last executing test programs: 6m55.415657161s ago: executing program 4 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6m53.362413692s ago: executing program 4 (id=1199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x6641, &(0x7f0000000080)={0x0, 0x1b68, 0x10100, 0x1000000, 0xcf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m52.868910732s ago: executing program 4 (id=1202): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='./file1/file0\x00', r1, &(0x7f0000000480)='./file1/file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m52.796674942s ago: executing program 4 (id=1203): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6m52.589903438s ago: executing program 4 (id=1206): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m52.513531725s ago: executing program 4 (id=1207): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) dup(r1) r2 = syz_io_uring_setup(0x110, &(0x7f0000000540)={0x0, 0xfad6, 0x0, 0x0, 0x5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6m36.985272043s ago: executing program 32 (id=1207): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) dup(r1) r2 = syz_io_uring_setup(0x110, &(0x7f0000000540)={0x0, 0xfad6, 0x0, 0x0, 0x5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 6m5.895993734s ago: executing program 0 (id=1397): syz_open_dev$usbfs(0x0, 0x205, 0x8401) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m4.855493305s ago: executing program 0 (id=1399): fsopen(0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r0, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 6m3.734873441s ago: executing program 0 (id=1404): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) 6m2.925847326s ago: executing program 0 (id=1405): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 6m2.379092697s ago: executing program 0 (id=1408): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) listen(r1, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) shutdown(r2, 0x1) 6m1.752699364s ago: executing program 0 (id=1409): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m1.421801619s ago: executing program 33 (id=1409): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m44.432612177s ago: executing program 5 (id=2044): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5bcf00000000000000000800004004000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m43.953113949s ago: executing program 5 (id=2048): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a@']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 2m42.386625152s ago: executing program 5 (id=2051): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a@']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 2m40.481067722s ago: executing program 5 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(0x0, 0x80242, 0x1df2a23c5997fa5f) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2m38.401202194s ago: executing program 5 (id=2061): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 2m35.917744515s ago: executing program 5 (id=2067): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 2m20.787806645s ago: executing program 34 (id=2067): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3f, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 25.913634178s ago: executing program 2 (id=2403): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a@']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 24.710103428s ago: executing program 6 (id=2406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000100), 0x4001) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 22.754929807s ago: executing program 6 (id=2408): r0 = socket(0x6, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x91050}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x69}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xdf6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xed7137e2a8a2a00a}, 0x4000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 21.67348063s ago: executing program 6 (id=2410): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x300048c1) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x800b}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20.922246664s ago: executing program 2 (id=2413): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)="d4", 0x1, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 20.784662271s ago: executing program 6 (id=2415): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xe8f, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 19.652562984s ago: executing program 2 (id=2417): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x21, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50}, 0x50) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cac']) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0xf000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) 18.427627868s ago: executing program 1 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mkdir(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 18.220444515s ago: executing program 2 (id=2423): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x4, 0xf, 0x50, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x8001, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfffffff0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="d0a5cbeb84ef04ac673f294592144e0046a6937d51c09010055f15b413faab4d5e5e9f84f0afab29f431525e58aaf1e1059b8c8d2d322a94c67662626d47c98ec22bf6a5358a43ee8f59e4ab0b20e98586ea49d7dde9d62f07343ca08057aed48940795c786be7b0edf9a56954cee2b7972d500a884ae27fe2d76c52786c2b1a34bb322d0ed6a236640de0e660a74e25d877200562feb49f5900cb96ec992d0f558cef533fc2a9b518deeaefd2afd5fe2344ba63155b3fb93c0cc688920db4d2bfc8a7923cebf4dbee93e5362145", 0xce}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0xe942, @mcast1, 0x253}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000003c0)="4972c84bddde8d6ae6afd07dbf664cb853d1eaf687fab42a27223485d7077962dcd602418e651105be883cd25675c7907f6692d8a0da4bba5bb3c48c90fa971b8bbf49ed3b4091d5d14f5e65025638708f755db961a815fe9cc6eb51c774272cdd57fc243aca5ee2ada82adebd442ff628cc5bf811e87316b01da3f9e0e00d89ee81b67e4fc4f612fcefbf358b7625305e01b69622aff0fd402a8798810e98ceaa788294e01b966e4177e4df6ef6dcd17dbb14691419fd3a3d13c8026d8e18f8432ec6c45869a11df1dda5dfb87a8cb25da83604f9", 0xd5}, {&(0x7f00000001c0)="16b1aec6444e90", 0x7}, {0x0}], 0x3}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000006c0)="934ec8a63fdf961c58833301fa06835321d39f91f286a7d54e72e6cd39a6d0105707dcfb4bc4e7c337bc7b1aff424782c46bc8268c96c6275a36e860ede35fb3808a9c678c0227eefc991f032691330bc76aafd3098511", 0x57}, {&(0x7f0000000740)}, {&(0x7f0000000780)="cf9456aad700b2dcd74995e66b4db3fda6af7fc77e281b56b0a986f61d8be647c05a5e467ff868fb38af78e91426b77221105937945e7577e968fecadc0dc482f3102ac815fb52e72602a605b565fade4b97fdf15d9607cc35c8defcc4d75615aa522d5c4bab63124601b640a4b7838baa5545aa895e6e14dda8566438c599480a47fc9c7b792aaf67be1704bea5a6582ffa13943c040bb784ad77011c384bc955599d88cc215271ff3c9a2629f956f5656ca1e1e5ea5a79fd7ee86d145ee72616143502060cb5356f5b032211ce2f4e946ebdf3881a967d4a2d905ed09238", 0xdf}, {&(0x7f0000000880)="aa3866689a7eca48bf76fae4d0cb29c60d15bb36b83ed1bfd67a68611a35467c3f49869dde12877b", 0x28}], 0x4, &(0x7f0000000a00)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x33}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2b, 0x3, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0xb}}, @generic={0xc0, 0x13, "f811cac2772a29b07c44776dc3551b5c2c5049"}]}}}], 0x88}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x750, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b00)="173e50c6d30e74844125e55cb1e12c548ef35e2ab64015b5dcb51a3e511a4a61edc8648507d1a48fc5fd209b42c1f465cb9a06c267533db2e816d47761c182dd5baed25d63c9369430f97dc475cf18fa316153194c5385e91a9a304b6491fec153107789788d77f023d068c0c60c395e2b42bd579f56fd71ac32b533d641fcc8def20e3ce64f0b9331af96a6a294f7bf424cdcf728650f4d0234152b328e2001b18e81d47a6fc0213ee8af38d5338be7e25b9bd814f7f50cefc3e8ce5f9153cdbea71a0460e5a445b997542ab60d690f3578885315edd4465a7845ea016af6ddec98a659e1a7238d6458881e93f1e92dc89aa8", 0xf3}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000f40)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000f80)="75bcfca0a1fe845f4c476c476d60e627fe1b8fe3072f3ecccecc002ac03e92e0230d8f1d55e3c3afb968bedfe0", 0x2d}, {&(0x7f0000000fc0)}, {&(0x7f0000001040)="8d8c03f9a97fc06185eb79a704f98d44a8c685482e62bd497983e37e1bdfa71b4db05ce53c2b7c32b099030fac935eeefc41", 0x32}], 0x3, &(0x7f00000010c0)=[@tclass={{0x14, 0x29, 0x43, 0x80000001}}, @flowinfo={{0x14, 0x29, 0xb, 0x10}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x89, 0x4, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0xa8, 0x11, '\x00', [@ra={0x5, 0x2, 0xc}, @generic={0x2, 0x7f, "e77244b37b1b268b1166e195b30667815310a6c0448d2e5cd4803c0481f88328a855443584706eaac03bcb83acf8a3ee64239f9d74156df59047f25d46c1dbbd839dfe89d9d47e865c085516ad8f9f911fcf2dad99a1c30ec712a64a0391103cf8be730016b8a3eee40ce5355eb0330f97b6cfdc680a414d059089a3e9514b"}, @enc_lim={0x4, 0x1, 0xfe}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @pad1]}}}], 0x178}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf8f3}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001280)="e216df356f1bc866ac68f6bd146a56a095867bf040f68a785e5c54dd35a0a7ffb862eb3a3bd5e508565214fff48cdb0e5c557d6a2f92837e9dfa76700fa035c02b425746c3f8d0c91219aa4769c8bcceedfd875a6ba30cc5b26a54c9e436f2f38cfde27c3e2473291ef7e2e632830c7bf172e79d07", 0x75}], 0x1, &(0x7f0000001340)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}, {{&(0x7f0000001380)={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="24000000000000002900000032000000200100000000000000000000000000000ea83d7430af3dc1c4070d4b23d541022eace9f2dad9ef01000000", @ANYRES32=r0, @ANYBLOB="0000000010010000000000002900000004000000161e000000000000000100000100050203dff6e8f351fd3e67aa6d973d1ecb7ff0698c94173c263e823bc82ba175c43c0fc44df348661b41a6c5f8551879e184f6075580f19e4056d7fd9ea63fe47655b27cbff09a5a4986860c341cf3ca8c179a5755bcc47a507153f6c19e4470696801943c16bac8d2dbfe944ccef34970c29704c414a0ce3dd07d4eae004ea52e6f7b2f81ab45b2ef6c9fc964335f5591b4bbadc90ca15d71da5d8621de6b5983d82a8c2e3a865d60fd5d0d640a455eb66b903880d11aeab00bc34d5820ed9e5d4001c5b53e3ae2da55a5f5e35d10e216a22dc59f78f41507e2b4a62e1a846a363e2a058b76ef184d00c267d22900000000140000000000000029000000080000000900000000000000580000000000000029000000390000003b08020800000000fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000000000fe8800000000000000000000000001011400000000000000290000003e000000580000000000000014000000000000002900000008000000feffffff0000000014000000000000002900"], 0x1f0}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x6, @empty, 0x1}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001900)="d12b78be7dd252ed1bf5b69cc8a4f820540d9df44165c4c110b9884c6dc1be98790dd61854b27c25ded277d2ff49cbf4551cc4cabdc5c329e4c9778ee552b28bb3cbbbc136aee5da067d015544f855219dca8c", 0x53}, {&(0x7f00000019c0)="0b37e6b3c9e3bce717e87cca93d45689137bf6d958b901c59c60e654ac738b9f25d290c56d3c6ae4856f92dda5cfdab681885b99ba38e725ecaba3aea80e2b5a59348d46ccddea7de5dcee606f4f65d55f75d64a52a933071ac67b7ca05a4d62136eb98644502c7e16ce4c9fdbcec6064e04ee4770849258b93b5a", 0x7b}, {&(0x7f0000001a40)="afe9cd52c02c60e1bab94c4db338d5d54077a0d895f9b878a3cfafa4cdac698d758f0884e1d9c0a4ee99e5b576d8fe8b5855da1a04d8a01053fa4418a8e0d0213900cd626ac90b9d0a287e2487152b01010f4b5072435cb3af14a45251f467d3f37d2b9dc67681acd692981355a222520ead81b298b892e0cf9fd89319da91b9f4154caa349934792c35a66921ac21a8c18b29e99d8652f2edb2f2f4177becf908f4b2632d4577d097bf32297c6d84c022e95121123ee927905e337202dd65bb974c41c1c36f5583def719e6f1ff6e185516e8ec0fd3a573f3", 0xd9}, {0x0}], 0x4, &(0x7f0000002bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x8, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x14}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x89, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0xf, 0x9}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc7c4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf4}}], 0xf0}}], 0x8, 0x4000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd3f, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) close(r3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 17.532174462s ago: executing program 3 (id=2424): creat(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x309bae0806ce629, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 17.334873958s ago: executing program 1 (id=2425): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='a@']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 12.763950319s ago: executing program 7 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.761717772s ago: executing program 1 (id=2437): request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x20, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1, 0x0, @void}, 0x10) bind$rds(r3, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 12.761278151s ago: executing program 3 (id=2428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 12.760692243s ago: executing program 2 (id=2438): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) socket(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r0, 0x0, r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)) 10.820993132s ago: executing program 7 (id=2429): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1200}, 0x0) 10.820125253s ago: executing program 2 (id=2430): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="1800000076006bab9a3fe3d86e17aa076b876c1d00000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000a00)={r3, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x6a, 0x0, 0x4, 0x1ff, 0x1, 0x0, 0x7, 'syz0\x00'}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) 10.819138968s ago: executing program 3 (id=2431): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r2, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0) 10.788008059s ago: executing program 1 (id=2432): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.138335843s ago: executing program 1 (id=2434): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) tkill(0x0, 0x4000012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='cpuacct'}, {@xattr}]}) 9.266789257s ago: executing program 7 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000001c0)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.051644152s ago: executing program 1 (id=2436): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) r2 = dup2(r0, r0) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 9.050911699s ago: executing program 3 (id=2439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) landlock_create_ruleset(&(0x7f0000000340)={0xc022, 0x3, 0x3}, 0x18, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002100210100000000200002000a00000000000000000000000c0018000506cdb6"], 0x28}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r3, &(0x7f0000003a80), 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 8.289392986s ago: executing program 3 (id=2440): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 8.287238791s ago: executing program 7 (id=2441): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) getpid() r1 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 7.780617787s ago: executing program 7 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) 6.79664827s ago: executing program 3 (id=2443): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$kcm(0x2b, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r3) 6.020081755s ago: executing program 6 (id=2415): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xe8f, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 6 (id=2415): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xe8f, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Ƈ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 455.260553][T12231] bpf: Bad value for 'gid' [ 455.352177][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.868250][T12248] bpf: Bad value for 'gid' [ 458.568968][ T29] audit: type=1400 audit(1740104426.780:560): avc: denied { getopt } for pid=12261 comm="syz.1.