a0 [ 783.623541][ C1] vprintk_emit+0x5b7/0x7a0 [ 783.623560][ C1] ? vprintk_emit+0x444/0x7a0 [ 783.623582][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 783.623601][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 783.623631][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 783.623672][ C1] _printk+0xcf/0x120 [ 783.623694][ C1] ? __pfx____ratelimit+0x10/0x10 [ 783.623715][ C1] ? __pfx__printk+0x10/0x10 [ 783.623745][ C1] ? __kernel_text_address+0xd/0x40 [ 783.623773][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 783.623801][ C1] gred_dequeue+0x4a6/0x680 [ 783.623827][ C1] __qdisc_run+0x239/0x15f0 [ 783.623851][ C1] ? __dev_queue_xmit+0xcf8/0x3a70 [ 783.623880][ C1] __dev_queue_xmit+0xfe1/0x3a70 [ 783.623899][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.623922][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 783.623945][ C1] ? arpt_do_table+0x1dc4/0x1fd0 [ 783.623979][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 783.624005][ C1] ? arpt_do_table+0x238/0x1fd0 [ 783.624035][ C1] ? __pfx_arpt_do_table+0x10/0x10 [ 783.624067][ C1] ? NF_HOOK+0x9e/0x3a0 [ 783.624092][ C1] ? NF_HOOK+0x9e/0x3a0 [ 783.624113][ C1] NF_HOOK+0x310/0x3a0 [ 783.624132][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 783.624151][ C1] ? NF_HOOK+0x9e/0x3a0 [ 783.624169][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 783.624189][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 783.624216][ C1] arp_xmit+0x16c/0x270 [ 783.624233][ C1] ? arp_xmit+0x23/0x270 [ 783.624253][ C1] arp_solicit+0xc1d/0xe60 [ 783.624276][ C1] ? arp_solicit+0x11a/0xe60 [ 783.624298][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 783.624326][ C1] ? neigh_timer_handler+0xa4a/0x1030 [ 783.624356][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 783.624375][ C1] neigh_timer_handler+0xaaf/0x1030 [ 783.624407][ C1] call_timer_fn+0x17b/0x5f0 [ 783.624423][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 783.624449][ C1] ? call_timer_fn+0xbe/0x5f0 [ 783.624465][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 783.624487][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.624504][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.624521][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 783.624549][ C1] __run_timer_base+0x61a/0x860 [ 783.624575][ C1] ? ktime_get+0x3e/0x1f0 [ 783.624605][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 783.624630][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 783.624664][ C1] run_timer_softirq+0xb7/0x180 [ 783.624691][ C1] handle_softirqs+0x283/0x870 [ 783.624713][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 783.624752][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 783.624773][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 783.624799][ C1] __irq_exit_rcu+0xca/0x1f0 [ 783.624817][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 783.624841][ C1] irq_exit_rcu+0x9/0x30 [ 783.624857][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 783.624874][ C1] [ 783.624879][ C1] [ 783.624886][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.624905][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 783.624934][ C1] Code: 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 63 cc 27 f6 65 8b 05 1c 7a 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 783.624948][ C1] RSP: 0018:ffffc90004357560 EFLAGS: 00000206 [ 783.624962][ C1] RAX: d3bf7619a4cc1200 RBX: 0000000000000a06 RCX: d3bf7619a4cc1200 [ 783.624993][ C1] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 783.625005][ C1] RBP: ffffc900043575f8 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 783.625019][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 783.625034][ C1] R13: 1ffff1100d1c6c8d R14: ffff888068e36400 R15: 1ffff9200086aeac [ 783.625060][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 783.625109][ C1] __skb_try_recv_datagram+0x17c/0x4e0 [ 783.625131][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 783.625160][ C1] __unix_dgram_recvmsg+0x2d5/0xd80 [ 783.625182][ C1] ? __pfx___schedule+0x10/0x10 [ 783.625202][ C1] ? finish_task_switch+0x26b/0x950 [ 783.625229][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 783.625257][ C1] ? preempt_schedule_irq+0xde/0x150 [ 783.625278][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 783.625303][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 783.625330][ C1] sock_recvmsg_nosec+0x183/0x1c0 [ 783.625353][ C1] ____sys_recvmsg+0x3aa/0x460 [ 783.625374][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 783.625400][ C1] ? import_iovec+0x74/0xa0 [ 783.625427][ C1] ___sys_recvmsg+0x1b5/0x510 [ 783.625446][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 783.625482][ C1] ? __might_fault+0xb0/0x130 [ 783.625501][ C1] do_recvmmsg+0x307/0x770 [ 783.625523][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 783.625546][ C1] ? __pfx_do_futex+0x10/0x10 [ 783.625579][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 783.625597][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 783.625613][ C1] ? rcu_is_watching+0x15/0xb0 [ 783.625635][ C1] ? do_syscall_64+0xbe/0x3b0 [ 783.625657][ C1] do_syscall_64+0xfa/0x3b0 [ 783.625676][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.625693][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.625710][ C1] ? clear_bhb_loop+0x60/0xb0 [ 783.625737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.625753][ C1] RIP: 0033:0x7f2d3558e9a9 [ 783.625768][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.625782][ C1] RSP: 002b:00007f2d3643c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 783.625799][ C1] RAX: ffffffffffffffda RBX: 00007f2d357b6080 RCX: 00007f2d3558e9a9 [ 783.625812][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 783.625824][ C1] RBP: 00007f2d35610d69 R08: 0000000000000000 R09: 0000000000000000 [ 783.625835][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 783.625845][ C1] R13: 0000000000000000 R14: 00007f2d357b6080 R15: 00007ffce1796118 [ 783.625867][ C1] [ 783.636914][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 783.636944][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 783.636982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.637000][ T31] Call Trace: [ 783.637011][ T31] [ 783.637022][ T31] dump_stack_lvl+0x99/0x250 [ 783.637057][ T31] ? __asan_memcpy+0x40/0x70 [ 783.637094][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.637123][ T31] ? __pfx__printk+0x10/0x10 [ 783.637173][ T31] panic+0x2db/0x790 [ 783.637207][ T31] ? __pfx_panic+0x10/0x10 [ 783.637234][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 783.637267][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 783.637306][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 783.637353][ T31] watchdog+0x102d/0x1030 [ 783.637392][ T31] ? watchdog+0x1de/0x1030 [ 783.637441][ T31] kthread+0x70e/0x8a0 [ 783.637479][ T31] ? __pfx_watchdog+0x10/0x10 [ 783.637514][ T31] ? __pfx_kthread+0x10/0x10 [ 783.637550][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.637573][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.637597][ T31] ? __pfx_kthread+0x10/0x10 [ 783.637632][ T31] ret_from_fork+0x3fc/0x770 [ 783.637660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 783.637693][ T31] ? __switch_to_asm+0x39/0x70 [ 783.637722][ T31] ? __switch_to_asm+0x33/0x70 [ 783.637751][ T31] ? __pfx_kthread+0x10/0x10 [ 783.637786][ T31] ret_from_fork_asm+0x1a/0x30 [ 783.637836][ T31] [ 783.640352][ T31] Kernel Offset: disabled