last executing test programs: 36.287453499s ago: executing program 4 (id=3172): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1e, 0x4, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f0000000000), 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) 35.234876354s ago: executing program 4 (id=3173): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000008643162e3f142a1600000000000065c440b67578cc1ab0bd66704690d5f863f48d8fb50600000000000000f16c840d4d9b2f8ca08faeee241aad3bc821475dfcf00106676e125b14b5b4a6ffa3afea4f3005a49646bff69882986d8ccbabb8d16721125529c43b20429b18b3b1b06dae052dd24e32635ddb6c5830ff6b813a672c926456f8c832160bca5ff7807a99b230124b3a0488d92f015dc16377392629"], &(0x7f0000001200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) unshare(0x2040400) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 35.146588957s ago: executing program 4 (id=3174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x6e1cd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r2, &(0x7f0000000180)='./file1\x00', 0x224) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1818bb, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x1, 0x3}) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70020500000007000000060001000500000008000b0004"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r6, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 31.503657296s ago: executing program 4 (id=3186): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000500)=""/249, 0xf9}], 0x2, 0x7, 0xff) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008003040000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a300000000040000480100001800c000100636f756e746572002c000180090001007866726d000000001c000280080001400000000a080002400000000305000300"], 0xf0}}, 0x0) 30.533643087s ago: executing program 4 (id=3188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="b6a100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x18) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x5}) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000c40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x34, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 29.33544366s ago: executing program 4 (id=3190): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000003000000000c17d00670000000a00000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r6, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup2(r7, r5) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 10.583621705s ago: executing program 2 (id=3251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000000000)='\t', 0x34000, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x40000000) syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r3, 0x1, 0x3d, 0x0, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0x3d, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x1, 0x100) (async) r6 = semget$private(0x0, 0x1, 0x100) semctl$GETNCNT(r6, 0x4, 0xe, &(0x7f0000000200)=""/98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x20000844) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 7.409176248s ago: executing program 0 (id=3260): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000003000000000c17d00670000000a00000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r3) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 6.616478441s ago: executing program 2 (id=3263): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400090400000103000000092100000001220700090581030000001d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 6.459791917s ago: executing program 0 (id=3265): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, 0xffffffffffffffff, 0x83000000) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.905531465s ago: executing program 0 (id=3267): mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x109010, r1, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2a) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x8c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80000000000020}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44801}, 0x4000) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="150729bd0400ebdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) r13 = socket$unix(0x1, 0x2, 0x0) connect$unix(r13, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 3.807234135s ago: executing program 3 (id=3270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1e, 0x4, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) 2.79563203s ago: executing program 3 (id=3272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x12a0, 0x2d, 0x0, 0x70bd25, 0x25dfdbfe, {0x16}, [@generic="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", @generic="22d3b09d469348a5fca5687af873363bf2aac20ca1d03825ece0cb453f29fe2b025eccf0e0db60708ed2d3857bb0f0834facc329c8e12278f3377bc7ad7e2ed1fbde1c7a411aeef0168a2a17c9c03c0fab2efc1364c448c639686f4dd134ccf50798d9489fc527b4e0b9c41f717cc0e2a5cd50904d", @generic="40fca783acf24a5a1e7ca8e51cac16b9981a9e73a5248afd7afe42c368c28ef92bf588658caaa5c18489b42ebab97f0da23b036e1da45e8217ad1f00b9b77eae1865e28e2bcbd659aee3d2026f91bc3cb5a4a6e0f69e95a825e4c081f62e56e746e237ae6ead1e2a1472867c9a462258f6f9f9a59feac7d8e47b17d0a034939cac9fd359dc7080260e0ba15d757acecb33469cba53112876dafdd102eb5f072afd004bc1eeebf4a3ffde804ccad148b56bda83c33da718f196fa1fe3a53db90bfea5addbd16a15ee077f526eb7751edea12b475ebf6176e8641d1d48691011e24b662adca82167bc80fdf8fd12cdfa348d10f0", @nested={0x85, 0xd5, 0x0, 0x1, [@generic="e7940d61450444c192491fc8c106c9a81cf577c55143bc981d2f33fae385232af5a326578dc79bed6992496e13f3ab8e2b3941e4bf47b4c3e79553b5812b94de683c8104bd1d215cc9b5fba4d419d4f82f5915e53b52d0fa72e5eba1bc68f03103c21abfc2ba00dcecf60410515752eaa50b13054a843258c9", @nested={0x4, 0x9d}, @nested={0x4, 0x28}]}, @nested={0x9b, 0x106, 0x0, 0x1, [@generic="d827546ebe38f9e5a33d262b80bd79ce902c61a1d7adad1ba84ee79be814f7f04fd9ed3fc2e856196209965f46ba07c6f65e7c4f92600a68eb43165e6740ca1da1d1ad406eb429256260b5d698bb15ba64dcb2b50d88b3e0234fde5c5967430a99ce4af2e6145855306c28f7f6cc34e66870e6ea7566e1e6c0b43445e1f5e3f189e8ec210f2df38dfec2ea", @nested={0x4, 0x90}, @typed={0x8, 0x144, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x20044880}, 0x24044010) 2.644101332s ago: executing program 2 (id=3274): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, 0x0) unshare(0x2040400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0), 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000280)={0x3, r3, 0x1, {0x7fffffff, 0xffffffff}, 0x8}, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) r8 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 2.280169495s ago: executing program 3 (id=3275): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000002240)='.\x00', 0x0, 0xa0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0xffff8000, 0x2, 0x0, 'queue1\x00', 0x4}) sendto$inet(r2, &(0x7f0000000340)="09268a927f1f2588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95491a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba41e2f029dc0c820d3534fd568518c9482c782cc2bee9321d3978fc19a395a5549e3f9d4771286608f12ce37f49f4655b74123afac8e9e0b26ec89e8cdd7fceb7c2fe3ba0868b560ffa60a0b1e8c537d2c81df00930d3a34ccdfa3149f8e6fad05dd7a7a97d4d1127f5d349e981391a076590bc9761077dcca5ded5cf66890296b800b41e1e28a33fe8409027cfc0440f253116cb5a84ca3a4c0e74ca1d57264b41d23af1cb8a754cb67d1fa664b9b3ba79de68d475e12cb5d1f032b8aeacb83be0d335fc862adb2f7e483d1315cda2d88fc1a680afb132723a42ca43a0103dd5dc176ca75c4a78bdde2e7bed00"/340, 0x154, 0xad993fdca7f63209, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@random="856b934629fa", @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb}, {}, {}, {0xdd86, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) 1.884260582s ago: executing program 3 (id=3276): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [@hopopts={0x3a}], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 1.88333779s ago: executing program 2 (id=3277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x400000000000000, 0x1a3c82) 1.84014462s ago: executing program 3 (id=3278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0300080000000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000001c0)='mm_page_free_batched\x00', r1}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x6, &(0x7f0000000000)=0x0) r3 = eventfd(0xd6) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000040)="724cb66c5308336d00edacfb4fb9102c9d85a03ff6f05e8cfe18e258cbd1851d68db94", 0x23, 0x2, 0x0, 0x0, r3}]) 1.680245506s ago: executing program 2 (id=3279): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[], [{}, {}, {0x0, 0x8000000}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 1.679927461s ago: executing program 1 (id=3280): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x3c}}, 0x0) 1.599050292s ago: executing program 0 (id=3281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x5e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x380, 0x358, 0x358, 0x380, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0002191400000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x478) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x30, 0x0, 0xb97534d5fe9700cf, 0x70bd29, 0x0, {{0x12}, {@val={0xffffff55}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32], 0x0, 0x18, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x100, 0x1, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x6, 0x8}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007308000000000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x1300, 0x800}, 0x20000000) 1.558666678s ago: executing program 1 (id=3282): quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee00, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x1) syz_open_procfs$userns(0x0, 0x0) iopl(0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x22a002) socket$igmp6(0xa, 0x3, 0x2) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x329f20cecd9b6c85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xd) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x9c, &(0x7f0000000340)=""/156, 0x40f00, 0xc, '\x00', r2, @sk_skb=0x22, r1, 0x8, &(0x7f0000000440)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xa, 0x3, 0x80000001}, 0x10, r0, 0xffffffffffffffff, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=[{0x3, 0x3, 0x9, 0xc}, {0x2, 0x1, 0x1, 0x2}, {0x4, 0x1, 0xc, 0xa}], 0x10, 0x7f, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2f6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff991}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbac6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8d8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400c814}, 0x1) iopl(0x1) syz_emit_vhci(&(0x7f0000000880)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x20, 0x4}, {0x5}}}}, 0x11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, r2, 0x25, 0x16, @void}, 0x10) syz_open_dev$admmidi(&(0x7f0000000900), 0xffffffff, 0x480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0xbf, 0x51, &(0x7f0000000ac0)=""/81, 0x41000, 0x54, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x1, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x5, 0xb, 0xa}, {0x5, 0x3, 0x5, 0xe}, {0x5, 0x2, 0x10, 0x5}, {0x0, 0x2, 0x8, 0x1}, {0x4, 0x2, 0xf, 0x6}, {0x4, 0x4, 0xf, 0xe}], 0x10, 0xda, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000d40)) 1.508247362s ago: executing program 2 (id=3283): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400090400000103000000092100000001220700090581030000001d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.299843918s ago: executing program 1 (id=3284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000040000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a300000000040000480100001800c000100636f756e746572002c000180090001007866726d000000001c000280080001400000000a08000240000000030500030065"], 0xf0}}, 0x0) 941.30287ms ago: executing program 1 (id=3285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x11, 0xffffffffffffffff, 0x7b382000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000240)={{@hyper, 0x3}, @host, 0x6, 0x2, 0x3ff, 0x3878, 0x7, 0x3, 0x8000}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r3, &(0x7f0000000180)='./file0\x00', 0x224) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181891, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r4, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r6}, 0x18) 564.281501ms ago: executing program 1 (id=3286): r0 = socket$inet6(0xa, 0x3, 0x2c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200000, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000788c19e9ace5ffb2e9fc603dd282100000002ff02000000000000"], 0x0) 563.700755ms ago: executing program 0 (id=3287): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, 0x0) unshare(0x2040400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0), 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000280)={0x3, r3, 0x1, {0x7fffffff, 0xffffffff}, 0x8}, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) r8 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xae) r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 83.461212ms ago: executing program 0 (id=3288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xffa8) prlimit64(0x0, 0x3, &(0x7f00000001c0)={0xc, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000007c0)={0x52}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300010004000000040023000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="02000000050000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r10, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x8}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) 70.096727ms ago: executing program 3 (id=3289): socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdfff7c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffb7f8, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x4e0d) syz_create_resource$binfmt(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r7 = dup2(r4, r6) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x190) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)="a0", 0x1, 0x102}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) rmdir(0x0) openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) 0s ago: executing program 1 (id=3290): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000580)={0x8, 'vlan1\x00', {'vlan1\x00'}, 0x46}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x30) mknod(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): rror -71 [ 929.919885][T13344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 930.096929][ T5824] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 930.210952][T16149] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 930.227178][T16133] usb 2-1: USB disconnect, device number 57 [ 930.295848][ T5824] usb 3-1: device descriptor read/64, error -71 [ 930.406273][ T5824] usb usb3-port1: attempt power cycle [ 930.604756][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.012002][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.055671][ T5824] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 931.138059][ T5824] usb 3-1: device descriptor read/8, error -71 [ 931.805647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.132308][T16175] --map-set only usable from mangle table [ 932.224928][T13186] block nbd3: Receive control failed (result -32) [ 932.236462][T13186] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 932.247631][T16170] block nbd3: shutting down sockets [ 932.774154][ T3591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 933.488176][T16192] block nbd4: shutting down sockets [ 934.221941][T15487] net_ratelimit: 5 callbacks suppressed [ 934.221959][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.351264][T16214] XFS (nbd4): no-recovery mounts must be read-only. [ 934.427271][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 934.446986][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 934.468738][T16218] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 934.925106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.995058][ T5917] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 935.342592][ T5917] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 935.352866][ T5917] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 935.372047][ T5917] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 935.392461][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.400673][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.906356][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.920095][ T5824] usb 4-1: USB disconnect, device number 62 [ 935.930010][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 936.455087][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.523914][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.610997][ T3591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 937.838338][T16259] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 938.044657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.185094][T16266] block nbd0: shutting down sockets [ 938.528649][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.590508][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 938.636726][T16282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.672698][T16282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.884725][ T5917] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 938.906993][T16287] Timeout policy `syz1' can only be used by L3 protocol number 35061 [ 939.250147][ T5917] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 939.265365][T13344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 939.293492][ T5917] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 939.378763][T16300] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 939.654264][ T47] net_ratelimit: 16 callbacks suppressed [ 939.654281][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.685418][ T5917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 939.715347][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.157967][T16308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.810846][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.838844][ T10] usb 2-1: USB disconnect, device number 58 [ 940.864861][ T30] audit: type=1400 audit(1744729019.887:791): avc: denied { write } for pid=16311 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 941.505055][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 941.644089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.714655][ T3591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 941.964535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.057817][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.065954][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.282819][T16345] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 943.327736][T16345] dummy0: entered allmulticast mode [ 943.340958][T16345] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 943.361347][T16133] s: Port: 1 Link ACTIVE [ 943.482089][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.503729][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 944.541180][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.552128][T16357] Mount JFS Failure: -22 [ 944.570149][T16357] jfs_mount failed w/return code = -22 [ 944.723571][T13335] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 944.834009][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 945.006227][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.077010][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 945.113608][ T10] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 945.151945][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 945.165956][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.174643][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.196342][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.217657][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.251125][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.259513][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.284509][ T30] audit: type=1400 audit(1744729024.298:792): avc: denied { mounton } for pid=16369 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 945.409132][T16369] lo speed is unknown, defaulting to 1000 [ 945.432375][ T6841] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.586677][ T30] audit: type=1400 audit(1744729024.478:793): avc: denied { execmem } for pid=16372 comm="syz.4.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 945.957733][T13352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 945.999452][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.357232][T15487] usb 4-1: USB disconnect, device number 63 [ 946.377083][T16369] lo speed is unknown, defaulting to 1000 [ 946.694974][ T6841] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.768073][ T6841] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.883890][ T6841] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.016264][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.266353][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 947.324975][T13186] Bluetooth: hci4: command tx timeout [ 947.353092][T13339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 947.415678][T16400] netlink: 'syz.4.2876': attribute type 2 has an invalid length. [ 947.896335][T16413] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 948.245448][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.287744][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.842894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.337275][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.403347][T13186] Bluetooth: hci4: command tx timeout [ 949.502002][ T6841] team0: Port device bridge1 removed [ 949.563918][ T3591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 949.608837][T16432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.794819][ T6841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.339048][ T6841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.352072][ T6841] bond0 (unregistering): Released all slaves [ 950.366699][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.717758][ T6841] bond1 (unregistering): Released all slaves [ 951.246727][ T6841] bond2 (unregistering): Released all slaves [ 951.262006][T16413] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 951.282589][T16369] chnl_net:caif_netlink_parms(): no params data found [ 951.353797][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.420133][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.476565][ T3591] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 951.485882][ T5835] Bluetooth: hci4: command tx timeout [ 951.507492][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.536423][T16427] veth0_vlan: left promiscuous mode [ 951.543050][T16427] veth0_vlan: entered promiscuous mode [ 951.566464][T16428] lo speed is unknown, defaulting to 1000 [ 952.160683][T16453] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 952.174525][T16428] lo speed is unknown, defaulting to 1000 [ 952.525758][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.416618][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.439968][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.586723][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.587576][T13186] Bluetooth: hci4: command tx timeout [ 953.662419][T16369] bridge_slave_0: entered allmulticast mode [ 953.867826][T13335] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 953.899956][T16369] bridge_slave_0: entered promiscuous mode [ 953.921487][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.929715][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.937211][T16369] bridge_slave_1: entered allmulticast mode [ 953.944896][T16369] bridge_slave_1: entered promiscuous mode [ 954.016175][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.170621][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.692512][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.714167][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.771150][T16499] No such timeout policy "syz1" [ 954.790783][T13186] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 954.936889][T16369] team0: Port device team_slave_0 added [ 955.145393][T16369] team0: Port device team_slave_1 added [ 955.608059][T16522] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 955.617273][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 955.722050][T13186] Bluetooth: hci4: command 0x0405 tx timeout [ 955.778849][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.789317][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.798489][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.832429][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.899134][T16526] overlayfs: failed to resolve './file0': -2 [ 955.973286][T13352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 956.036220][T16526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=16526 comm=syz.1.2893 [ 956.119669][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.237176][T16531] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 956.804660][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.830540][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.858185][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.953987][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.966561][T16536] Timeout policy `syz1' can only be used by L3 protocol number 35061 [ 957.366869][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.387364][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.414302][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.477055][ T6841] hsr0: left allmulticast mode [ 957.512181][ T6841] veth1_macvtap: left promiscuous mode [ 957.533668][ T6841] veth0_macvtap: left promiscuous mode [ 957.539595][ T6841] veth1_vlan: left promiscuous mode [ 957.591840][T15487] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 957.721583][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.792983][T15487] usb 3-1: Using ep0 maxpacket: 16 [ 957.804109][T15487] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 957.814735][T15487] usb 3-1: config 0 has no interface number 0 [ 957.826161][T15487] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 957.843541][T15487] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 957.852993][T15487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.861071][T15487] usb 3-1: Product: syz [ 957.865497][T13339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 957.875149][T15487] usb 3-1: Manufacturer: syz [ 957.879854][T15487] usb 3-1: SerialNumber: syz [ 957.888647][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.907582][T15487] usb 3-1: config 0 descriptor?? [ 958.123961][T15487] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 958.145151][T15487] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 958.170328][ T6841] team0 (unregistering): Port device team_slave_0 removed [ 958.500471][T13339] smc: removing ib device syz1 [ 958.567281][T16369] hsr_slave_0: entered promiscuous mode [ 958.587955][T16369] hsr_slave_1: entered promiscuous mode [ 958.604373][T16369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.621316][T16369] Cannot create hsr debugfs directory [ 959.054148][T13335] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.084302][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.186134][T16551] netlink: 'syz.4.2902': attribute type 10 has an invalid length. [ 960.160488][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.181701][T16567] Mount JFS Failure: -22 [ 960.186022][T16567] jfs_mount failed w/return code = -22 [ 960.403225][ T30] audit: type=1400 audit(1744729039.370:794): avc: denied { create } for pid=16565 comm="syz.1.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 960.597793][ T47] usb 3-1: USB disconnect, device number 53 [ 960.777805][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.294362][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.303219][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 961.321708][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.379921][T16581] FAULT_INJECTION: forcing a failure. [ 961.379921][T16581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.400254][T16581] CPU: 1 UID: 0 PID: 16581 Comm: syz.1.2909 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 961.400277][T16581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 961.400288][T16581] Call Trace: [ 961.400294][T16581] [ 961.400301][T16581] dump_stack_lvl+0x16c/0x1f0 [ 961.400329][T16581] should_fail_ex+0x512/0x640 [ 961.400350][T16581] _copy_to_user+0x32/0xd0 [ 961.400372][T16581] simple_read_from_buffer+0xcb/0x170 [ 961.400400][T16581] proc_fail_nth_read+0x197/0x270 [ 961.400426][T16581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 961.400454][T16581] ? rw_verify_area+0xcf/0x680 [ 961.400476][T16581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 961.400503][T16581] vfs_read+0x1de/0xc70 [ 961.400532][T16581] ? __pfx___mutex_lock+0x10/0x10 [ 961.400555][T16581] ? __pfx_vfs_read+0x10/0x10 [ 961.400587][T16581] ? __fget_files+0x20e/0x3c0 [ 961.400611][T16581] ksys_read+0x12a/0x240 [ 961.400626][T16581] ? __pfx_ksys_read+0x10/0x10 [ 961.400639][T16581] ? rcu_is_watching+0x12/0xc0 [ 961.400667][T16581] do_syscall_64+0xcd/0x260 [ 961.400693][T16581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.400714][T16581] RIP: 0033:0x7ff05d98bb7c [ 961.400728][T16581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 961.400745][T16581] RSP: 002b:00007ff05e7ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 961.400761][T16581] RAX: ffffffffffffffda RBX: 00007ff05dba5fa0 RCX: 00007ff05d98bb7c [ 961.400773][T16581] RDX: 000000000000000f RSI: 00007ff05e7ce0a0 RDI: 0000000000000004 [ 961.400783][T16581] RBP: 00007ff05e7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 961.400793][T16581] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 961.400802][T16581] R13: 0000000000000000 R14: 00007ff05dba5fa0 R15: 00007ffc62d7db48 [ 961.400826][T16581] [ 962.460398][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.584067][T16601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2913'. [ 963.000533][T13186] Bluetooth: hci2: command 0x0406 tx timeout [ 963.135497][ T30] audit: type=1400 audit(1744729042.170:795): avc: denied { create } for pid=16605 comm="syz.3.