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.738652][ T29] audit: type=1400 audit(1740104427.130:561): avc: denied { write } for pid=12272 comm="syz.3.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 458.849692][ T29] audit: type=1400 audit(1740104427.250:562): avc: denied { read } for pid=12272 comm="syz.3.1877" path="socket:[36488]" dev="sockfs" ino=36488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.209082][T12284] bpf: Bad value for 'gid' [ 459.826350][T12285] overlayfs: missing 'workdir' [ 460.001099][T12285] siw: device registration error -23 [ 460.049842][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 120 seconds [ 461.919430][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 462.275365][T12307] bpf: Bad value for 'gid' [ 462.419827][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 462.426192][T12315] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 462.432260][ T5869] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 462.455478][T12315] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 462.463493][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.475683][T12315] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 462.490179][ T5869] usb 7-1: Product: syz [ 462.494549][ T5869] usb 7-1: Manufacturer: syz [ 462.499845][ T5869] usb 7-1: SerialNumber: syz [ 462.504905][T12315] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 462.520257][ T5869] usb 7-1: config 0 descriptor?? [ 462.534498][T12315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.544093][T12315] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 462.572039][ T5869] as10x_usb: device has been detected [ 462.591394][ T5869] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 462.609675][ T52] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 462.659655][ T5869] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 462.698278][ T5869] as10x_usb: error during firmware upload part1 [ 462.706127][ T5869] Registered device Sky IT Digital Key (green led) [ 463.052808][T12329] overlayfs: failed to clone upperpath [ 463.104598][T12330] bpf: Bad value for 'gid' [ 463.347726][T12332] overlayfs: missing 'workdir' [ 463.386391][T12332] siw: device registration error -23 [ 463.977429][T12335] Bluetooth: hci0: service_discovery: too big uuid_count value 50983 [ 464.080693][T12341] random: crng reseeded on system resumption [ 464.148510][T12344] overlayfs: failed to resolve './file1': -2 [ 464.355282][T12347] overlayfs: failed to clone upperpath [ 464.407167][T12348] bpf: Bad value for 'gid' [ 465.481448][T12357] bpf: Bad value for 'gid' [ 466.367876][T12360] lo speed is unknown, defaulting to 1000 [ 466.638195][T12368] openvswitch: netlink: IP tunnel dst address not specified [ 467.184425][ T9] usb 7-1: USB disconnect, device number 3 [ 467.201575][ T9] Unregistered device Sky IT Digital Key (green led) [ 467.202994][ T9] as10x_usb: device has been disconnected [ 467.400695][ T1202] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 467.505176][ T52] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 467.574358][ T1202] usb 3-1: Using ep0 maxpacket: 32 [ 467.589146][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.617042][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.651415][T12381] bpf: Bad value for 'gid' [ 467.708704][ T1202] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 467.766382][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.853185][ T1202] usb 3-1: config 0 descriptor?? [ 468.079399][ T52] usb 6-1: device descriptor read/64, error -71 [ 468.154738][T12385] tipc: Failed to remove unknown binding: 66,1,1/0:1104266196/1104266198 [ 468.164488][T12385] tipc: Failed to remove unknown binding: 66,1,1/0:1104266196/1104266198 [ 468.316342][ T1202] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 468.652933][ T52] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 468.747190][T12400] bpf: Bad value for 'gid' [ 469.687282][ T1202] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 469.694977][ T1202] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71 [ 469.716236][ T1202] usb 3-1: USB disconnect, device number 40 [ 469.813670][T12406] overlayfs: missing 'lowerdir' [ 470.560181][ T1202] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 471.619437][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 471.632956][ T1202] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 471.642363][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.655587][ T1202] usb 3-1: Product: syz [ 471.679244][ T1202] usb 3-1: Manufacturer: syz [ 472.642602][ T1202] usb 3-1: SerialNumber: syz [ 472.652319][ T1202] usb 3-1: config 0 descriptor?? [ 472.665207][ T1202] as10x_usb: device has been detected [ 472.674664][ T1202] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 473.670929][ T1202] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 473.688353][ T1202] as10x_usb: error during firmware upload part1 [ 473.695289][ T1202] Registered device Sky IT Digital Key (green led) [ 473.963186][ T1202] usb 3-1: USB disconnect, device number 41 [ 474.032961][ T1202] Unregistered device Sky IT Digital Key (green led) [ 474.034220][ T1202] as10x_usb: device has been disconnected [ 474.296953][T12439] bpf: Bad value for 'gid' [ 474.800421][T12428] TCP: out of memory -- consider tuning tcp_mem [ 474.991077][T12443] overlayfs: missing 'lowerdir' [ 475.852683][T12452] bpf: Bad value for 'gid' [ 476.629711][ T1202] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 476.879828][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 476.911168][T12464] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1930'. [ 476.957158][ T1202] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.999249][ T1202] usb 3-1: config 0 has no interface number 0 [ 477.022422][ T1202] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.062771][ T1202] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.108883][ T1202] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 477.173276][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.196324][ T1202] usb 3-1: config 0 descriptor?? [ 477.697080][T12473] bpf: Bad value for 'gid' [ 478.396828][ T1202] uclogic 0003:28BD:0071.0020: failed retrieving string descriptor #100: -71 [ 478.396869][ T1202] uclogic 0003:28BD:0071.0020: failed retrieving pen parameters: -71 [ 478.396889][ T1202] uclogic 0003:28BD:0071.0020: pen probing failed: -71 [ 478.396914][ T1202] uclogic 0003:28BD:0071.0020: failed probing parameters: -71 [ 478.396984][ T1202] uclogic 0003:28BD:0071.0020: probe with driver uclogic failed with error -71 [ 478.409454][T12468] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 478.409509][T12468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.416797][ T1202] usb 3-1: USB disconnect, device number 42 [ 478.422481][T12468] vhci_hcd vhci_hcd.0: Device attached [ 479.158968][T12486] overlayfs: failed to clone upperpath [ 479.269842][T12487] bpf: Bad value for 'gid' [ 479.624245][T12484] overlayfs: missing 'lowerdir' [ 479.771798][T12488] siw: device registration error -23 [ 479.796859][ T5868] vhci_hcd: vhci_device speed not set [ 479.859702][ T5868] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 480.009486][ T52] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 480.185445][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 480.263277][ T52] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 480.280652][ T52] usb 6-1: config 0 has no interface number 1 [ 480.286862][ T52] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 480.303368][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12576, setting to 1024 [ 480.316450][ T52] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 480.332639][ T52] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 480.357385][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.544054][T12502] bpf: Bad value for 'gid' [ 481.119500][ T52] usb 6-1: Product: syz [ 481.139468][ T52] usb 6-1: Manufacturer: syz [ 481.144110][ T52] usb 6-1: SerialNumber: syz [ 481.149558][T12475] vhci_hcd: connection reset by peer [ 481.201127][ T36] vhci_hcd: stop threads [ 481.206664][ T36] vhci_hcd: release socket [ 481.221269][ T52] usb 6-1: config 0 descriptor?? [ 481.229182][ T36] vhci_hcd: disconnect device [ 481.242521][ T52] usb 6-1: can't set config #0, error -71 [ 481.322028][ T52] usb 6-1: USB disconnect, device number 9 [ 481.632408][T12506] lo speed is unknown, defaulting to 1000 [ 482.428992][T12519] syz.1.1943 (12519): drop_caches: 2 [ 482.466590][T12519] syz.1.1943 (12519): drop_caches: 2 [ 482.503532][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.514239][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.523638][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.532183][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.808503][T12521] bpf: Bad value for 'gid' [ 483.593867][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.936600][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.945156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.289543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.298395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.538617][T12546] bpf: Bad value for 'gid' [ 484.841697][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.310860][ T5868] vhci_hcd: vhci_device speed not set [ 485.464254][ T5921] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 485.596632][T12552] bpf: Bad value for 'gid' [ 486.120946][ T5921] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 486.221318][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 486.228182][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 486.260112][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.719096][ T1202] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 486.752159][ T5921] usb 2-1: config 0 descriptor?? [ 486.767184][T12540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.893659][T12566] overlayfs: failed to clone upperpath [ 486.950139][T12567] bpf: Bad value for 'gid' [ 487.300452][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 487.314232][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 487.324596][ T5921] usb 2-1: USB disconnect, device number 41 [ 487.349430][ T1202] usb 6-1: Using ep0 maxpacket: 16 [ 487.504420][ T29] audit: type=1400 audit(1740104455.760:563): avc: denied { execute } for pid=12572 comm="syz.1.1959" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=37415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 487.559958][T12573] lo speed is unknown, defaulting to 1000 [ 487.571821][ T1202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.607481][ T1202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.168945][ T1202] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 488.183147][ T1202] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 488.192524][ T1202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.280218][ T1202] usb 6-1: config 0 descriptor?? [ 488.292221][ T11] net_ratelimit: 4 callbacks suppressed [ 488.292235][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.306006][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.314131][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.327047][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.369527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.378378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.656392][T12589] ptrace attach of "./syz-executor exec"[5829] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 489.004121][T12556] random: crng reseeded on system resumption [ 489.098743][ T1202] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 489.118722][ T1202] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 489.128525][ T1202] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 490.081361][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.125460][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.133834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.144572][ T1202] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 490.153886][ T1202] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 491.114137][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.169116][ T1202] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 491.825747][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 150 seconds [ 491.977361][ T1202] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 492.040988][ T1202] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 492.110546][T12607] netlink: 'syz.6.1966': attribute type 4 has an invalid length. [ 492.327285][T12615] overlayfs: failed to clone upperpath [ 492.368157][T12615] bpf: Bad value for 'gid' [ 493.029535][T12621] block nbd2: not configured, cannot reconfigure [ 493.050375][ T29] audit: type=1400 audit(1740104461.450:564): avc: denied { write } for pid=12620 comm="syz.2.