last executing test programs: 17.038386565s ago: executing program 4 (id=3905): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.917532012s ago: executing program 4 (id=3907): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 16.689919875s ago: executing program 4 (id=3909): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="030302000000040000000600000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 16.347922165s ago: executing program 4 (id=3910): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x40100) getsockname$l2tp6(r6, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x44, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x11, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x3, "91"}, @window={0x3, 0x3, 0xe}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0) 11.448809538s ago: executing program 3 (id=3930): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f000000}, 0x48) 11.105935008s ago: executing program 3 (id=3933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080015000000000008000e002ab50000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$VT_GETMODE(r4, 0x5601, 0x0) 10.338476702s ago: executing program 0 (id=3942): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x3a20, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.165913092s ago: executing program 0 (id=3944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockopt(r6, 0x7, 0xb60, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) close_range(r4, r4, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, 0x0, &(0x7f0000000300)) 7.491671927s ago: executing program 3 (id=3956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 7.010398945s ago: executing program 1 (id=3961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.495930614s ago: executing program 1 (id=3964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 6.383470031s ago: executing program 0 (id=3965): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{r0}, &(0x7f0000001580), &(0x7f00000015c0)='%-010d \x00'}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.04248154s ago: executing program 0 (id=3966): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) 4.771963884s ago: executing program 4 (id=3967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, 0x1fc, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080015000000000008000e002ab50000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$VT_GETMODE(r4, 0x5601, 0x0) 2.911193441s ago: executing program 2 (id=3968): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.809013947s ago: executing program 3 (id=3969): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.666589395s ago: executing program 2 (id=3970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x172c5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.639065207s ago: executing program 1 (id=3971): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 2.615731238s ago: executing program 0 (id=3972): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe41c752b4777e393, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.504891255s ago: executing program 1 (id=3973): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff090000"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x6d8, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x6b0, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0x26c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.322625625s ago: executing program 3 (id=3974): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20000091) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000094) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x7}, {0xffffffffffffffff, 0x2, 0x4}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x6, 0x0, 0xc8c, '\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x41, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000029004319473ee5db6c5d955207"], 0x1c}}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00005403cb0086dd6003136c00088700fc02000000e3a3cf99660bb622000001ffc800000000000000000000000000013b00040004082403"], 0x0) 2.270671808s ago: executing program 0 (id=3975): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockopt(r6, 0x7, 0xb60, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) close_range(r4, r4, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, 0x0, &(0x7f0000000300)) 2.171161794s ago: executing program 2 (id=3976): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f000000}, 0x48) 1.797846515s ago: executing program 2 (id=3977): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 595.578595ms ago: executing program 2 (id=3978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2037) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffd) readv(r3, &(0x7f0000001940)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000040)={0x8, {0x6, 0x10001, 0x1, 0x2}, {0x7, 0xcf, 0x9, 0x101}, {0xcc, 0x80000000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa00, 0x15, 0x40}, 0x18) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0xd, &(0x7f0000000000), 0x8) mknodat$loop(r7, &(0x7f0000000180)='./file0\x00', 0x200, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000440006803e0004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf02080000000c0002800800020001000100"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=ANY=[@ANYBLOB="3c00000010000104000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="ff000000220000001c0012800b000100797036746e6c00000c000280060012004e2100007835e86d7e767f6d0d18e4023b7d17b180023f843b2e1da05967aef96b274ebc3da8a983f85159ef3ef0400900b9d82643b3c8bf253953622097369e5069a0b94bf2760fe6707a6a6a0014c230"], 0x3c}}, 0x0) 496.026841ms ago: executing program 4 (id=3979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 272.286544ms ago: executing program 1 (id=3980): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 169.146269ms ago: executing program 2 (id=3981): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="03004003cf"], 0x18}, 0x1, 0x0, 0x0, 0x4048840}, 0x4000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="940910bc996c301c81070704", 0xc) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x8000000, 0x10000, 0x3, 0x4002004c2, 0x7fc, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 577.7µs ago: executing program 1 (id=3982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 0s ago: executing program 3 (id=3983): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): ] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.894210][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.399327][ T4311] bond3 (unregistering): Released all slaves [ 894.448382][ T4311] bond2 (unregistering): (slave veth3): Releasing active interface [ 894.658653][ T4311] bond2 (unregistering): Released all slaves [ 894.864072][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.895659][ T4311] bond1 (unregistering): Released all slaves [ 895.253669][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 895.951900][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.975788][ T8896] net_ratelimit: 1 callbacks suppressed [ 895.975807][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.015504][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.032943][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.057150][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.360578][ T4311] bond0 (unregistering): Released all slaves [ 896.488798][T16457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 896.501453][T16457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 896.573956][T16594] device veth3 entered promiscuous mode [ 896.591530][T13351] usb 2-1: USB disconnect, device number 43 [ 896.787249][T16457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 896.820132][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 