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 963.384073][T16608] Cannot find add_set index 1026 as target [ 963.397210][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 963.492791][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.501355][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 963.560613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.800790][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.913602][T16614] orangefs_mount: mount request failed with -4 [ 964.398639][T16369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 964.430565][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 964.436679][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 964.449688][T16369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 964.481227][T16369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 964.506349][T16369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 964.541503][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.613518][T16646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.640942][T13339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 964.685193][T16369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.704917][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 964.734661][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 964.919177][ T30] audit: type=1326 audit(1744729043.811:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16591 comm="syz.1.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05d98d169 code=0x7fc00000 [ 964.997893][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.010311][ T47] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 965.032512][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.039693][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.062732][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.069839][T13339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.185695][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.241366][T16638] ceph: No mds server is up or the cluster is laggy [ 965.340766][T16654] block nbd4: shutting down sockets [ 965.574977][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.608878][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 965.620531][ T47] usb 3-1: string descriptor 0 read error: -22 [ 965.628384][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 965.637536][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.687282][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.700160][ T47] usb 3-1: MIDIStreaming interface descriptor not found [ 966.714280][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.824325][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 966.841997][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.861951][ T47] usb 3-1: USB disconnect, device number 54 [ 966.874116][T16674] IPv6: sit1: Disabled Multicast RS [ 967.060715][ T5904] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 967.270153][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 967.322323][ T5904] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 967.413591][ T5904] usb 2-1: config 0 has no interface number 0 [ 967.440917][T16369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.483035][ T5904] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 967.652253][ T5904] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 967.751096][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.769851][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 967.797802][T16682] udevd[16682]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.830004][ T5904] usb 2-1: Product: syz [ 967.834182][ T5904] usb 2-1: SerialNumber: syz [ 967.865032][ T5904] usb 2-1: config 0 descriptor?? [ 967.988776][ T5904] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 968.059022][T16369] veth0_vlan: entered promiscuous mode [ 968.125837][T13335] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 968.138841][T16697] netlink: 'syz.2.2926': attribute type 10 has an invalid length. [ 968.394776][T16369] veth1_vlan: entered promiscuous mode [ 968.466310][T16369] veth0_macvtap: entered promiscuous mode [ 968.573063][T16369] veth1_macvtap: entered promiscuous mode [ 968.591719][T16369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.605874][T16369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.615800][T16369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.626309][T16369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.637732][T16369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.648590][T16369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.674707][T16369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.746682][T16369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.758962][T16369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.774190][T16706] netlink: 'syz.4.2927': attribute type 10 has an invalid length. [ 968.810650][T16369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.835630][T16369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.858420][T16369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.874063][T16706] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 968.973566][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.975336][T16369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.098628][T16369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.107924][T16369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.116948][T16369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.372921][T16714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 969.423362][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2924'. [ 969.882615][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.679713][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.692201][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 970.710941][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.721449][T13335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.779327][T13335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.847252][ T5904] usb 2-1: USB disconnect, device number 59 [ 970.893861][T13345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.907470][T13345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.104066][T16732] program syz.4.2930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.114202][ T30] audit: type=1400 audit(1744729050.152:797): avc: denied { mounton } for pid=16369 comm="syz-executor" path="/root/syzkaller.QDueu1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 971.233258][T16732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2930'. [ 971.408752][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.419206][ T30] audit: type=1400 audit(1744729050.432:798): avc: denied { mounton } for pid=16369 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 971.859811][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.110568][T13335] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 972.929896][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.938012][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.790832][T13345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 974.042643][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.488231][T16800] siw: device registration error -23 [ 975.107235][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.589834][T16815] overlayfs: missing 'lowerdir' [ 976.301614][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.502222][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.507998][T13350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.701150][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.891666][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.919843][T16855] lo speed is unknown, defaulting to 1000 [ 978.925947][T16855] lo speed is unknown, defaulting to 1000 [ 978.939072][T16855] lo speed is unknown, defaulting to 1000 [ 979.094264][T16855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 979.209284][T13339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 979.309652][T16855] lo speed is unknown, defaulting to 1000 [ 979.316267][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2952'. [ 979.320130][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.366928][T16855] lo speed is unknown, defaulting to 1000 [ 979.376291][ T30] audit: type=1400 audit(1744729058.413:799): avc: denied { ioctl } for pid=16858 comm="syz.0.2955" path="socket:[51724]" dev="sockfs" ino=51724 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 979.409617][T16855] lo speed is unknown, defaulting to 1000 [ 979.416602][T16855] lo speed is unknown, defaulting to 1000 [ 979.451544][T16855] lo speed is unknown, defaulting to 1000 [ 979.777543][ T5824] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 979.971033][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.120191][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 980.292221][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.322703][ T5824] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 980.331927][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.345459][ T5824] usb 2-1: Product: syz [ 980.353292][ T5824] usb 2-1: Manufacturer: syz [ 980.365641][ T5824] usb 2-1: SerialNumber: syz [ 980.398476][ T5824] usb 2-1: config 0 descriptor?? [ 980.419820][ T5824] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 980.498825][T13344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 980.577464][T16891] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 980.846746][T16902] bridge0: port 3(netdevsim0) entered blocking state [ 980.853924][T16902] bridge0: port 3(netdevsim0) entered disabled state [ 980.861050][T16902] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 980.875011][T16902] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 980.884499][T16902] bridge0: port 3(netdevsim0) entered blocking state [ 980.891768][T16902] bridge0: port 3(netdevsim0) entered forwarding state [ 980.912241][ T30] audit: type=1400 audit(1744729059.873:800): avc: denied { ioctl } for pid=16892 comm="syz.0.2961" path="socket:[51842]" dev="sockfs" ino=51842 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 981.390030][T16892] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 981.408735][ T5824] gspca_ov534_9: reg_w failed -110 [ 981.531238][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.464077][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.532038][ T5824] gspca_ov534_9: Unknown sensor 0000 [ 982.532111][ T5824] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 982.545524][T16133] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 982.607577][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.716009][T16133] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 982.782121][T16133] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 982.850270][T16133] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 982.891448][T16133] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 982.910585][T16929] Mount JFS Failure: -22 [ 982.914817][T16929] jfs_mount failed w/return code = -22 [ 982.954530][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 982.992247][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 983.038674][T13344] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 983.072325][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 983.082651][T16940] xt_hashlimit: size too large, truncated to 1048576 [ 983.165324][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'. [ 983.168591][T16133] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 983.200925][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'. [ 983.211200][ T5904] usb 2-1: USB disconnect, device number 60 [ 983.236381][T16133] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 983.258268][T16133] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 983.276609][T16133] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 983.477709][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 983.517721][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 983.550595][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 983.590902][T16133] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 983.622756][T16133] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 983.660930][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.707330][T16133] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 983.753181][T16133] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 983.848529][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 984.385063][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 984.396374][T16133] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 984.473176][T16133] usb 3-1: string descriptor 0 read error: -22 [ 984.487342][T16133] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 984.589255][T16970] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 984.663881][T13352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 984.671714][T16133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.737114][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.856283][T16133] usb 3-1: can't set config #246, error -71 [ 984.882563][T16133] usb 3-1: USB disconnect, device number 55 [ 985.478815][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.822146][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.200755][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 986.219701][T13186] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 986.695598][ T30] audit: type=1400 audit(1744729065.594:801): avc: denied { write } for pid=17016 comm="syz.2.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 986.806718][ T30] audit: type=1400 audit(1744729065.594:802): avc: denied { nlmsg_write } for pid=17016 comm="syz.2.