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.121090][ T5900] usb 6-1: USB disconnect, device number 10 [ 493.128847][ T1202] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 493.169776][ T5881] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 493.187724][ T1202] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 493.212286][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 493.258654][ T1202] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 493.280834][ T1202] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 493.441087][ T5881] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 493.450432][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.458442][ T5881] usb 2-1: Product: syz [ 493.481514][ T5881] usb 2-1: Manufacturer: syz [ 493.494365][ T5881] usb 2-1: SerialNumber: syz [ 494.324440][ T5881] usb 2-1: config 0 descriptor?? [ 494.332192][ T5881] hub 2-1:0.0: bad descriptor, ignoring hub [ 494.338487][ T5881] hub 2-1:0.0: probe with driver hub failed with error -5 [ 494.346652][ T5881] f81232 2-1:0.0: f81534a converter detected [ 494.686196][ T5920] net_ratelimit: 5 callbacks suppressed [ 494.686214][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.761337][ T5881] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 494.768979][ T5881] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 494.784892][ T29] audit: type=1400 audit(1740104463.180:565): avc: denied { create } for pid=12633 comm="syz.3.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 494.980237][ T5881] usb 2-1: USB disconnect, device number 42 [ 494.987485][ T5881] f81232 2-1:0.0: device disconnected [ 495.139433][ T5900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 495.444431][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 495.466508][ T5900] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.482069][ T5900] usb 6-1: config 0 has no interface number 0 [ 495.498778][ T5900] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 495.516597][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.547913][ T5900] usb 6-1: Product: syz [ 495.565782][ T5900] usb 6-1: Manufacturer: syz [ 495.588838][ T5900] usb 6-1: SerialNumber: syz [ 495.618836][ T5900] usb 6-1: config 0 descriptor?? [ 495.663227][ T5900] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 495.819560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.827852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.894180][T12648] ptrace attach of "./syz-executor exec"[5829] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 496.031050][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.593347][ T5900] gspca_spca1528: reg_w err -71 [ 496.609676][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.618610][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.627322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.636364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.644621][ T5900] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 496.660837][ T5900] usb 6-1: USB disconnect, device number 11 [ 497.049240][T12659] bpf: Bad value for 'gid' [ 497.560218][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.011948][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1984'. [ 498.087393][T12664] bpf: Bad value for 'gid' [ 498.626165][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.955761][T12673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 498.964708][T12673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 498.973406][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 499.035163][T12675] siw: device registration error -23 [ 499.340024][ T9] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.383573][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 499.568382][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 499.591132][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.781745][ T9] usb 6-1: config 0 descriptor?? [ 500.320259][T12685] infiniband syz0: set active [ 500.325255][T12685] infiniband syz0: added bond0 [ 500.707624][T12685] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 500.711835][T12685] infiniband syz0: Couldn't open port 1 [ 500.769537][ T5881] net_ratelimit: 4 callbacks suppressed [ 500.769555][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.802361][T12685] RDS/IB: syz0: added [ 500.806863][T12685] smc: adding ib device syz0 with port count 1 [ 500.813208][T12685] smc: ib device syz0 port 1 has pnetid [ 501.123750][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.139587][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.603115][T12695] 9pnet_fd: Insufficient options for proto=fd [ 501.788353][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.796742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.807163][T12700] overlayfs: failed to resolve './file1': -2 [ 501.821977][ T9] elecom 0003:056E:00E6.0022: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.5-1/input0 [ 501.969068][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.398131][ T9] usb 6-1: USB disconnect, device number 12 [ 502.404583][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.412891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.171003][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.348331][T12717] bpf: Bad value for 'gid' [ 504.222790][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.530935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.539184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.560121][T12729] bpf: Bad value for 'gid' [ 504.911806][T12732] bpf: Bad value for 'gid' [ 505.468277][T12742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 505.477747][T12742] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.650472][T12744] bpf: Bad value for 'gid' [ 506.692839][ T5921] net_ratelimit: 1 callbacks suppressed [ 506.692859][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.944802][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 507.108292][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 507.307143][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 507.320714][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 507.422512][T12726] ceph: No mds server is up or the cluster is laggy [ 507.499933][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.508132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.864821][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.129538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.137787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.806249][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.814889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.864745][T12770] siw: device registration error -23 [ 509.002709][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.036491][T12775] vlan2: entered promiscuous mode [ 509.043506][T12775] vlan2: entered allmulticast mode [ 509.060337][T12775] hsr_slave_1: entered allmulticast mode [ 509.229603][T12777] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x3 [ 509.525187][ T5921] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 510.539433][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 510.545924][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.562275][ T5921] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 510.577650][ T5921] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 510.592095][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.601690][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.609891][ T5921] usb 2-1: SerialNumber: syz [ 510.641896][T12777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.657514][ T5921] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 510.711451][ T29] audit: type=1400 audit(1740104479.110:566): avc: denied { nlmsg_write } for pid=12795 comm="syz.3.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 510.834759][T12798] bpf: Bad value for 'gid' [ 511.287204][ T5921] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 511.306519][ T5921] usb 2-1: USB disconnect, device number 43 [ 511.723907][T12808] overlayfs: failed to clone upperpath [ 511.780075][T12809] bpf: Bad value for 'gid' [ 512.449432][ C0] net_ratelimit: 2 callbacks suppressed [ 512.449448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.463458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.691975][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.260945][T12820] bpf: Bad value for 'gid' [ 513.284489][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.293006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.389756][T12822] overlayfs: failed to clone upperpath [ 513.966604][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.121142][T12829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.128771][T12829] batadv0: mtu less than device minimum [ 514.171654][T12829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.182823][T12829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.193906][T12829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.352606][T12832] siw: device registration error -23 [ 515.019663][ T29] audit: type=1400 audit(1740104483.420:567): avc: denied { map } for pid=12837 comm="syz.1.2031" path="/393/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 515.052493][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 515.061159][T12838] netfs: Couldn't get user pages (rc=-14) [ 515.062444][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 515.062468][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 515.062479][ T54] Workqueue: hci2 hci_rx_work [ 515.062509][ T54] Call Trace: [ 515.062514][ T54] [ 515.062520][ T54] dump_stack_lvl+0x16c/0x1f0 [ 515.062543][ T54] sysfs_warn_dup+0x7f/0xa0 [ 515.062564][ T54] sysfs_create_dir_ns+0x24d/0x2b0 [ 515.062586][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 515.062610][ T54] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.062626][ T54] ? kobject_add_internal+0x12d/0x990 [ 515.062648][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 515.062664][ T54] kobject_add_internal+0x2c8/0x990 [ 515.062693][ T54] kobject_add+0x16f/0x240 [ 515.062712][ T54] ? __pfx_kobject_add+0x10/0x10 [ 515.062732][ T54] ? class_to_subsys+0x3e/0x160 [ 515.062756][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 515.062774][ T54] ? kobject_put+0xab/0x5a0 [ 515.062799][ T54] device_add+0x289/0x1a70 [ 515.062819][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 515.062840][ T54] ? __pfx_device_add+0x10/0x10 [ 515.062860][ T54] ? mgmt_send_event_skb+0x2f2/0x460 [ 515.062888][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 515.062911][ T54] le_conn_complete_evt+0x107f/0x1da0 [ 515.062936][ T54] ? __pfx_lock_release+0x10/0x10 [ 515.062957][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 515.062978][ T54] ? __mutex_lock+0x1cc/0xb10 [ 515.063004][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 515.063034][ T54] hci_le_meta_evt+0x2e2/0x5d0 [ 515.063055][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 515.063079][ T54] hci_event_packet+0x666/0x1180 [ 515.063101][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 515.063125][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 515.063146][ T54] ? mark_held_locks+0x9f/0xe0 [ 515.063170][ T54] ? kcov_remote_start+0x3cf/0x6e0 [ 515.063195][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 515.063219][ T54] hci_rx_work+0x2c5/0x16b0 [ 515.063240][ T54] ? process_one_work+0x921/0x1ba0 [ 515.063264][ T54] process_one_work+0x9c5/0x1ba0 [ 515.063291][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 515.063311][ T54] ? __pfx_process_one_work+0x10/0x10 [ 515.063336][ T54] ? assign_work+0x1a0/0x250 [ 515.063357][ T54] worker_thread+0x6c8/0xf00 [ 515.063385][ T54] ? __pfx_worker_thread+0x10/0x10 [ 515.063405][ T54] kthread+0x3af/0x750 [ 515.063423][ T54] ? __pfx_kthread+0x10/0x10 [ 515.063440][ T54] ? lock_acquire+0x2f/0xb0 [ 515.063462][ T54] ? __pfx_kthread+0x10/0x10 [ 515.063480][ T54] ret_from_fork+0x45/0x80 [ 515.063499][ T54] ? __pfx_kthread+0x10/0x10 [ 515.063516][ T54] ret_from_fork_asm+0x1a/0x30 [ 515.063543][ T54] [ 515.063563][ T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 515.156495][T12841] bpf: Bad value for 'gid' [ 515.162865][ T54] Bluetooth: hci2: failed to register connection device [ 515.547322][T12849] ptrace attach of "./syz-executor exec"[9673] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 517.174604][T12858] bpf: Bad value for 'gid' [ 517.187574][T12856] overlayfs: failed to clone upperpath [ 517.265753][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.271804][T12863] bpf: Bad value for 'gid' [ 517.599408][ T5881] net_ratelimit: 21 callbacks suppressed [ 517.599425][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.688303][T12879] overlayfs: failed to clone upperpath [ 518.739727][T12880] bpf: Bad value for 'gid' [ 519.336647][T12878] siw: device registration error -23 [ 519.354566][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.362934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.373316][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.489557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.497973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.506284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.360618][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.368996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.509054][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.314824][T12903] bpf: Bad value for 'gid' [ 522.517502][T12905] bpf: Bad value for 'gid' [ 522.579477][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 522.722838][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 180 seconds [ 523.053621][T12911] overlayfs: failed to clone upperpath [ 523.070780][T12912] bpf: Bad value for 'gid' [ 523.476696][ T52] net_ratelimit: 1 callbacks suppressed [ 523.476714][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.515819][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.531334][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 523.657931][ T9] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 523.667201][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.678843][ T9] usb 7-1: config 0 descriptor?? [ 523.778017][T12917] bpf: Bad value for 'gid' [ 523.869510][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 524.129410][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 