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 986.839577][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.447138][T17035] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 987.707483][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 988.223806][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.346586][ T47] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 988.360946][T17051] Timeout policy `syz1' can only be used by L3 protocol number 35061 [ 988.514510][T17052] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 988.524042][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.586476][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 988.593112][ T47] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 988.717176][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 989.269704][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.278279][ T47] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.288772][ T47] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.309445][ T47] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 989.317693][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 989.445635][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.682629][ T47] usb 3-1: GET_CAPABILITIES returned 0 [ 989.710987][ T47] usbtmc 3-1:16.0: can't read capabilities [ 989.876396][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.234822][T17074] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 990.314406][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.411269][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.429665][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.439000][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.450620][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.460920][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.610931][T16997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 990.627991][T17072] lo speed is unknown, defaulting to 1000 [ 990.685258][T17079] FAULT_INJECTION: forcing a failure. [ 990.685258][T17079] name failslab, interval 1, probability 0, space 0, times 0 [ 990.698729][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.4.2999 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 990.698753][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 990.698763][T17079] Call Trace: [ 990.698769][T17079] [ 990.698776][T17079] dump_stack_lvl+0x16c/0x1f0 [ 990.698803][T17079] should_fail_ex+0x512/0x640 [ 990.698822][T17079] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 990.698842][T17079] should_failslab+0xc2/0x120 [ 990.698862][T17079] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 990.698879][T17079] ? getname_flags.part.0+0x4c/0x550 [ 990.698905][T17079] getname_flags.part.0+0x4c/0x550 [ 990.698930][T17079] getname_flags+0x93/0xf0 [ 990.698956][T17079] do_sys_openat2+0xb8/0x1d0 [ 990.698976][T17079] ? __pfx_do_sys_openat2+0x10/0x10 [ 990.699007][T17079] __x64_sys_openat+0x174/0x210 [ 990.699028][T17079] ? __pfx___x64_sys_openat+0x10/0x10 [ 990.699051][T17079] ? do_user_addr_fault+0x843/0x1370 [ 990.699077][T17079] do_syscall_64+0xcd/0x260 [ 990.699103][T17079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.699119][T17079] RIP: 0033:0x7fe7ea38bad0 [ 990.699133][T17079] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 990.699149][T17079] RSP: 002b:00007fe7eb177b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 990.699165][T17079] RAX: ffffffffffffffda RBX: 00000000001a3c82 RCX: 00007fe7ea38bad0 [ 990.699176][T17079] RDX: 00000000001a3c82 RSI: 00007fe7eb177c10 RDI: 00000000ffffff9c [ 990.699187][T17079] RBP: 00007fe7eb177c10 R08: 0000000000000000 R09: 002367732f766564 [ 990.699197][T17079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 990.699206][T17079] R13: 0000000000000000 R14: 00007fe7ea5a5fa0 R15: 00007ffc30b6aa08 [ 990.699235][T17079] [ 990.949819][T17072] chnl_net:caif_netlink_parms(): no params data found [ 991.037304][T17086] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 991.090311][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.097436][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.107133][T17072] bridge_slave_0: entered allmulticast mode [ 991.169700][T17092] siw: device registration error -23 [ 991.187607][T17072] bridge_slave_0: entered promiscuous mode [ 991.195609][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.202910][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.242114][T17072] bridge_slave_1: entered allmulticast mode [ 991.250573][T17072] bridge_slave_1: entered promiscuous mode [ 991.332173][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.359333][T17096] siw: device registration error -23 [ 991.593696][ T5872] usb 3-1: USB disconnect, device number 56 [ 991.706198][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.770878][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.803833][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.927732][T13348] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 992.181969][T17072] team0: Port device team_slave_0 added [ 992.188545][T17098] Mount JFS Failure: -22 [ 992.192785][T17098] jfs_mount failed w/return code = -22 [ 992.212807][T17072] team0: Port device team_slave_1 added [ 992.275717][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.282857][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.346280][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.365941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.385843][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.554230][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.555851][ T5835] Bluetooth: hci2: command tx timeout [ 992.567720][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.599351][T17113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.059747][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.140998][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.160269][ T30] audit: type=1400 audit(1744729072.195:803): avc: denied { execute } for pid=17112 comm="syz.1.3009" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 993.238261][T17117] loop6: detected capacity change from 0 to 524287999 [ 993.281945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.291142][ C1] buffer_io_error: 6 callbacks suppressed [ 993.291150][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.306036][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.315236][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.399729][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.415741][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.424868][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.444333][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.453505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.636167][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 993.838629][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.847824][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.864106][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.873265][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.883391][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.892607][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.907495][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.916638][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.924442][T17117] ldm_validate_partition_table(): Disk read failed. [ 993.935648][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.944877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.953283][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.962509][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 993.979045][T17117] Dev loop6: unable to read RDB block 0 [ 994.021412][T17117] loop6: unable to read partition table [ 994.035823][T17117] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 994.063009][T17072] hsr_slave_0: entered promiscuous mode [ 994.084264][T17072] hsr_slave_1: entered promiscuous mode [ 994.119581][T17072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.137937][T17072] Cannot create hsr debugfs directory [ 994.595569][ T5835] Bluetooth: hci2: command tx timeout [ 995.165035][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.468561][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.616966][ T30] audit: type=1400 audit(1744729074.656:804): avc: denied { read } for pid=17152 comm="syz.4.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 995.996292][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 996.107117][T17072] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.125389][ T5872] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 996.232072][T17072] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.275708][ T5872] usb 5-1: device descriptor read/64, error -71 [ 996.321827][T17072] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.421529][T17072] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.515441][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.551538][ T5872] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 996.637423][T17072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 996.648330][T17072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 996.657973][T17072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 996.670082][T17072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 996.675445][ T5835] Bluetooth: hci2: command tx timeout [ 996.705240][ T5872] usb 5-1: device descriptor read/64, error -71 [ 996.868688][T17072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.905442][ T5872] usb usb5-port1: attempt power cycle [ 996.939442][T17072] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.963379][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.970526][T16993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.158860][T13346] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.166022][T13346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.178479][ T5917] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 997.330215][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 997.557568][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.664621][ T5872] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 997.710831][ T5872] usb 5-1: device descriptor read/8, error -71 [ 997.750954][ T5917] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.768937][ T5917] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.804959][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.916496][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 997.945199][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.953203][ T5917] usb 2-1: Product: syz [ 997.967148][ T5917] usb 2-1: Manufacturer: syz [ 997.971758][ T5917] usb 2-1: SerialNumber: syz [ 997.992888][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.035220][ T5872] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 998.103162][T17072] veth0_vlan: entered promiscuous mode [ 998.312351][T17072] veth1_vlan: entered promiscuous mode [ 998.649315][ T5872] usb 5-1: device descriptor read/8, error -71 [ 998.657324][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.669776][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 998.673161][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.680339][ T5917] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 998.754957][ T5835] Bluetooth: hci2: command tx timeout [ 998.835415][ T5872] usb usb5-port1: unable to enumerate USB device [ 998.989138][T17072] veth0_macvtap: entered promiscuous mode [ 999.732828][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.766735][T17072] veth1_macvtap: entered promiscuous mode [ 999.803081][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.820344][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.845791][T17202] Mount JFS Failure: -22 [ 999.850021][T17202] jfs_mount failed w/return code = -22 [ 999.916816][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.011796][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.023740][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.033914][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.050513][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.076178][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.098132][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.201618][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.210109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.048800][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.060118][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.142015][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.170333][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.032471][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.054144][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.067590][ T5901] usb 2-1: USB disconnect, device number 61 [ 1003.098475][ T5901] usblp0: removed [ 1003.140813][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.194099][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1003.222613][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.248488][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.293879][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.304448][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.318834][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1003.325754][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.362060][T17072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.797409][T17072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.806190][T17072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.816007][T17072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.591697][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.082105][T13336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1005.120352][T17250] Mount JFS Failure: -22 [ 1005.124745][T17250] jfs_mount failed w/return code = -22 [ 1005.154336][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.200808][T13349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.290604][T13349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.522688][T17255] FAULT_INJECTION: forcing a failure. [ 1005.522688][T17255] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.535447][T17255] CPU: 0 UID: 0 PID: 17255 Comm: syz.1.3046 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1005.535462][T17255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1005.535468][T17255] Call Trace: [ 1005.535472][T17255] [ 1005.535476][T17255] dump_stack_lvl+0x16c/0x1f0 [ 1005.535495][T17255] should_fail_ex+0x512/0x640 [ 1005.535506][T17255] ? fs_reclaim_acquire+0xae/0x150 [ 1005.535522][T17255] ? tomoyo_encode2+0x100/0x3e0 [ 1005.535536][T17255] should_failslab+0xc2/0x120 [ 1005.535549][T17255] __kmalloc_noprof+0xd2/0x510 [ 1005.535559][T17255] ? d_absolute_path+0x136/0x1a0 [ 1005.535575][T17255] tomoyo_encode2+0x100/0x3e0 [ 1005.535591][T17255] tomoyo_encode+0x29/0x50 [ 1005.535605][T17255] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1005.535625][T17255] tomoyo_mount_acl+0x1ae/0x850 [ 1005.535637][T17255] ? kernel_text_address+0x8d/0x100 [ 1005.535650][T17255] ? __kernel_text_address+0xd/0x40 [ 1005.535662][T17255] ? unwind_get_return_address+0x59/0xa0 [ 1005.535681][T17255] ? arch_stack_walk+0xa6/0x100 [ 1005.535696][T17255] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1005.535724][T17255] ? tomoyo_domain+0xbb/0x150 [ 1005.535733][T17255] ? tomoyo_profile+0x47/0x60 [ 1005.535744][T17255] tomoyo_mount_permission+0x16d/0x420 [ 1005.535758][T17255] ? tomoyo_mount_permission+0x14f/0x420 [ 1005.535772][T17255] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1005.535795][T17255] security_sb_mount+0x9b/0x260 [ 1005.535809][T17255] path_mount+0x128/0x1f30 [ 1005.535822][T17255] ? kmem_cache_free+0x2d4/0x4d0 [ 1005.535831][T17255] ? __pfx_path_mount+0x10/0x10 [ 1005.535845][T17255] ? putname+0x154/0x1a0 [ 1005.535859][T17255] __x64_sys_mount+0x28d/0x310 [ 1005.535871][T17255] ? __pfx___x64_sys_mount+0x10/0x10 [ 1005.535882][T17255] ? rcu_is_watching+0x12/0xc0 [ 1005.535899][T17255] do_syscall_64+0xcd/0x260 [ 1005.535915][T17255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.535926][T17255] RIP: 0033:0x7ff05d98d169 [ 1005.535934][T17255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.535945][T17255] RSP: 002b:00007ff05e7ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1005.535955][T17255] RAX: ffffffffffffffda RBX: 00007ff05dba5fa0 RCX: 00007ff05d98d169 [ 1005.535961][T17255] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000000 [ 1005.535968][T17255] RBP: 00007ff05e7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.535974][T17255] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1005.535980][T17255] R13: 0000000000000000 R14: 00007ff05dba5fa0 R15: 00007ffc62d7db48 [ 1005.535993][T17255] [ 1005.536003][T17255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.896659][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.927253][T13349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.953848][T13349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.511159][T17262] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3047'. [ 1006.643523][T17265] veth1_macvtap: entered promiscuous mode [ 1006.649308][T17265] macsec2: entered promiscuous mode [ 1006.674599][T13186] Bluetooth: hci2: command 0x0405 tx timeout [ 1006.685784][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1006.694298][T17265] veth1_macvtap: left promiscuous mode [ 1006.714707][ T5835] Bluetooth: Wrong link type (-57) [ 