524.309736][ T9] Bluetooth: Can't get state to change to load configuration err [ 524.317515][ T9] Bluetooth: Loading sysconfig file failed [ 525.226228][T12925] bpf: Bad value for 'gid' [ 525.270450][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.285354][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.293651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.305364][ T9] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 525.357510][ T9] usb 7-1: USB disconnect, device number 4 [ 525.408735][T12929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.418608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.445901][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 525.456684][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 525.466071][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 525.649463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.693041][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.701344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.067381][T12938] siw: device registration error -23 [ 527.127250][T12942] overlayfs: missing 'lowerdir' [ 529.822095][ T5881] net_ratelimit: 2 callbacks suppressed [ 529.822114][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.049491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.207525][ T29] audit: type=1400 audit(1740104498.570:568): avc: denied { mounton } for pid=12966 comm="syz.2.2069" path="/423/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 530.246014][ T29] audit: type=1800 audit(1740104498.640:569): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2069" name="/" dev="9p" ino=2 res=0 errno=0 [ 530.359907][T12975] bpf: Bad value for 'gid' [ 531.203554][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.211896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.230782][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.448323][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 532.701248][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.713623][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 532.740027][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.748410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.027185][T12984] overlayfs: failed to clone upperpath [ 533.723093][T12999] bpf: Bad value for 'gid' [ 533.915788][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.969429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.686507][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 534.973162][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.386504][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.394870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.542847][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.736607][T13037] siw: device registration error -23 [ 537.169450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.177778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.445867][T13050] bpf: Bad value for 'gid' [ 537.927345][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.673984][T13063] siw: device registration error -23 [ 539.162948][ T3558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.171162][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.179337][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.365207][T13067] bridge0: port 1(syz_tun) entered disabled state [ 539.422767][T13067] syz_tun (unregistering): left allmulticast mode [ 539.449599][T13067] syz_tun (unregistering): left promiscuous mode [ 539.464047][T13067] bridge0: port 1(syz_tun) entered disabled state [ 539.574518][T13080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.806014][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 539.915005][T13083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.931710][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 539.985558][ T11] wlan1: authenticated [ 540.033608][ T11] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 540.084853][ T11] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 540.093855][ T11] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 540.102401][ T11] wlan1: association with 08:02:11:00:00:00 timed out [ 540.305298][ T5920] net_ratelimit: 605 callbacks suppressed [ 540.305318][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.338813][ T29] audit: type=1800 audit(1740104508.730:570): pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2098" name="/" dev="fuse" ino=0 res=0 errno=0 [ 540.409081][T13088] overlayfs: failed to clone upperpath [ 540.609435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.617733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.342722][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.354341][T13095] dccp_close: ABORT with 44 bytes unread [ 542.078810][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.087156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.422979][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.835887][T13114] bpf: Bad value for 'gid' [ 543.097796][T13116] overlayfs: failed to clone upperpath [ 543.623634][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.729901][T13117] kvm: pic: non byte read [ 543.747184][T13117] kvm: pic: non byte read [ 543.757737][T13117] kvm: pic: non byte read [ 543.762866][T13117] kvm: pic: single mode not supported [ 543.762925][T13117] kvm: pic: non byte read [ 543.773355][T13117] kvm: pic: non byte read [ 543.777843][T13117] kvm: pic: non byte read [ 543.794966][T13117] kvm: pic: non byte read [ 543.801807][T13117] kvm: pic: single mode not supported [ 543.801868][T13117] kvm: pic: non byte read [ 544.049446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.309562][T13140] net_ratelimit: 360 callbacks suppressed [ 545.309585][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.324367][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.332852][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.341926][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.350424][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.358800][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.367451][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.375982][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.384390][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.392819][T13140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.405709][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.491357][T13156] bpf: Bad value for 'gid' [ 547.508491][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.519518][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.634024][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.644663][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 547.657711][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.889340][T13153] lo speed is unknown, defaulting to 1000 [ 548.468517][T13168] overlayfs: failed to clone upperpath [ 548.483747][T13169] bpf: Bad value for 'gid' [ 548.578932][T13170] bpf: Bad value for 'gid' [ 549.424093][T13153] chnl_net:caif_netlink_parms(): no params data found [ 549.692326][T13195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13195 comm=syz.3.2130 [ 549.731005][ T54] Bluetooth: hci5: command tx timeout [ 549.779391][T13196] bpf: Bad value for 'gid' [ 550.287583][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.310948][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.249421][ T29] audit: type=1400 audit(1740104519.040:571): avc: denied { read write } for pid=13197 comm="syz.1.2131" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 551.274962][ T5881] net_ratelimit: 394 callbacks suppressed [ 551.274978][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.292576][ T29] audit: type=1400 audit(1740104519.040:572): avc: denied { open } for pid=13197 comm="syz.1.2131" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 551.299628][T13153] bridge_slave_0: entered allmulticast mode [ 551.883097][ T54] Bluetooth: hci5: command tx timeout [ 551.950296][T13153] bridge_slave_0: entered promiscuous mode [ 551.963713][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.971282][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.978521][T13153] bridge_slave_1: entered allmulticast mode [ 552.001031][T13153] bridge_slave_1: entered promiscuous mode [ 552.312619][T13216] overlayfs: failed to resolve './file0': -2 [ 552.342300][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.469966][T13215] bpf: Bad value for 'gid' [ 552.504736][T13219] bpf: Bad value for 'gid' [ 552.620077][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.769420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.777804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.788060][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.033664][T13225] overlayfs: failed to clone upperpath [ 553.076507][T13225] bpf: Bad value for 'gid' [ 553.339590][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 210 seconds [ 553.703672][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.712030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.797397][T13153] team0: Port device team_slave_0 added [ 553.919430][ T54] Bluetooth: hci5: command tx timeout [ 553.943435][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.955638][ T29] audit: type=1400 audit(1740104522.350:573): avc: denied { write } for pid=13228 comm="syz.1.2138" name="net" dev="proc" ino=40121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 554.044267][T13153] team0: Port device team_slave_1 added [ 554.050994][ T29] audit: type=1400 audit(1740104522.390:574): avc: denied { add_name } for pid=13228 comm="syz.1.2138" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 554.177893][ T29] audit: type=1400 audit(1740104522.390:575): avc: denied { create } for pid=13228 comm="syz.1.2138" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 554.217001][ T29] audit: type=1400 audit(1740104522.390:576): avc: denied { associate } for pid=13228 comm="syz.1.2138" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 554.294747][T13240] ptrace attach of "./syz-executor exec"[5816] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 554.324122][ T29] audit: type=1400 audit(1740104522.390:577): avc: denied { write } for pid=13228 comm="syz.1.2138" name="pfkey" dev="proc" ino=4026533295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 554.561468][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.629407][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.657025][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.670299][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.677257][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.707723][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.750538][T13153] hsr_slave_0: entered promiscuous mode [ 554.757276][T13153] hsr_slave_1: entered promiscuous mode [ 554.763795][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.777986][T13153] Cannot create hsr debugfs directory [ 555.329647][T13248] ptrace attach of "./syz-executor exec"[10249] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 555.845646][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.944913][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.953375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.971015][ T54] Bluetooth: hci5: command tx timeout [ 556.604757][T13252] bond0: (slave batadv0): Releasing backup interface [ 556.633128][T13252] bond0: (slave bond_slave_0): Releasing backup interface [ 556.644658][T13252] bond0: (slave bond_slave_1): Releasing backup interface [ 556.666881][T13252] team0: Port device team_slave_0 removed [ 556.680642][T13252] team0: Port device team_slave_1 removed [ 556.687211][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.700184][T13252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.711403][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.718847][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.732175][T13252] bond1: (slave gretap1): Releasing active interface [ 556.738663][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 556.750117][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.822993][T13252] bond2: (slave gretap2): Releasing active interface [ 556.823926][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.942055][T13260] team0: entered promiscuous mode [ 556.948473][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.984556][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.107039][T13267] overlayfs: failed to resolve './file0': -2 [ 557.126415][T13267] bpf: Bad value for 'gid' [ 557.329646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.337990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.346241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.410230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.536599][T13153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 557.717778][T13153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 557.739600][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.752042][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.958720][T13153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 558.010535][T13153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 558.062105][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.218925][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.266619][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.294454][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.302202][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.355241][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.362493][ T6809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.512548][ T5881] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 559.254328][ T5920] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 559.279810][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 559.336983][ T5881] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.422006][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 559.460142][ T5881] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 559.489115][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.529893][ T5920] usb 3-1: device descriptor read/64, error -71 [ 559.550539][ T5881] usb 2-1: config 0 descriptor?? [ 559.658614][T13296] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 559.695310][T13296] netlink: 'syz.6.2156': attribute type 10 has an invalid length. [ 559.703458][T13296] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 