1006.728629][T17272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.746341][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.653622][T16995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1008.765281][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.895089][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.914577][T17294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1008.921105][T17294] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1009.026047][T17294] vhci_hcd vhci_hcd.0: Device attached [ 1009.055180][T13186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1009.064291][T13186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1009.080813][T13186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1009.087997][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.088013][T17296] vhci_hcd: connection closed [ 1009.102288][T16993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.120975][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.130387][T13186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1009.137516][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.156680][T16995] vhci_hcd: stop threads [ 1009.161441][T16995] vhci_hcd: release socket [ 1009.166582][T13186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1009.166700][T16995] vhci_hcd: disconnect device [ 1009.655559][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1009.665319][T17301] lo speed is unknown, defaulting to 1000 [ 1009.743598][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 1009.843032][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1009.864888][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.908317][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1009.927611][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.957431][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.965682][ T10] usb 4-1: Product: syz [ 1009.969874][ T10] usb 4-1: Manufacturer: syz [ 1010.007016][ T10] usb 4-1: SerialNumber: syz [ 1010.124447][T13336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1010.125948][ T47] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1010.146638][ T10] usb 4-1: config 0 descriptor?? [ 1011.221090][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.223032][ T10] usb 4-1: Cannot retrieve CPort count: -110 [ 1011.235794][T13186] Bluetooth: hci5: command tx timeout [ 1011.252845][ T10] usb 4-1: Cannot retrieve CPort count: -110 [ 1011.258972][ T10] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 1011.608598][T17308] netlink: 'syz.3.3060': attribute type 12 has an invalid length. [ 1011.673741][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 1011.679901][ T5824] usb 4-1: USB disconnect, device number 64 [ 1011.685491][ T47] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 1011.718765][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.793490][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.161962][T17301] chnl_net:caif_netlink_parms(): no params data found [ 1012.286330][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.476125][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1012.565189][ T47] usb 5-1: config 0 has no interface number 0 [ 1012.571299][ T47] usb 5-1: too many endpoints for config 0 interface 47 altsetting 197: 147, using maximum allowed: 30 [ 1012.582369][ T47] usb 5-1: config 0 interface 47 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 147 [ 1012.595784][ T47] usb 5-1: config 0 interface 47 has no altsetting 0 [ 1012.612961][ T47] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1012.622295][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.648053][ T47] usb 5-1: Product: syz [ 1012.652263][ T47] usb 5-1: Manufacturer: syz [ 1012.656895][ T47] usb 5-1: SerialNumber: syz [ 1012.665530][ T47] usb 5-1: config 0 descriptor?? [ 1012.676566][ T47] ums-jumpshot 5-1:0.47: USB Mass Storage device detected [ 1012.803926][ T47] ums-jumpshot 5-1:0.47: Quirks match for vid 05dc pid 0001: 2 [ 1012.900423][ T47] usb 5-1: USB disconnect, device number 59 [ 1013.313858][T13186] Bluetooth: hci5: command tx timeout [ 1013.335212][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.980766][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.002629][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.009825][T17301] bridge_slave_0: entered allmulticast mode [ 1014.032875][T17301] bridge_slave_0: entered promiscuous mode [ 1014.086105][T17362] ip6tnl1: entered promiscuous mode [ 1014.227766][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.398971][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.407747][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.654851][T17301] bridge_slave_1: entered allmulticast mode [ 1014.782557][T13337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1014.794402][T17376] block nbd0: shutting down sockets [ 1014.833288][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.842351][T13348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.852524][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.861144][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.871400][T17301] bridge_slave_1: entered promiscuous mode [ 1015.442476][T13186] Bluetooth: hci5: command tx timeout [ 1015.463363][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.485220][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.577034][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.278891][T17301] team0: Port device team_slave_0 added [ 1016.286949][T17301] team0: Port device team_slave_1 added [ 1016.372019][T17390] No such timeout policy "syz1" [ 1016.774704][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.782030][T13337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1016.887555][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.926764][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.502011][ T5835] Bluetooth: hci5: command tx timeout [ 1017.821367][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.872333][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.991748][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.113268][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1018.263368][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.300007][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.485448][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.342622][T16995] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1019.482857][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.564102][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 1020.006181][T17301] hsr_slave_0: entered promiscuous mode [ 1020.095294][T17301] hsr_slave_1: entered promiscuous mode [ 1020.166210][T17301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.185942][T17301] Cannot create hsr debugfs directory [ 1020.303466][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1020.588926][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.599040][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.840251][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.881438][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.890043][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1020.901276][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.951448][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1021.473234][ T10] usb 5-1: config 0 descriptor?? [ 1021.497395][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.554547][T17301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.631535][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.683875][T17425] veth0_to_team: entered promiscuous mode [ 1021.689646][T17425] veth0_to_team: entered allmulticast mode [ 1021.940624][ T10] ath6kl: Failed to submit usb control message: -71 [ 1022.093824][T17453] netlink: 'syz.3.3097': attribute type 10 has an invalid length. [ 1022.184528][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 1022.531539][ T10] ath6kl: Unable to send get target info: -71 [ 1022.753768][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1022.762776][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.801069][ T10] ath6kl: Failed to init ath6kl core: -71 [ 1022.807691][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1022.989333][ T10] usb 5-1: USB disconnect, device number 60 [ 1023.004396][T17301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.097855][T17453] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1023.181528][T17463] overlayfs: failed to resolve './file0': -2 [ 1023.253764][T17464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17464 comm=syz.0.3100 [ 1023.545351][T17459] Mount JFS Failure: -22 [ 1023.549628][T17459] jfs_mount failed w/return code = -22 [ 1023.625589][T17301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.802772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.044258][T17301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.091121][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1024.511174][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.632099][T17301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1024.646334][T17301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1024.744817][T17301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1024.774771][T17301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1024.841932][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.903363][T17301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.927829][T17301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.941557][T13337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.948665][T13337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.968913][T13337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.976006][T13337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.249976][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.281315][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1025.494545][T17301] veth0_vlan: entered promiscuous mode [ 1025.522494][T17301] veth1_vlan: entered promiscuous mode [ 1027.020717][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.031778][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 1027.089596][T17301] veth0_macvtap: entered promiscuous mode [ 1027.186203][T17301] veth1_macvtap: entered promiscuous mode [ 1027.291953][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.347350][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.377750][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.443222][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.471227][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.528202][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.538208][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.552390][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.563520][T16996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.572871][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.585187][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.653723][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.671241][T17512] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1027.722036][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.732597][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.804529][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.044755][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1028.079867][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.115625][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.132578][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.142938][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.153596][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.164858][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.186614][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.265732][T17301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.290284][T17301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.310435][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.365113][T17301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.422591][T17301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.433863][T17301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.443404][T17301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.699699][T17519] netlink: 'syz.0.3114': attribute type 10 has an invalid length. [ 1029.129255][T17519] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1029.166432][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.595801][T17525] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 1030.058832][T13349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.164879][T13349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.173541][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1030.193541][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.204083][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.725699][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.733620][T17532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1030.792509][T13351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.696692][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.706849][T13351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.775211][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.099395][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.111419][T13349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.162507][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.172039][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.203721][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.499455][T17554] overlayfs: failed to resolve './file0': -2 [ 1034.517755][T17557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17557 comm=syz.4.3121 [ 1035.797024][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.837582][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1036.453851][T17579] netlink: 'syz.3.3126': attribute type 10 has an invalid length. [ 1036.850730][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.951602][T13186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.961005][T13186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.968665][T13186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.976445][T13186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1037.042544][T13186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.153376][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1037.456315][T17582] lo speed is unknown, defaulting to 1000 [ 1037.549737][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.599356][T17593] Bluetooth: MGMT ver 1.23 [ 1037.879203][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.144540][T17582] chnl_net:caif_netlink_parms(): no params data found [ 1038.428932][T13337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1038.532911][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1039.051791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.316686][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.322585][T13186] Bluetooth: Wrong link type (-57) [ 1039.788493][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.830453][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.844039][T17582] bridge_slave_0: entered allmulticast mode [ 1039.859750][T17582] bridge_slave_0: entered promiscuous mode [ 1039.876282][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.891629][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.906241][T17582] bridge_slave_1: entered allmulticast mode [ 1039.969889][T17582] bridge_slave_1: entered promiscuous mode [ 1040.424999][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.588349][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.849693][T17582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.867833][T17582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.018781][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.071386][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.098529][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.121734][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.470342][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.108188][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.167162][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.217344][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.252980][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.267395][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.282743][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.294358][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.314251][T17638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.345691][T17638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.383085][T17638] batadv_slave_0: entered promiscuous mode [ 1042.402754][T17638] batadv_slave_0: left promiscuous mode [ 1042.670448][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.653208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.770537][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.000417][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.043798][T13186] Bluetooth: Wrong link type (-57) [ 1044.049472][T13186] Bluetooth: hci2: link tx timeout [ 1044.055261][T13186] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1044.084031][T17582] team0: Port device team_slave_0 added [ 1044.117769][T17582] team0: Port device team_slave_1 added [ 1044.215592][T17664] ip6tnl1: entered promiscuous mode [ 1044.246047][T17672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1044.295312][T17672] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1044.418420][T17672] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1045.245050][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.278384][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.321912][T17582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.340779][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.459860][T17582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.107500][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 1046.365166][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.397520][T17582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.404628][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.459090][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1046.527416][T17582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.667612][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.560331][T17582] hsr_slave_0: entered promiscuous mode [ 1047.571169][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.646423][T17582] hsr_slave_1: entered promiscuous mode [ 1047.657297][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1047.720016][T17582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1047.761573][T17582] Cannot create hsr debugfs directory [ 1048.563250][T13186] Bluetooth: Wrong link type (-57) [ 1048.603063][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.721267][T17582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.999449][T17582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.197411][T15487] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1049.272398][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.616321][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.799753][T15487] usb 1-1: Using ep0 maxpacket: 8 [ 1049.843036][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.864464][T17725] overlayfs: failed to resolve './file0': -2 [ 1049.870947][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.880671][T15487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.914687][T15487] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1049.940443][T17726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17726 comm=syz.4.3163 [ 1049.950371][T17582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.976785][T15487] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1049.985820][T15487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.245780][T15487] usb 1-1: config 0 descriptor?? [ 1050.398184][T17582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.734679][T17718] syz_tun: entered allmulticast mode [ 1050.936052][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1050.949387][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.032381][T17718] wireguard0: entered promiscuous mode [ 1051.047366][T17718] wireguard0: entered allmulticast mode [ 1051.547053][ T5824] usb 1-1: USB disconnect, device number 48 [ 1052.041582][T15487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.220828][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1052.230570][T17582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1052.305886][T17582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1052.343444][T17582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1052.451629][T17582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1052.908968][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.222199][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.452939][T17760] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1053.868453][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.028908][T17582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.046200][T13349] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1054.267016][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.956444][T17582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.973945][T13186] Bluetooth: Wrong link type (-57) [ 1054.979542][T13336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.986669][T13336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.061712][T13336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.068852][T13336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.306355][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.869552][T17780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3174'. [ 1055.946220][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.358181][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.664796][T17582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.825829][T17582] veth0_vlan: entered promiscuous mode [ 1056.849869][T17582] veth1_vlan: entered promiscuous mode [ 1056.865984][T13346] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1056.943710][T17582] veth0_macvtap: entered promiscuous mode [ 1056.996534][T17801] overlayfs: failed to resolve './file0': -2 [ 1057.047179][T17805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17805 comm=syz.3.3179 [ 1057.287533][T17582] veth1_macvtap: entered promiscuous mode [ 1057.349481][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.384686][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.397735][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.425829][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.436065][T17807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3181'. [ 1057.445192][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.474569][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.504332][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.529568][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.555928][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.685494][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.745774][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.766391][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.265562][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 1058.555383][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.566421][T17582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.579624][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.631379][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.655325][T13186] Bluetooth: Wrong link type (-57) [ 1058.660673][T13186] Bluetooth: hci2: link tx timeout [ 1058.666642][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.677127][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.695523][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.705584][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.725352][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.735156][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.750093][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.787447][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1058.793994][T17582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.826276][T17582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.926690][T17582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.954350][T17582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.965211][T17582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.030891][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.393497][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.424343][T17582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.470348][T17582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.710009][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.803885][T13346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.665285][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1060.696222][T13346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.759532][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.907570][T16993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.984706][T16993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.643446][T17846] overlayfs: failed to resolve './file0': -2 [ 1061.650267][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17846 comm=syz.3.3192 [ 1061.678068][T17849] overlayfs: failed to resolve './file0': -2 [ 1061.788669][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.869208][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1061.985430][T17849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17849 comm=syz.4.3190 [ 1062.106059][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.847789][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.240747][T13337] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1063.346031][T17869] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1063.371295][T17864] No such timeout policy "syz1" [ 1063.849902][T17875] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1063.861412][T17875] nfs: Unknown parameter '' [ 1063.868369][ T30] audit: type=1400 audit(1744729142.916:805): avc: denied { map } for pid=17874 comm="syz.0.3200" path="socket:[57299]" dev="sockfs" ino=57299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1063.898572][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.005264][ T5824] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1064.060922][T17877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17877 comm=syz.0.3201 [ 1064.224336][ T5824] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1064.271491][ T5824] usb 4-1: config 179 has no interface number 0 [ 1064.325551][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1064.409937][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1064.421319][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1064.434728][ T5824] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1064.445497][ T5824] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1064.459098][ T5824] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1064.468386][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.492315][T17873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.521365][ T5824] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 1064.739093][T17886] overlayfs: failed to resolve './file0': -2 [ 1064.776768][T17886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17886 comm=syz.0.3205 [ 1064.914748][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.034604][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1065.080202][ T5824] usb 4-1: USB disconnect, device number 65 [ 1065.144791][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.066843][T17899] FAULT_INJECTION: forcing a failure. [ 1066.066843][T17899] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.079565][T17899] CPU: 0 UID: 0 PID: 17899 Comm: syz.2.3209 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1066.079590][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1066.079600][T17899] Call Trace: [ 1066.079606][T17899] [ 1066.079613][T17899] dump_stack_lvl+0x16c/0x1f0 [ 1066.079640][T17899] should_fail_ex+0x512/0x640 [ 1066.079658][T17899] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1066.079679][T17899] should_failslab+0xc2/0x120 [ 1066.079699][T17899] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1066.079716][T17899] ? security_file_alloc+0x34/0x2b0 [ 1066.079744][T17899] security_file_alloc+0x34/0x2b0 [ 1066.079768][T17899] init_file+0x93/0x4c0 [ 1066.079788][T17899] alloc_empty_file+0x73/0x1e0 [ 1066.079810][T17899] path_openat+0xe0/0x2d40 [ 1066.079824][T17899] ? __x64_sys_openat+0x174/0x210 [ 1066.079844][T17899] ? do_syscall_64+0xcd/0x260 [ 1066.079865][T17899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.079891][T17899] ? __pfx_path_openat+0x10/0x10 [ 1066.079915][T17899] do_filp_open+0x20b/0x470 [ 1066.079932][T17899] ? __pfx_do_filp_open+0x10/0x10 [ 1066.079967][T17899] ? alloc_fd+0x471/0x7d0 [ 1066.079990][T17899] do_sys_openat2+0x11b/0x1d0 [ 1066.080010][T17899] ? __pfx_do_sys_openat2+0x10/0x10 [ 1066.080046][T17899] __x64_sys_openat+0x174/0x210 [ 1066.080066][T17899] ? __pfx___x64_sys_openat+0x10/0x10 [ 1066.080090][T17899] ? do_user_addr_fault+0x843/0x1370 [ 1066.080116][T17899] do_syscall_64+0xcd/0x260 [ 1066.080141][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.080158][T17899] RIP: 0033:0x7f2877d8bad0 [ 1066.080172][T17899] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1066.080189][T17899] RSP: 002b:00007f2878be4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1066.080207][T17899] RAX: ffffffffffffffda RBX: 00000000001a3c82 RCX: 00007f2877d8bad0 [ 1066.080219][T17899] RDX: 00000000001a3c82 RSI: 00007f2878be4c10 RDI: 00000000ffffff9c [ 1066.080230][T17899] RBP: 00007f2878be4c10 R08: 0000000000000000 R09: 002367732f766564 [ 1066.080241][T17899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1066.080251][T17899] R13: 0000000000000000 R14: 00007f2877fa5fa0 R15: 00007ffd70a96718 [ 1066.080274][T17899] [ 1066.309879][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.482444][T17902] FAULT_INJECTION: forcing a failure. [ 1066.482444][T17902] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.541030][T17902] CPU: 1 UID: 0 PID: 17902 Comm: syz.0.3211 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1066.541058][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1066.541069][T17902] Call Trace: [ 1066.541075][T17902] [ 1066.541082][T17902] dump_stack_lvl+0x16c/0x1f0 [ 1066.541111][T17902] should_fail_ex+0x512/0x640 [ 1066.541135][T17902] ? alloc_pipe_info+0x1ec/0x590 [ 1066.541153][T17902] should_failslab+0xc2/0x120 [ 1066.541173][T17902] __kmalloc_noprof+0xd2/0x510 [ 1066.541197][T17902] alloc_pipe_info+0x1ec/0x590 [ 1066.541218][T17902] splice_direct_to_actor+0x77d/0xa30 [ 1066.541246][T17902] ? __pfx_direct_splice_actor+0x10/0x10 [ 1066.541271][T17902] ? inode_has_perm+0x16f/0x1d0 [ 1066.541292][T17902] ? file_has_perm+0x27d/0x350 [ 1066.541308][T17902] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1066.541336][T17902] ? __pfx_file_has_perm+0x10/0x10 [ 1066.541358][T17902] do_splice_direct+0x174/0x240 [ 1066.541385][T17902] ? __pfx_do_splice_direct+0x10/0x10 [ 1066.541410][T17902] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1066.541438][T17902] ? bpf_lsm_file_permission+0x9/0x10 [ 1066.541461][T17902] ? security_file_permission+0x71/0x210 [ 1066.541488][T17902] ? rw_verify_area+0xcf/0x680 [ 1066.541514][T17902] do_sendfile+0xafd/0xe50 [ 1066.541543][T17902] ? __pfx_do_sendfile+0x10/0x10 [ 1066.541568][T17902] ? __fget_files+0x20e/0x3c0 [ 1066.541592][T17902] __x64_sys_sendfile64+0x1d8/0x220 [ 1066.541610][T17902] ? ksys_write+0x1b9/0x240 [ 1066.541625][T17902] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1066.541652][T17902] do_syscall_64+0xcd/0x260 [ 1066.541678][T17902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.541695][T17902] RIP: 0033:0x7f9a7718d169 [ 1066.541709][T17902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.541726][T17902] RSP: 002b:00007f9a7809a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1066.541743][T17902] RAX: ffffffffffffffda RBX: 00007f9a773a6080 RCX: 00007f9a7718d169 [ 1066.541754][T17902] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 1066.541764][T17902] RBP: 00007f9a7809a090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.541774][T17902] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 1066.541783][T17902] R13: 0000000000000000 R14: 00007f9a773a6080 R15: 00007ffd3ea0e148 [ 1066.541807][T17902] [ 1067.425011][ T30] audit: type=1400 audit(1744729146.447:806): avc: denied { setopt } for pid=17908 comm="syz.1.