559.721613][T13296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 559.741446][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.055949][T13304] ptrace attach of "./syz-executor exec"[5815] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 560.057451][ T5920] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 560.149427][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.437859][ T29] audit: type=1400 audit(1740104528.830:578): avc: denied { write } for pid=13301 comm="syz.6.2158" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 560.461181][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.559460][ T5920] usb 3-1: device descriptor read/64, error -71 [ 560.583353][T13153] veth0_vlan: entered promiscuous mode [ 560.600516][T13153] veth1_vlan: entered promiscuous mode [ 560.628686][T13153] veth0_macvtap: entered promiscuous mode [ 560.637953][T13153] veth1_macvtap: entered promiscuous mode [ 560.651086][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.662999][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.672979][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.679869][ T5920] usb usb3-port1: attempt power cycle [ 560.683650][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.717237][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.728577][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.746377][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.761267][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.780807][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.791002][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 560.797576][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.816544][ T5881] usb 2-1: USB disconnect, device number 44 [ 560.819397][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.835811][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.849093][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.864661][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.875103][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.909366][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.930631][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.946015][T13153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.955986][T13153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.971105][T13153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.983644][T13153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.657932][ T5920] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 561.889831][ T5920] usb 3-1: device not accepting address 45, error -71 [ 561.905337][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.913875][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.022276][T13325] overlayfs: failed to resolve './file0': -2 [ 562.078715][T13326] bpf: Bad value for 'gid' [ 562.540361][T13327] net_ratelimit: 8 callbacks suppressed [ 562.540379][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.556401][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.565904][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.589941][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.601496][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.651468][ T360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.727235][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.736349][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.744636][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.754286][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.762973][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.771719][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.780732][T13327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.903841][ T360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.407266][ T29] audit: type=1400 audit(1740104531.800:579): avc: denied { mounton } for pid=13153 comm="syz-executor" path="/root/syzkaller.F0kwAc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 563.767760][T13338] xt_nat: multiple ranges no longer supported [ 564.837997][T13351] bpf: Bad value for 'gid' [ 565.746428][T13358] ptrace attach of "./syz-executor exec"[5816] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 565.819872][ T971] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 566.179550][ T29] audit: type=1400 audit(1740104534.570:580): avc: denied { append } for pid=13361 comm="syz.7.2170" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 566.462230][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 566.483562][ T971] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 566.787198][T13369] bpf: Bad value for 'gid' [ 566.788367][T13370] overlayfs: failed to resolve './file0': -2 [ 566.804167][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.812398][ T971] usb 2-1: Product: syz [ 566.816637][ T971] usb 2-1: Manufacturer: syz [ 566.822837][T13370] bpf: Bad value for 'gid' [ 566.822889][ T971] usb 2-1: SerialNumber: syz [ 566.834259][ T971] usb 2-1: config 0 descriptor?? [ 566.844993][ T971] gspca_main: sq930x-2.14.0 probing 2770:930c [ 567.071371][ T971] gspca_sq930x: reg_r 001f failed -71 [ 567.078722][ T971] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 567.135659][ T971] usb 2-1: USB disconnect, device number 45 [ 567.334135][T13376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20541 sclass=netlink_route_socket pid=13376 comm=syz.7.2175 [ 567.347368][ T29] audit: type=1400 audit(1740104535.730:581): avc: denied { mount } for pid=13375 comm="syz.7.2175" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 567.397562][ T29] audit: type=1400 audit(1740104535.730:582): avc: denied { remount } for pid=13375 comm="syz.7.2175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 567.593961][ T29] audit: type=1400 audit(1740104535.780:583): avc: denied { unmount } for pid=13153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 568.319141][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2178'. [ 568.382318][ T971] net_ratelimit: 258 callbacks suppressed [ 568.382335][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.890609][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.120394][T13399] bpf: Bad value for 'gid' [ 570.219927][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.228257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.540728][T13407] ======================================================= [ 570.540728][T13407] WARNING: The mand mount option has been deprecated and [ 570.540728][T13407] and is ignored by this kernel. Remove the mand [ 570.540728][T13407] option from the mount to silence this warning. [ 570.540728][T13407] ======================================================= [ 570.576065][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.582308][T13407] new mount options do not match the existing superblock, will be ignored [ 570.631427][T13402] overlayfs: failed to resolve './file0': -2 [ 570.641382][T13402] bpf: Bad value for 'gid' [ 570.937011][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.278245][T13416] overlayfs: failed to resolve './file0': -2 [ 571.292644][T13416] bpf: Bad value for 'gid' [ 571.753996][T13427] bpf: Bad value for 'gid' [ 572.335399][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.397427][T13429] ptrace attach of "./syz-executor exec"[5816] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 574.020595][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.111682][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.869243][T13452] lo speed is unknown, defaulting to 1000 [ 575.970655][ T360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.978995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.006155][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.199318][T13465] overlayfs: failed to clone lowerpath [ 576.223453][ T29] audit: type=1400 audit(1740104544.590:584): avc: denied { mount } for pid=13455 comm="syz.3.2197" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 576.637725][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.646059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.463985][T13473] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 577.559628][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.933542][T13480] overlayfs: failed to resolve './file0': -2 [ 577.943078][T13480] bpf: Bad value for 'gid' [ 579.321862][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.309445][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.731180][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.739491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.013335][ T29] audit: type=1400 audit(1740104550.160:585): avc: denied { map } for pid=13502 comm="syz.6.2209" path="socket:[41254]" dev="sockfs" ino=41254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 582.142592][ T29] audit: type=1400 audit(1740104550.170:586): avc: denied { read } for pid=13502 comm="syz.6.2209" path="socket:[41254]" dev="sockfs" ino=41254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 582.249381][T13510] overlayfs: failed to resolve './file0': -2 [ 582.306448][T13511] bpf: Bad value for 'gid' [ 582.770938][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.779222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.809415][ T29] audit: type=1400 audit(1740104550.190:587): avc: denied { connect } for pid=13502 comm="syz.6.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 582.840150][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.412380][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2213'. [ 583.421839][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2213'. [ 583.650503][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 240 seconds [ 584.042945][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.633016][T13532] bpf: Bad value for 'gid' [ 585.128783][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.795205][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 586.238501][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.459450][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 587.044786][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.053502][ T9] usb 7-1: config 0 has no interface number 0 [ 587.077115][ T29] audit: type=1326 audit(1740104555.460:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13531 comm="syz.1.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bceb8d0a9 code=0x7fc00000 [ 587.078270][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 587.154759][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.180030][ T9] usb 7-1: Product: syz [ 587.196490][ T9] usb 7-1: Manufacturer: syz [ 587.312453][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.316849][ T9] usb 7-1: SerialNumber: syz [ 587.345077][ T9] usb 7-1: config 0 descriptor?? [ 587.540724][T13566] bpf: Bad value for 'gid' [ 587.687710][T13568] overlayfs: failed to resolve './file0': -2 [ 587.744459][T13569] bpf: Bad value for 'gid' [ 588.035374][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 588.140873][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.149178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.492253][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.593803][ T9] gspca_spca1528: reg_w err -110 [ 588.618811][ T9] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 588.770154][ T9] usb 7-1: USB disconnect, device number 5 [ 588.774764][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.784365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.682092][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.729816][ T29] audit: type=1400 audit(1740104558.120:589): avc: denied { mount } for pid=13589 comm="syz.6.2228" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 589.969459][ T29] audit: type=1400 audit(1740104558.360:590): avc: denied { unmount } for pid=10249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 590.329165][T13601] ptrace attach of "./syz-executor exec"[5816] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 591.328106][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.402978][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.506133][T13617] overlayfs: failed to resolve './file0': -2 [ 592.563560][T13618] bpf: Bad value for 'gid' [ 593.249677][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 593.450846][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.540149][T13625] overlayfs: failed to clone upperpath [ 593.890084][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.898409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.545601][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.786523][T13643] bpf: Bad value for 'gid' [ 595.262060][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.270375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.042429][T13655] bpf: Bad value for 'gid' [ 596.480978][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.594704][T13673] ptrace attach of "./syz-executor exec"[5829] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 598.144865][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.236167][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.105866][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.114270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.664564][T13694] random: crng reseeded on system resumption [ 599.869524][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.623172][T13699] team0: No ports can be present during mode change [ 600.634141][T13699] vlan0: entered promiscuous mode [ 600.644491][T13699] team0: Port device vlan0 added [ 600.944547][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.952842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.462057][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.776877][T13720] bpf: Bad value for 'gid' [ 602.191216][ T5193] udevd[5193]: worker [5839] /devices/virtual/block/nbd0 timeout; kill it [ 602.243434][ T5193] udevd[5193]: seq 15392 '/devices/virtual/block/nbd0' killed [ 602.532517][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.898330][T13735] ptrace attach of "./syz-executor exec"[10249] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 602.909459][ T5869] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 603.509413][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 603.515816][ T5869] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 603.525327][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.534472][ T5869] usb 2-1: config 0 descriptor?? [ 603.570553][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.712911][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.713545][T13741] vivid-000: disconnect [ 604.726590][ T29] audit: type=1400 audit(1740104573.110:591): avc: denied { write } for pid=13730 comm="syz.7.2268" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 604.868044][T13730] vivid-000: reconnect [ 605.195327][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 605.412693][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.421446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.822467][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 605.866188][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.869005][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 606.102250][ T5869] usb 2-1: USB disconnect, device number 46 [ 606.920250][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.928506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.077635][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.377515][T13766] bpf: Bad value for 'gid' [ 608.182527][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.251878][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.347594][T13786] ptrace attach of "./syz-executor exec"[5815] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 609.877163][T13789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13789 comm=syz.7.2284 [ 610.295456][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.342280][ T5920] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 610.572840][ T8253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.581195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.630374][ T29] audit: type=1400 audit(1740104579.030:592): avc: denied { setopt } for pid=13801 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 611.029353][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 611.083132][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.112581][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2289'. [ 611.116466][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.149495][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 611.159422][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2289'. [ 611.178917][ T5920] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 611.198546][ T29] audit: type=1804 audit(1740104579.590:593): pid=13805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2288" name="/newroot/466/file0" dev="fuse" ino=1 res=1 errno=0 [ 611.199165][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2289'. [ 611.230248][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.241301][ T5920] usb 7-1: config 0 descriptor?? [ 611.260044][ T5920] hub 7-1:0.0: USB hub found [ 611.448817][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.005145][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.106256][ T8258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.114663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.281659][ T5920] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 613.518996][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 613.581802][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 613.659842][ T5920] usb 7-1: USB disconnect, device number 6 [ 613.684619][T13830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.697468][T13830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.718766][ T29] audit: type=1326 audit(1740104582.100:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363618d0a9 code=0x7fc00000 [ 613.743247][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 270 seconds [ 613.744135][T13830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.381204][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.393037][ T29] audit: type=1326 audit(1740104582.790:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.7.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f363618d0a9 code=0x7fc00000 [ 614.458720][T13829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.472364][T13829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.512734][T13837] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2298'. [ 614.574812][T13837] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2298'. [ 614.576451][ T29] audit: type=1400 audit(1740104582.970:596): avc: denied { map } for pid=13836 comm="syz.7.2298" path="socket:[42419]" dev="sockfs" ino=42419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 615.213404][T13852] overlayfs: failed to resolve './file0': -2 [ 615.269969][T13853] bpf: Bad value for 'gid' [ 615.321222][ T29] audit: type=1400 audit(1740104583.700:597): avc: denied { connect } for pid=13849 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 615.583509][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.777850][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.786203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.615168][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.790381][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 617.129389][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 617.138841][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.164246][ T8] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 617.178652][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.198107][ T8] usb 8-1: Product: syz [ 617.206671][ T8] usb 8-1: Manufacturer: syz [ 617.216717][ T8] usb 8-1: SerialNumber: syz [ 617.231650][ T8] usb 8-1: config 0 descriptor?? [ 617.251875][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 617.267468][ T8] usb 8-1: selecting invalid altsetting 1 [ 617.467580][ T8] gspca_stk014: init reg: 0x00 [ 617.481464][ T8] stk014 8-1:0.0: probe with driver stk014 failed with error -5 [ 617.552839][T13880] bpf: Bad value for 'gid' [ 617.846507][ T29] audit: type=1400 audit(1740104586.200:598): avc: denied { bind } for pid=13864 comm="syz.7.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 618.429423][ T8] usb 8-1: USB disconnect, device number 2 [ 618.489345][ T29] audit: type=1400 audit(1740104586.300:599): avc: denied { create } for pid=13864 comm="syz.7.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 618.717723][ T29] audit: type=1400 audit(1740104587.110:600): avc: denied { append } for pid=13884 comm="syz.2.2311" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 618.869403][ T8256] net_ratelimit: 1 callbacks suppressed [ 618.869423][ T8256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.883410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.490155][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.697005][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.999036][T13920] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 621.090789][T13923] ptrace attach of "./syz-executor exec"[10249] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 621.730350][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.919552][T13921] bpf: Bad value for 'gid' [ 622.060026][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.068369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.147085][T13929] overlayfs: failed to clone upperpath [ 622.202848][T13930] bpf: Bad value for 'gid' [ 623.779440][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.989752][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.996167][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.610330][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.618665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.493160][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.561719][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.435230][T13979] ptrace attach of "./syz-executor exec"[10249] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 627.963158][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.062918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.082583][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.999627][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'. [ 629.234392][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.551984][T13993] input: syz1 as /devices/virtual/input/input44 [ 629.899757][T13996] overlayfs: failed to clone upperpath [ 630.369783][ T8253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.378054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.386176][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.542315][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.202901][T13995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.261354][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.271066][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.280189][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.316905][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.325821][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.340914][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.250966][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 635.126085][T14034] ptrace attach of "./syz-executor exec"[13153] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 635.690767][ T52] net_ratelimit: 249 callbacks suppressed [ 635.690786][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.777325][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.787411][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.795673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.229459][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.421603][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.235716][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.244596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.672121][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.168038][T14092] tipc: Started in network mode [ 641.173397][T14092] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 641.182434][T14092] tipc: Enabled bearer , priority 10 [ 641.200278][T14091] overlayfs: failed to clone upperpath [ 642.069972][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.529890][ T8253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.538177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.084659][ T5918] tipc: Node number set to 10463914 [ 643.106493][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.195321][ T29] audit: type=1400 audit(1740104612.070:601): avc: denied { bind } for pid=14106 comm="syz.3.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 644.195641][ T5900] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 644.245050][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.254675][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 300 seconds [ 644.619334][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 644.662648][ T5900] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 644.694804][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.698573][ T29] audit: type=1400 audit(1740104613.090:602): avc: denied { ioctl } for pid=14116 comm="syz.1.2372" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae9f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 644.720978][ T5900] usb 3-1: Product: syz [ 644.885419][ T5900] usb 3-1: Manufacturer: syz [ 644.954921][T14121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.443514][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.473596][ T5900] usb 3-1: SerialNumber: syz [ 645.762373][ T8253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.770700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.782297][ T5900] usb 3-1: config 0 descriptor?? [ 645.807876][ T5900] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 646.872220][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.880444][ T5900] gp8psk: usb in 128 operation failed. [ 647.889704][T14141] overlayfs: failed to clone upperpath [ 647.910398][T14141] bpf: Bad value for 'gid' [ 647.958010][ T5900] gp8psk: usb in 137 operation failed. [ 647.976983][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.979297][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.867376][T14149] x_tables: duplicate underflow at hook 2 [ 649.028762][ T5900] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 649.073201][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.082404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.099909][ T5900] usb 3-1: media controller created [ 649.219883][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.030114][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.049117][ T5900] gp8psk_fe: Frontend revision 1 attached [ 650.207288][ T5900] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 650.216767][ T5900] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 650.247268][ T5900] gp8psk: usb in 138 operation failed. [ 650.259320][ T5900] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 650.368038][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.794416][ T5900] gp8psk: found Genpix USB device pID = 201 (hex) [ 650.810237][ T5900] usb 3-1: USB disconnect, device number 47 [ 650.881273][T14163] syz.1.2382 uses old SIOCAX25GETINFO [ 651.500951][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.509288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.535113][ T5900] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 651.595190][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.773922][T14173] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 652.401694][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 652.839952][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.889609][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.898211][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.906793][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.917869][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.949426][T14193] openvswitch: netlink: IP tunnel dst address not specified [ 655.948212][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.959272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.979013][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.327411][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2391'. [ 656.769382][ T5921] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 657.008317][ T54] Bluetooth: hci1: Malformed LE Event: 0x0d [ 657.015210][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.251013][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.900738][ T8253] net_ratelimit: 2 callbacks suppressed [ 659.900754][ T8253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.915121][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.953559][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.962038][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.029955][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.223586][T14246] bpf: Bad value for 'gid' [ 661.975764][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2406'. [ 662.256498][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.265092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.060915][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.094311][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.104107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.143063][ T29] audit: type=1400 audit(1740104631.510:603): avc: denied { create } for pid=14241 comm="syz.7.