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1067.438896][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1067.508855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.747691][T17925] No such timeout policy "syz1" [ 1067.938577][T13186] Bluetooth: Wrong link type (-57) [ 1068.024081][ T7728] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1068.034402][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1068.045928][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1068.060014][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1068.070063][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1068.078397][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1068.098004][T17931] overlay: ./file0 is not a directory [ 1068.161002][T17928] lo speed is unknown, defaulting to 1000 [ 1068.186553][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.224163][ T7728] usb 2-1: Using ep0 maxpacket: 16 [ 1068.236659][ T7728] usb 2-1: config 1 has an invalid interface number: 2 but max is 0 [ 1068.290720][ T7728] usb 2-1: config 1 has no interface number 0 [ 1068.579825][T13336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1068.606521][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.845997][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.411165][ T7728] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.422135][ T7728] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.580767][ T7728] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.590996][ T7728] usb 2-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1069.601056][ T7728] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.611423][ T7728] usb 2-1: config 1 interface 2 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1069.624729][T17949] overlayfs: failed to resolve './file0': -2 [ 1069.634791][ T7728] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.647878][T17949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17949 comm=syz.2.3222 [ 1069.671667][ T7728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.681683][ T7728] usb 2-1: SerialNumber: syz [ 1069.712604][T17928] chnl_net:caif_netlink_parms(): no params data found [ 1069.882832][T17955] FAULT_INJECTION: forcing a failure. [ 1069.882832][T17955] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.895468][T17955] CPU: 0 UID: 0 PID: 17955 Comm: syz.3.3223 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1069.895482][T17955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1069.895488][T17955] Call Trace: [ 1069.895493][T17955] [ 1069.895497][T17955] dump_stack_lvl+0x16c/0x1f0 [ 1069.895516][T17955] should_fail_ex+0x512/0x640 [ 1069.895527][T17955] ? fs_reclaim_acquire+0xae/0x150 [ 1069.895543][T17955] ? tomoyo_encode2+0x100/0x3e0 [ 1069.895558][T17955] should_failslab+0xc2/0x120 [ 1069.895570][T17955] __kmalloc_noprof+0xd2/0x510 [ 1069.895580][T17955] ? d_absolute_path+0x136/0x1a0 [ 1069.895596][T17955] tomoyo_encode2+0x100/0x3e0 [ 1069.895613][T17955] tomoyo_encode+0x29/0x50 [ 1069.895627][T17955] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1069.895646][T17955] tomoyo_mount_acl+0x664/0x850 [ 1069.895659][T17955] ? kernel_text_address+0x8d/0x100 [ 1069.895672][T17955] ? __kernel_text_address+0xd/0x40 [ 1069.895687][T17955] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1069.895715][T17955] ? tomoyo_domain+0xbb/0x150 [ 1069.895724][T17955] ? tomoyo_profile+0x47/0x60 [ 1069.895735][T17955] tomoyo_mount_permission+0x16d/0x420 [ 1069.895749][T17955] ? tomoyo_mount_permission+0x14f/0x420 [ 1069.895764][T17955] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1069.895786][T17955] security_sb_mount+0x9b/0x260 [ 1069.895800][T17955] path_mount+0x128/0x1f30 [ 1069.895813][T17955] ? kmem_cache_free+0x2d4/0x4d0 [ 1069.895822][T17955] ? __pfx_path_mount+0x10/0x10 [ 1069.895835][T17955] ? putname+0x154/0x1a0 [ 1069.895849][T17955] __x64_sys_mount+0x28d/0x310 [ 1069.895861][T17955] ? __pfx___x64_sys_mount+0x10/0x10 [ 1069.895872][T17955] ? rcu_is_watching+0x12/0xc0 [ 1069.895889][T17955] do_syscall_64+0xcd/0x260 [ 1069.895905][T17955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.895916][T17955] RIP: 0033:0x7fa55078d169 [ 1069.895925][T17955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.895935][T17955] RSP: 002b:00007fa551673038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1069.895945][T17955] RAX: ffffffffffffffda RBX: 00007fa5509a5fa0 RCX: 00007fa55078d169 [ 1069.895952][T17955] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000000 [ 1069.895958][T17955] RBP: 00007fa551673090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.895964][T17955] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 1069.895970][T17955] R13: 0000000000000000 R14: 00007fa5509a5fa0 R15: 00007fff662f6b18 [ 1069.895983][T17955] [ 1069.895994][T17955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1070.151507][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.183587][ T5835] Bluetooth: hci1: command tx timeout [ 1070.278649][ T5824] usb 2-1: USB disconnect, device number 62 [ 1070.386021][T13336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1070.399589][T17928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.443536][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.392666][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.405456][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.418045][T17928] bridge_slave_0: entered allmulticast mode [ 1071.434768][T17928] bridge_slave_0: entered promiscuous mode [ 1071.499156][T17928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.513579][T17972] No such timeout policy "syz1" [ 1071.529319][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.543714][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 1071.549919][T17928] bridge_slave_1: entered allmulticast mode [ 1071.553238][T17928] bridge_slave_1: entered promiscuous mode [ 1071.762746][T13186] Bluetooth: Wrong link type (-57) [ 1071.792281][T17928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.832930][T17928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.733457][T17984] FAULT_INJECTION: forcing a failure. [ 1072.733457][T17984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.747200][T17984] CPU: 1 UID: 0 PID: 17984 Comm: syz.1.3231 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1072.747215][T17984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1072.747221][T17984] Call Trace: [ 1072.747226][T17984] [ 1072.747230][T17984] dump_stack_lvl+0x16c/0x1f0 [ 1072.747247][T17984] should_fail_ex+0x512/0x640 [ 1072.747261][T17984] _copy_from_user+0x2e/0xd0 [ 1072.747273][T17984] memdup_user+0x6b/0xe0 [ 1072.747286][T17984] strndup_user+0x78/0xe0 [ 1072.747299][T17984] __x64_sys_mount+0x180/0x310 [ 1072.747312][T17984] ? __pfx___x64_sys_mount+0x10/0x10 [ 1072.747323][T17984] ? rcu_is_watching+0x12/0xc0 [ 1072.747339][T17984] do_syscall_64+0xcd/0x260 [ 1072.747355][T17984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.747365][T17984] RIP: 0033:0x7f08cf18d169 [ 1072.747374][T17984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.747384][T17984] RSP: 002b:00007f08cff64038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1072.747395][T17984] RAX: ffffffffffffffda RBX: 00007f08cf3a6160 RCX: 00007f08cf18d169 [ 1072.747401][T17984] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 1072.747407][T17984] RBP: 00007f08cff64090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.747413][T17984] R10: 0000000000181891 R11: 0000000000000246 R12: 0000000000000001 [ 1072.747419][T17984] R13: 0000000000000000 R14: 00007f08cf3a6160 R15: 00007ffd2de865a8 [ 1072.747432][T17984] [ 1072.782631][T13186] Bluetooth: hci1: command tx timeout [ 1072.898656][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.048783][T17928] team0: Port device team_slave_0 added [ 1073.079179][T17928] team0: Port device team_slave_1 added [ 1074.044171][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.423068][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.654296][T17928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.669602][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.991910][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1075.012672][T17928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.038646][T13186] Bluetooth: hci1: command tx timeout [ 1075.099341][T17995] overlayfs: failed to resolve './file0': -2 [ 1075.112301][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.143797][T17995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=17995 comm=syz.1.3234 [ 1075.158011][T17928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.158024][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.158044][T17928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.284145][T17928] hsr_slave_0: entered promiscuous mode [ 1075.300594][T17928] hsr_slave_1: entered promiscuous mode [ 1075.320112][T17928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1075.328014][T17928] Cannot create hsr debugfs directory [ 1075.452969][T16133] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1075.642819][T16133] usb 3-1: Using ep0 maxpacket: 8 [ 1075.672964][T16133] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1075.687219][T16133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.780624][T16133] usb 3-1: config 0 descriptor?? [ 1076.007041][T16133] usb 3-1: string descriptor 0 read error: -71 [ 1076.095577][T16133] usb 3-1: Found UVC 0.00 device (2833:0201) [ 1076.115763][T16133] usb 3-1: No valid video chain found. [ 1076.124696][T17928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.169365][T16133] usb 3-1: USB disconnect, device number 57 [ 1076.189433][T17928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.209721][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.447784][T17928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.467281][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1076.542667][T17928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.382471][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.396165][T13186] Bluetooth: hci1: command tx timeout [ 1077.463122][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.184050][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.426547][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.593154][T18042] overlayfs: failed to resolve './file0': -2 [ 1078.603413][T18042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=18042 comm=syz.2.3246 [ 1078.692095][T18049] FAULT_INJECTION: forcing a failure. [ 1078.692095][T18049] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.705050][T18049] CPU: 0 UID: 0 PID: 18049 Comm: syz.1.3247 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1078.705072][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1078.705083][T18049] Call Trace: [ 1078.705089][T18049] [ 1078.705096][T18049] dump_stack_lvl+0x16c/0x1f0 [ 1078.705122][T18049] should_fail_ex+0x512/0x640 [ 1078.705140][T18049] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1078.705160][T18049] should_failslab+0xc2/0x120 [ 1078.705179][T18049] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1078.705202][T18049] ? __might_fault+0xe3/0x190 [ 1078.705218][T18049] ? __might_fault+0x13b/0x190 [ 1078.705234][T18049] ? getname_flags.part.0+0x4c/0x550 [ 1078.705259][T18049] getname_flags.part.0+0x4c/0x550 [ 1078.705283][T18049] getname_flags+0x93/0xf0 [ 1078.705309][T18049] user_path_at+0x24/0x60 [ 1078.705325][T18049] __x64_sys_mount+0x1fc/0x310 [ 1078.705345][T18049] ? __pfx___x64_sys_mount+0x10/0x10 [ 1078.705371][T18049] do_syscall_64+0xcd/0x260 [ 1078.705395][T18049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.705412][T18049] RIP: 0033:0x7f08cf18d169 [ 1078.705427][T18049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.705442][T18049] RSP: 002b:00007f08cff64038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1078.705458][T18049] RAX: ffffffffffffffda RBX: 00007f08cf3a6160 RCX: 00007f08cf18d169 [ 1078.705470][T18049] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0 [ 1078.705480][T18049] RBP: 00007f08cff64090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.705491][T18049] R10: 0000000000181891 R11: 0000000000000246 R12: 0000000000000001 [ 1078.705500][T18049] R13: 0000000000000000 R14: 00007f08cf3a6160 R15: 00007ffd2de865a8 [ 1078.705523][T18049] [ 1078.998894][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1079.199502][T17928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.603474][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.619283][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.627384][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.639945][T17928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.874079][T17928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.884845][T17928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.946688][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.991995][T18060] lo speed is unknown, defaulting to 1000 [ 1081.142437][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 1082.140476][T18085] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3254' sets config #1 [ 1082.155512][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1082.510606][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.666526][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.783923][T17928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1082.899179][T17928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1082.950170][T17928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1082.983709][T17928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1082.997142][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1083.158691][T18109] overlayfs: failed to resolve './file0': -2 [ 1083.166417][T18109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=18109 comm=syz.0.3260 [ 1083.228684][ T5917] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1083.247271][T18113] siw: device registration error -23 [ 1083.511899][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1083.521552][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1083.526094][T17928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.534936][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.554856][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.561434][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1083.568942][T17928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.605582][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1083.637386][T13336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.644467][T13336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.661665][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.678119][T13336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.685301][T13336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.694517][ T5917] usb 2-1: config 0 descriptor?? [ 1083.723790][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1083.952157][ T5824] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1084.058728][T18126] Mount JFS Failure: -22 [ 1084.079112][T18126] jfs_mount failed w/return code = -22 [ 1084.645097][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.683161][ T5824] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.177497][ T5824] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1085.194416][ T5824] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1085.203567][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.298479][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1085.771667][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.835614][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.876682][ T910] usb 2-1: USB disconnect, device number 63 [ 1086.084278][ T30] audit: type=1400 audit(1744729165.100:807): avc: denied { map } for pid=18143 comm="syz.0.3267" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1086.195865][T18149] macvlan2: entered promiscuous mode [ 1086.217384][T18149] macvlan2: entered allmulticast mode [ 1086.229097][ T5824] usb 3-1: USB disconnect, device number 58 [ 1086.260625][ T30] audit: type=1400 audit(1744729165.110:808): avc: denied { execute } for pid=18143 comm="syz.0.3267" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1086.293920][T17928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.903137][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.272257][T13346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.282897][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.294739][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.461292][T16993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1088.043479][T18187] siw: device registration error -23 [ 1088.307060][T17928] veth0_vlan: entered promiscuous mode [ 1088.342443][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.391245][T17928] veth1_vlan: entered promiscuous mode [ 1088.479459][T17928] veth0_macvtap: entered promiscuous mode [ 1088.514975][T17928] veth1_macvtap: entered promiscuous mode [ 1088.568759][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.603129][T18195] No such timeout policy "syz1" [ 1088.631322][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.656346][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.677005][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.722180][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.740895][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.760629][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.780818][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.811145][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.828797][T13336] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1088.863849][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.871997][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.882360][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.905475][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.943034][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.106457][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.231709][T17928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.281919][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.342673][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.399563][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.433496][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.441602][T16133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.460607][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.480483][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.503544][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.518532][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.530132][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.540041][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.550629][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.560964][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.571467][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.597768][T17928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.629968][ T5917] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1089.647250][T17928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.680490][T17928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.689185][T17928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.700076][T17928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.703454][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.722131][T18217] /dev/sg0: Can't lookup blockdev [ 1090.041862][ T5917] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.056951][ T5917] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1090.066272][ T5917] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1090.094161][T18216] xt_CT: No such helper "pptp" [ 1090.098397][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.159263][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.198975][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.270895][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1090.310533][ T30] audit: type=1400 audit(1744729169.351:809): avc: denied { ioctl } for pid=18225 comm="syz.1.3290" path="socket:[59722]" dev="sockfs" ino=59722 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1090.329580][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.550874][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.561126][T18227] [ 1090.563439][T18227] ====================================================== [ 1090.570425][T18227] WARNING: possible circular locking dependency detected [ 1090.577408][T18227] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 1090.584481][T18227] ------------------------------------------------------ [ 1090.591464][T18227] syz.1.3290/18227 is trying to acquire lock: [ 1090.597493][T18227] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 1090.606502][T18227] [ 1090.606502][T18227] but task is already holding lock: [ 1090.613832][T18227] ffff88805671f228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 1090.623806][T18227] [ 1090.623806][T18227] which lock already depends on the new lock. [ 1090.623806][T18227] [ 1090.634205][T18227] [ 1090.634205][T18227] the existing dependency chain (in reverse order) is: [ 1090.643200][T18227] [ 1090.643200][T18227] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 1090.651768][T18227] __mutex_lock+0x199/0xb90 [ 1090.656772][T18227] smc_switch_to_fallback+0x2d/0x9f0 [ 1090.662553][T18227] smc_sendmsg+0x13d/0x520 [ 1090.667460][T18227] __sys_sendto+0x495/0x510 [ 1090.672468][T18227] __x64_sys_sendto+0xe0/0x1c0 [ 1090.677740][T18227] do_syscall_64+0xcd/0x260 [ 1090.682757][T18227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.689140][T18227] [ 1090.689140][T18227] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1090.696759][T18227] lock_sock_nested+0x41/0xf0 [ 1090.701929][T18227] sockopt_lock_sock+0x54/0x70 [ 1090.707184][T18227] do_ip_setsockopt+0xfe/0x3240 [ 1090.712522][T18227] ip_setsockopt+0x59/0xf0 [ 1090.717425][T18227] do_sock_setsockopt+0x221/0x470 [ 1090.722943][T18227] __sys_setsockopt+0x1a0/0x230 [ 1090.728284][T18227] __x64_sys_setsockopt+0xbd/0x160 [ 1090.733887][T18227] do_syscall_64+0xcd/0x260 [ 1090.738897][T18227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.745281][T18227] [ 1090.745281][T18227] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1090.752455][T18227] __lock_acquire+0x1173/0x1ba0 [ 1090.757796][T18227] lock_acquire+0x179/0x350 [ 1090.762788][T18227] __mutex_lock+0x199/0xb90 [ 1090.767784][T18227] do_ip_getsockopt+0x1843/0x2220 [ 1090.773298][T18227] ip_getsockopt+0x9b/0x1e0 [ 1090.778290][T18227] tcp_getsockopt+0x9e/0x100 [ 1090.783370][T18227] smc_getsockopt+0x162/0x370 [ 1090.788543][T18227] do_sock_getsockopt+0x3fc/0x800 [ 1090.794073][T18227] __sys_getsockopt+0x12f/0x260 [ 1090.799424][T18227] __x64_sys_getsockopt+0xbd/0x160 [ 1090.805030][T18227] do_syscall_64+0xcd/0x260 [ 1090.810038][T18227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.816428][T18227] [ 1090.816428][T18227] other info that might help us debug this: [ 1090.816428][T18227] [ 1090.826629][T18227] Chain exists of: [ 1090.826629][T18227] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1090.826629][T18227] [ 1090.840149][T18227] Possible unsafe locking scenario: [ 1090.840149][T18227] [ 1090.847571][T18227] CPU0 CPU1 [ 1090.852916][T18227] ---- ---- [ 1090.858252][T18227] lock(&smc->clcsock_release_lock); [ 1090.863612][T18227] lock(sk_lock-AF_INET); [ 1090.870518][T18227] lock(&smc->clcsock_release_lock); [ 1090.878377][T18227] lock(rtnl_mutex); [ 1090.882329][T18227] [ 1090.882329][T18227] *** DEADLOCK *** [ 1090.882329][T18227] [ 1090.890441][T18227] 1 lock held by syz.1.3290/18227: [ 1090.895517][T18227] #0: ffff88805671f228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 1090.905925][T18227] [ 1090.905925][T18227] stack backtrace: [ 1090.911783][T18227] CPU: 1 UID: 0 PID: 18227 Comm: syz.1.3290 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1090.911798][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1090.911808][T18227] Call Trace: [ 1090.911812][T18227] [ 1090.911816][T18227] dump_stack_lvl+0x116/0x1f0 [ 1090.911832][T18227] print_circular_bug+0x275/0x350 [ 1090.911849][T18227] check_noncircular+0x14c/0x170 [ 1090.911867][T18227] __lock_acquire+0x1173/0x1ba0 [ 1090.911879][T18227] lock_acquire+0x179/0x350 [ 1090.911888][T18227] ? do_ip_getsockopt+0x1843/0x2220 [ 1090.911898][T18227] ? __pfx___might_resched+0x10/0x10 [ 1090.911915][T18227] __mutex_lock+0x199/0xb90 [ 1090.911930][T18227] ? do_ip_getsockopt+0x1843/0x2220 [ 1090.911939][T18227] ? __might_fault+0xe3/0x190 [ 1090.911950][T18227] ? __might_fault+0xe3/0x190 [ 1090.911960][T18227] ? __might_fault+0x13b/0x190 [ 1090.911969][T18227] ? do_ip_getsockopt+0x1843/0x2220 [ 1090.911979][T18227] ? __pfx___mutex_lock+0x10/0x10 [ 1090.911994][T18227] ? _copy_from_user+0x59/0xd0 [ 1090.912007][T18227] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1090.912026][T18227] ? do_ip_getsockopt+0x1843/0x2220 [ 1090.912035][T18227] ? rtnl_lock+0x9/0x20 [ 1090.912045][T18227] do_ip_getsockopt+0x1843/0x2220 [ 1090.912056][T18227] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1090.912067][T18227] ? register_lock_class+0x41/0x4c0 [ 1090.912076][T18227] ? __lock_acquire+0x5ca/0x1ba0 [ 1090.912087][T18227] ? __lock_acquire+0xaa4/0x1ba0 [ 1090.912098][T18227] ? __mutex_trylock_common+0xe9/0x250 [ 1090.912108][T18227] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1090.912119][T18227] ? __pfx___might_resched+0x10/0x10 [ 1090.912134][T18227] ? rcu_is_watching+0x12/0xc0 [ 1090.912147][T18227] ? trace_contention_end+0xdd/0x130 [ 1090.912157][T18227] ? __mutex_lock+0x1ca/0xb90 [ 1090.912172][T18227] ip_getsockopt+0x9b/0x1e0 [ 1090.912181][T18227] ? __pfx___mutex_lock+0x10/0x10 [ 1090.912195][T18227] ? __pfx_ip_getsockopt+0x10/0x10 [ 1090.912206][T18227] tcp_getsockopt+0x9e/0x100 [ 1090.912219][T18227] smc_getsockopt+0x162/0x370 [ 1090.912229][T18227] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1090.912244][T18227] ? __pfx_smc_getsockopt+0x10/0x10 [ 1090.912255][T18227] ? __pfx_smc_getsockopt+0x10/0x10 [ 1090.912265][T18227] do_sock_getsockopt+0x3fc/0x800 [ 1090.912282][T18227] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1090.912297][T18227] ? __fget_files+0x204/0x3c0 [ 1090.912310][T18227] __sys_getsockopt+0x12f/0x260 [ 1090.912323][T18227] __x64_sys_getsockopt+0xbd/0x160 [ 1090.912335][T18227] ? do_syscall_64+0x91/0x260 [ 1090.912349][T18227] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.912363][T18227] do_syscall_64+0xcd/0x260 [ 1090.912378][T18227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.912389][T18227] RIP: 0033:0x7f08cf18d169 [ 1090.912399][T18227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.912410][T18227] RSP: 002b:00007f08cffa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1090.912420][T18227] RAX: ffffffffffffffda RBX: 00007f08cf3a5fa0 RCX: 00007f08cf18d169 [ 1090.912426][T18227] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 1090.912433][T18227] RBP: 00007f08cf20e990 R08: 0000200000000040 R09: 0000000000000000 [ 1090.912439][T18227] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.912445][T18227] R13: 0000000000000000 R14: 00007f08cf3a5fa0 R15: 00007ffd2de865a8 [ 1090.912455][T18227] [ 1091.250788][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1091.507918][ T10] usb 3-1: USB disconnect, device number 59 [ 1091.626298][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.856591][T18224] SELinux: ebitmap: truncated map [ 1091.909493][T18224] SELinux: failed to load policy [ 1092.206198][T18224] syz_tun (unregistering): left allmulticast mode [ 1092.451346][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1092.459616][T16996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.509632][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.521906][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.740091][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.569890][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1094.579789][T18144] net_ratelimit: 1 callbacks suppressed [ 1094.579806][T18144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.680158][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1095.619850][T18144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.779774][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1095.780064][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.659518][T18144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.909418][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1097.709456][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.020012][T13347] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1098.659948][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.739182][T12675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.820128][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.129004][T16996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1099.788990][T18144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.238898][T13351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!