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 663.203499][ T29] audit: type=1400 audit(1740104631.520:604): avc: denied { connect } for pid=14241 comm="syz.7.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 663.526008][T14260] siw: device registration error -23 [ 664.797130][T14265] syz.1.2411: attempt to access beyond end of device [ 664.797130][T14265] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 664.804400][T14266] bpf: Bad value for 'gid' [ 664.810789][T14265] SQUASHFS error: Failed to read block 0x0: -5 [ 664.821454][T14265] unable to read squashfs_super_block [ 664.823339][T14196] bridge0: port 1(syz_tun) entered disabled state [ 664.845834][T14196] syz_tun (unregistering): left allmulticast mode [ 664.852489][T14196] syz_tun (unregistering): left promiscuous mode [ 664.859454][T14196] bridge0: port 1(syz_tun) entered disabled state [ 664.929480][ C1] net_ratelimit: 1 callbacks suppressed [ 664.929497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.277403][T14279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.286003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.651454][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.666644][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.675875][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.684572][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.123427][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 666.523270][T14294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2418'. [ 667.253980][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.289099][T14290] overlayfs: failed to decode file handle (len=6, type=32555, flags=0, err=-22) [ 668.356987][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.767636][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.777413][ T3486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.793502][T14313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.802418][T14313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.812250][T14313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.828679][T14313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.970771][T14313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.936764][T14302] lo speed is unknown, defaulting to 1000 [ 670.613291][T14308] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 670.640235][T14308] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 670.732455][T14322] bpf: Bad value for 'gid' [ 670.935285][ T5921] net_ratelimit: 4 callbacks suppressed [ 670.935304][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.059431][T14313] Bluetooth: hci2: command tx timeout [ 671.330303][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.338934][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.377289][T14302] chnl_net:caif_netlink_parms(): no params data found [ 671.420064][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.521101][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.528228][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.549698][T14302] bridge_slave_0: entered allmulticast mode [ 671.557268][T14302] bridge_slave_0: entered promiscuous mode [ 671.572792][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.595447][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.603658][T14302] bridge_slave_1: entered allmulticast mode [ 671.611756][T14302] bridge_slave_1: entered promiscuous mode [ 671.651995][T14302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.663993][T14302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.704874][T14302] team0: Port device team_slave_0 added [ 671.720551][T14302] team0: Port device team_slave_1 added [ 671.762607][T14302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.769919][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.795943][T14302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.810266][T14302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.817244][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.843623][T14302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.929693][T14302] hsr_slave_0: entered promiscuous mode [ 671.936057][T14302] hsr_slave_1: entered promiscuous mode [ 671.945555][T14302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.953519][T14302] Cannot create hsr debugfs directory [ 672.060677][T14302] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.130793][T14313] Bluetooth: hci5: command 0x0406 tx timeout [ 672.146922][T14302] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.222635][T14302] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.285772][T14302] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.389069][T14302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 672.397546][T14302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 672.407616][T14302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 672.416522][T14302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 672.449891][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.478002][T14302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.496021][T14302] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.506161][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.513252][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.529189][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.536289][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.655282][T14302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.778220][T14302] veth0_vlan: entered promiscuous mode [ 672.788373][T14302] veth1_vlan: entered promiscuous mode [ 672.807525][T14302] veth0_macvtap: entered promiscuous mode [ 672.815655][T14302] veth1_macvtap: entered promiscuous mode [ 672.828082][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.839571][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.849858][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.860412][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.871795][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.882510][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.892380][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.902878][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.913618][T14302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.925752][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.936862][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.947346][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.957883][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.967842][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.978531][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.988501][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.999356][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.009192][T14302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.021037][T14302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.033101][T14302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.045924][T14302] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.062279][T14302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.072853][T14302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.082184][T14302] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.091540][ T54] Bluetooth: hci2: command tx timeout [ 673.244525][T14347] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 673.267549][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.305822][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.207774][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.216308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.297498][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.482064][ T6809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.552593][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.747914][ T6809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.915133][ T43] block nbd0: Possible stuck request ffff8880263ee000: control (read@0,4096B). Runtime 330 seconds [ 675.170106][ T54] Bluetooth: hci2: command tx timeout [ 675.335530][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.789847][T14374] vlan0: entered promiscuous mode [ 675.957515][T14374] team0: Port device vlan0 added [ 676.597483][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.904906][T14385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.417487][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.432349][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.441055][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.291753][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.304788][ T5920] IPVS: starting estimator thread 0... [ 679.539504][T14404] IPVS: using max 39 ests per chain, 93600 per kthread [ 679.649770][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.658061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.951381][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.971155][ T8258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.979763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.095863][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.202307][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 680.215270][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 680.239549][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 680.250029][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 680.264012][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 680.265054][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.288319][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 680.337615][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.352850][T14409] lo speed is unknown, defaulting to 1000 [ 680.378731][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.482428][ T11] bridge_slave_1: left allmulticast mode [ 680.488098][ T11] bridge_slave_1: left promiscuous mode [ 680.496851][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.517007][ T11] bridge_slave_0: left allmulticast mode [ 680.522916][ T11] bridge_slave_0: left promiscuous mode [ 680.528558][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.871731][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.884422][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.895102][ T11] bond0 (unregistering): Released all slaves [ 681.090807][T14409] chnl_net:caif_netlink_parms(): no params data found [ 681.311130][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.318267][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.326530][T14409] bridge_slave_0: entered allmulticast mode [ 681.335758][T14409] bridge_slave_0: entered promiscuous mode [ 681.354670][ T11] hsr_slave_0: left promiscuous mode [ 681.364933][ T11] hsr_slave_1: left promiscuous mode [ 681.375283][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.384538][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.392697][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.400180][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.419920][ T11] veth1_macvtap: left promiscuous mode [ 681.426106][ T11] veth0_macvtap: left promiscuous mode [ 681.431900][ T11] veth1_vlan: left promiscuous mode [ 681.438813][ T11] veth0_vlan: left promiscuous mode [ 681.874430][ T11] team0 (unregistering): Port device team_slave_1 removed [ 681.924312][ T11] team0 (unregistering): Port device team_slave_0 removed [ 682.345706][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.353668][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.360947][T14409] bridge_slave_1: entered allmulticast mode [ 682.367346][T14409] bridge_slave_1: entered promiscuous mode [ 682.371038][ T54] Bluetooth: hci2: command tx timeout [ 682.435033][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.448276][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.458221][ T971] net_ratelimit: 1 callbacks suppressed [ 682.458233][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.516962][T14409] team0: Port device team_slave_0 added [ 682.525709][T14409] team0: Port device team_slave_1 added [ 682.563792][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.571417][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.599788][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.612659][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.623162][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.649976][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.688950][T14409] hsr_slave_0: entered promiscuous mode [ 682.695517][T14409] hsr_slave_1: entered promiscuous mode [ 682.702280][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.710240][T14409] Cannot create hsr debugfs directory [ 683.163026][T14409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.175494][T14409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.185048][T14409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.195198][T14409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.281465][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.322493][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.346179][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.353335][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.366705][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.373788][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.434024][T14409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.496447][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.578722][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.738975][T14409] veth0_vlan: entered promiscuous mode [ 683.756808][T14409] veth1_vlan: entered promiscuous mode [ 683.787924][T14409] veth0_macvtap: entered promiscuous mode [ 683.805130][T14409] veth1_macvtap: entered promiscuous mode [ 683.824534][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.844325][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.866786][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.878249][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.893389][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.907456][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.917687][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.928526][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.941728][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.955308][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.976739][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.988897][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.006454][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.017466][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.034790][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.045818][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.057615][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.067654][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.078137][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.089757][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.099412][T14409] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.108098][T14409] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.117170][T14409] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.126852][T14409] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.190769][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.198640][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.223215][ T6809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.231364][ T6809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.532241][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.690211][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.698459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.411167][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.418170][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.424934][ T6809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.433239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.575321][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.930763][ T8253] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.127210][T14313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.143467][T14313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.152721][T14313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.163188][T14313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.173628][T14313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 686.181747][T14313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.221231][T14497] lo speed is unknown, defaulting to 1000 [ 686.333150][T14497] chnl_net:caif_netlink_parms(): no params data found [ 686.367836][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.375507][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.383659][T14497] bridge_slave_0: entered allmulticast mode [ 686.391557][T14497] bridge_slave_0: entered promiscuous mode [ 686.398393][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.405827][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.413313][T14497] bridge_slave_1: entered allmulticast mode [ 686.420149][T14497] bridge_slave_1: entered promiscuous mode [ 686.439430][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.451725][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.475307][T14497] team0: Port device team_slave_0 added [ 686.484345][T14497] team0: Port device team_slave_1 added [ 686.502366][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.509512][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.536725][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.551778][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.558740][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.585171][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.616375][T14497] hsr_slave_0: entered promiscuous mode [ 686.620326][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.622610][T14497] hsr_slave_1: entered promiscuous mode [ 686.636698][T14497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.644597][T14497] Cannot create hsr debugfs directory [ 686.701252][ T30] INFO: task syz.5.2067:12972 blocked for more than 143 seconds. [ 686.709029][ T30] Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 686.716816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 686.725819][ T30] task:syz.5.2067 state:D stack:28176 pid:12972 tgid:12969 ppid:9673 task_flags:0x400140 flags:0x00004004 [ 686.738056][ T30] Call Trace: [ 686.741436][ T30] [ 686.744363][ T30] __schedule+0xf43/0x5890 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 686.749476][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 686.765194][ T30] ? __pfx___schedule+0x10/0x10 [ 686.780270][ T30] ? schedule+0x298/0x350 [ 686.784650][ T30] ? __pfx_lock_release+0x10/0x10 [ 686.836910][ T30] ? __mutex_trylock_common+0x78/0x250 [ 686.855244][ T30] ? lock_acquire+0x2f/0xb0 [ 686.879267][ T30] ? schedule+0x1fd/0x350 [ 686.883653][ T30] schedule+0xe7/0x350 [ 686.887726][ T30] schedule_preempt_disabled+0x13/0x30 [ 686.913804][ T30] __mutex_lock+0x6bd/0xb10 [ 686.918386][ T30] ? sync_bdevs+0xfd/0x360 [ 686.923170][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 686.928213][ T30] ? sync_bdevs+0xc7/0x360 [ 686.936671][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 686.943373][ T30] ? iput+0xd3/0x890 [ 686.947292][ T30] ? sync_bdevs+0xfd/0x360 [ 686.959595][ T30] sync_bdevs+0xfd/0x360 [ 686.963893][ T30] ksys_sync+0xb3/0x150 [ 686.968063][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 686.978916][ T30] ? rcu_is_watching+0x12/0xc0 [ 686.983903][ T30] ? do_syscall_64+0x91/0x250 [ 686.988574][ T30] __do_sys_sync+0xe/0x20 [ 686.993071][ T30] do_syscall_64+0xcd/0x250 [ 686.997581][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.003699][ T30] RIP: 0033:0x7ff123d8d0a9 [ 687.008132][ T30] RSP: 002b:00007ff124b4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 687.018176][ T30] RAX: ffffffffffffffda RBX: 00007ff123fa5fa0 RCX: 00007ff123d8d0a9 [ 687.026332][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.034452][ T30] RBP: 00007ff123fa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 687.042566][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.050675][ T30] R13: 0000000000000000 R14: 00007ff123fa5fa0 R15: 00007ffd78437008 [ 687.059094][ T30] [ 687.068190][ T30] [ 687.068190][ T30] Showing all locks held in the system: [ 687.105659][ T30] 1 lock held by pool_workqueue_/3: [ 687.129719][ T30] 2 locks held by kworker/u8:0/11: [ 687.134868][ T30] 1 lock held by khungtaskd/30: [ 687.159318][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 687.189341][ T30] 2 locks held by getty/5581: [ 687.194052][ T30] #0: ffff888036e820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 687.239342][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 687.269270][ T30] 1 lock held by syz-executor/5815: [ 687.274519][ T30] #0: ffffffff8fef6b68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 687.299680][ T30] 1 lock held by udevd/5839: [ 687.304314][ T30] #0: ffff8880262da4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 687.329418][ T30] 3 locks held by kworker/0:4/5869: [ 687.335273][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.369447][ T30] #1: ffffc9000426fd18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.383624][ T30] #2: ffff888072250240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x26d0 [ 687.393925][ T30] 5 locks held by kworker/u8:14/8253: [ 687.400851][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.412993][ T30] #1: ffffc90004fefd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.423010][ T30] #2: ffffffff8fee0ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 687.432386][ T30] #3: ffff8880514150e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 687.442493][ T30] #4: ffff888072252250 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 687.453472][ T30] 4 locks held by kworker/u8:16/8258: [ 687.458827][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 687.470474][ T30] #1: ffffc90004f27d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 687.481494][ T30] #2: ffffffff8fef6b68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 687.490949][ T30] #3: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 687.501001][ T30] 1 lock held by syz.5.2067/12972: [ 687.506104][ T30] #0: ffff8880262da4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 687.515598][ T30] 3 locks held by syz-executor/13153: [ 687.521036][ T30] #0: ffff88805aa50d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 687.530818][ T30] #1: ffff88805aa50078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 687.540594][ T30] #2: ffff888058979338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7f/0x730 [ 687.549978][ T30] 5 locks held by syz-executor/14497: [ 687.555339][ T30] #0: ffff8880302a4420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 687.564407][ T30] #1: ffff8880611e0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 687.574877][ T30] #2: ffff88801f30ef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 687.585064][ T30] #3: ffffffff8f4a17a8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 687.595547][ T30] #4: ffff8880514150e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa1/0x9f0 [ 687.613963][ T30] [ 687.616339][ T30] ============================================= [ 687.616339][ T30] [ 687.625194][ T30] NMI backtrace for cpu 1 [ 687.625205][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 687.625222][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 687.625230][ T30] Call Trace: [ 687.625235][ T30] [ 687.625241][ T30] dump_stack_lvl+0x116/0x1f0 [ 687.625263][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 687.625287][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 687.625308][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 687.625332][ T30] watchdog+0xf62/0x12b0 [ 687.625359][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.625380][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.625398][ T30] ? __kthread_parkme+0x148/0x220 [ 687.625413][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.625436][ T30] kthread+0x3af/0x750 [ 687.625454][ T30] ? __pfx_kthread+0x10/0x10 [ 687.625475][ T30] ? __pfx_kthread+0x10/0x10 [ 687.625493][ T30] ret_from_fork+0x45/0x80 [ 687.625512][ T30] ? __pfx_kthread+0x10/0x10 [ 687.625530][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.625556][ T30] [ 687.625561][ T30] Sending NMI from CPU 1 to CPUs 0: [ 687.739448][ C0] NMI backtrace for cpu 0 [ 687.739460][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 687.739476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 687.739484][ C0] RIP: 0010:cpuidle_reflect+0x6/0xa0 [ 687.739504][ C0] Code: eb ae 4c 89 ef 89 04 24 e8 27 a2 be f9 8b 04 24 eb c7 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 <55> 48 89 fd 53 89 f3 e8 de 85 5b f9 48 c7 c0 00 b8 c0 9a 48 ba 00 [ 687.739517][ C0] RSP: 0018:ffffffff8de07e20 EFLAGS: 00000282 [ 687.739529][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffff11028d58201 [ 687.739537][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888146ac1000 [ 687.739546][ C0] RBP: fffffbfff1bd2ee8 R08: 0000000000000002 R09: 0000000000000001 [ 687.739554][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 687.739561][ C0] R13: ffffffff8de97740 R14: ffffffff90625010 R15: ffff888146ac1000 [ 687.739571][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 687.739585][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.739593][ C0] CR2: 00007ff3798d7d60 CR3: 000000000df80000 CR4: 00000000003526f0 [ 687.739602][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 687.739610][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 687.739619][ C0] Call Trace: [ 687.739623][ C0] [ 687.739628][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 687.739649][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 687.739666][ C0] ? nmi_handle+0x1ac/0x5d0 [ 687.739685][ C0] ? cpuidle_reflect+0x6/0xa0 [ 687.739699][ C0] ? default_do_nmi+0x6a/0x160 [ 687.739718][ C0] ? exc_nmi+0x170/0x1e0 [ 687.739734][ C0] ? end_repeat_nmi+0xf/0x53 [ 687.739756][ C0] ? cpuidle_reflect+0x6/0xa0 [ 687.739770][ C0] ? cpuidle_reflect+0x6/0xa0 [ 687.739784][ C0] ? cpuidle_reflect+0x6/0xa0 [ 687.739798][ C0] [ 687.739802][ C0] [ 687.739807][ C0] do_idle+0x31a/0x3f0 [ 687.739824][ C0] ? __pfx_do_idle+0x10/0x10 [ 687.739856][ C0] cpu_startup_entry+0x4f/0x60 [ 687.739872][ C0] rest_init+0x16b/0x2b0 [ 687.739889][ C0] ? acpi_subsystem_init+0x133/0x180 [ 687.739905][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 687.739925][ C0] start_kernel+0x3e9/0x4d0 [ 687.739943][ C0] x86_64_start_reservations+0x18/0x30 [ 687.739961][ C0] x86_64_start_kernel+0xb2/0xc0 [ 687.739979][ C0] common_startup_64+0x13e/0x148 [ 687.740004][ C0] [ 687.745484][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.769404][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 687.769421][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 687.769440][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 687.769450][ T30] Call Trace: [ 687.769456][ T30] [ 687.769463][ T30] dump_stack_lvl+0x3d/0x1f0 [ 687.769487][ T30] panic+0x71d/0x800 [ 687.769506][ T30] ? __pfx_panic+0x10/0x10 [ 687.769522][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 687.769547][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 687.769568][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 687.769588][ T30] ? watchdog+0xdcc/0x12b0 [ 687.769611][ T30] ? watchdog+0xdbf/0x12b0 [ 687.769635][ T30] watchdog+0xddd/0x12b0 [ 687.769660][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.769681][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.769701][ T30] ? __kthread_parkme+0x148/0x220 [ 687.769718][ T30] ? __pfx_watchdog+0x10/0x10 [ 687.769741][ T30] kthread+0x3af/0x750 [ 687.769760][ T30] ? __pfx_kthread+0x10/0x10 [ 687.769782][ T30] ? __pfx_kthread+0x10/0x10 [ 687.769801][ T30] ret_from_fork+0x45/0x80 [ 687.769821][ T30] ? __pfx_kthread+0x10/0x10 [ 687.769839][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.769870][ T30] [ 687.770528][ T30] Kernel Offset: disabled