896.855170][T16598] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.864185][T16598] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.872957][T16598] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.881736][T16598] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.977869][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 897.013872][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.143719][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.247099][T16623] device syzkaller0 entered promiscuous mode [ 897.740919][T16457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.817138][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 897.851307][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.902821][T16457] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.939786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.959292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 898.011881][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.019096][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.041678][T16633] device syzkaller0 entered promiscuous mode [ 898.064247][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.073961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 898.096874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 898.166384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.223888][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.231145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.254750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.263763][ T8896] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 898.277284][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 898.294635][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.374702][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 898.408053][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 898.457474][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 898.508236][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 898.553673][ T8896] usb 2-1: Using ep0 maxpacket: 16 [ 898.560691][ T8896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.565501][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 898.656330][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 898.681714][ T8896] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 898.682080][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 898.732325][ T8896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.748930][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 898.760914][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 898.784006][ T8896] usb 2-1: config 0 descriptor?? [ 898.835776][T16457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 898.853960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.093985][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.104582][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.216977][ T8896] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 899.522916][T16666] netlink: 'syz.2.3252': attribute type 12 has an invalid length. [ 899.611626][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 899.611642][ T27] audit: type=1326 audit(1769944003.922:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16667 comm="syz.4.3253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x0 [ 899.643893][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.679701][T16666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3252'. [ 899.726680][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.951843][ T8896] usb 2-1: USB disconnect, device number 44 [ 900.276830][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 900.289012][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 900.320480][T16457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.402796][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.421927][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.840366][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.867718][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.910156][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.936748][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.990807][T16690] device syzkaller0 entered promiscuous mode [ 901.012947][T16457] device veth0_vlan entered promiscuous mode [ 901.124943][T16457] device veth1_vlan entered promiscuous mode [ 901.163564][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 901.174226][T13351] net_ratelimit: 3 callbacks suppressed [ 901.174242][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.197968][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 901.245489][T16457] device veth0_macvtap entered promiscuous mode [ 901.271752][T16457] device veth1_macvtap entered promiscuous mode [ 901.330764][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.351960][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.405497][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.443204][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.484172][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.528269][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.579187][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.615828][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.640750][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.705801][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.722737][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.765052][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.825131][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.893265][T16457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.945921][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.967823][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.011166][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.058364][T15319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 902.109070][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.134006][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.170265][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.204986][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.215528][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.277110][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.311703][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.350133][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.396939][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.442523][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.478491][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.509654][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.555178][T16457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.579645][T16457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.592868][T16457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.614734][T16702] device syzkaller1 entered promiscuous mode [ 902.622157][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 902.638115][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 902.669208][T16457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.695375][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.721568][T16457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.759056][T16457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.769362][T16457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.853868][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.038038][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.071170][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.138814][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.184127][ T26] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 903.213200][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.222274][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.242897][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 903.257025][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.277507][T16716] device syzkaller0 entered promiscuous mode [ 903.383770][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 903.391145][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.414690][ T26] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 903.433459][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.451637][ T26] usb 2-1: config 0 descriptor?? [ 903.771492][T16733] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 903.873721][T16733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.959091][T16738] bond3: (slave ip6gretap1): making interface the new active one [ 903.967839][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.010205][T16738] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 904.048147][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 904.067325][ T26] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 904.131993][ T27] audit: type=1326 audit(1769944008.442:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.224606][T16733] device veth3 entered promiscuous mode [ 904.248213][T16733] bond3: (slave veth3): Enslaving as an active interface with a down link [ 904.251812][ T27] audit: type=1326 audit(1769944008.442:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.311438][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.327877][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.348608][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 904.372878][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.399121][ T27] audit: type=1326 audit(1769944008.442:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.424018][T16738] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 904.424030][ T27] audit: type=1326 audit(1769944008.442:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.443041][ T27] audit: type=1326 audit(1769944008.442:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.516312][ T27] audit: type=1326 audit(1769944008.472:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.561424][ T27] audit: type=1326 audit(1769944008.472:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.650393][ T27] audit: type=1326 audit(1769944008.472:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.747248][ T27] audit: type=1326 audit(1769944008.472:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.748344][ T4326] usb 2-1: USB disconnect, device number 45 [ 904.828035][T16750] device syzkaller1 entered promiscuous mode [ 904.852852][ T27] audit: type=1326 audit(1769944008.472:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.953944][ T27] audit: type=1326 audit(1769944008.472:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 904.988783][ T27] audit: type=1326 audit(1769944008.472:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 905.029967][ T27] audit: type=1326 audit(1769944008.502:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 905.061292][ T27] audit: type=1326 audit(1769944008.502:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 905.094292][T16755] netlink: 'syz.2.3277': attribute type 1 has an invalid length. [ 905.115926][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.141815][ T27] audit: type=1326 audit(1769944008.502:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 905.267131][T16755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 905.317049][ T27] audit: type=1326 audit(1769944008.502:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 905.440915][ T27] audit: type=1326 audit(1769944008.502:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.0.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc71879aeb9 code=0x7ffc0000 [ 906.244937][ T4460] net_ratelimit: 2 callbacks suppressed [ 906.244950][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.379466][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.787828][T16759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 906.805792][T16759] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 906.836303][T16759] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 906.958921][T16798] xt_hashlimit: size too large, truncated to 1048576 [ 907.074130][T16764] device wlan0 entered promiscuous mode [ 907.111535][T16764] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 907.161218][T16786] device syzkaller0 entered promiscuous mode [ 907.449799][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.524220][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.700905][T16805] device syzkaller0 entered promiscuous mode [ 908.099797][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.224258][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.402274][T16828] xt_policy: output policy not valid in PREROUTING and INPUT [ 908.654767][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.202785][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.800462][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.226063][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.260584][T15767] net_ratelimit: 1 callbacks suppressed [ 911.260602][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.274506][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.053775][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.294937][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.303113][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.631926][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3289'. [ 912.733715][T16836] device syzkaller0 entered promiscuous mode [ 912.905040][T16855] device syzkaller0 entered promiscuous mode [ 913.165084][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.252093][T16864] device syzkaller0 entered promiscuous mode [ 913.358465][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.451416][T16871] device syzkaller0 entered promiscuous mode [ 913.503962][T16873] xt_policy: output policy not valid in PREROUTING and INPUT [ 914.293941][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.310057][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.388350][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.469049][ T952] net_ratelimit: 2 callbacks suppressed [ 916.469068][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.556241][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.234706][T16894] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 917.334153][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.370718][T16894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.435237][T16901] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 917.469554][T16901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.492316][T16904] device syzkaller0 entered promiscuous mode [ 917.498901][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.568874][T16901] bond1: (slave gretap1): making interface the new active one [ 917.617797][T16901] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 917.705915][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.716473][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 917.732380][T16911] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 917.881656][T16915] xt_policy: output policy not valid in PREROUTING and INPUT [ 918.271022][T16929] device syzkaller0 entered promiscuous mode [ 918.547791][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.844264][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.878103][T16943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.573699][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.005352][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.373860][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.655663][ T4326] net_ratelimit: 2 callbacks suppressed [ 921.655682][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.903850][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.944235][T16952] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 921.977827][T16952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 922.144826][T16956] device syzkaller0 entered promiscuous mode [ 922.285108][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.392751][T16964] device syzkaller0 entered promiscuous mode [ 922.699450][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.862124][T16978] xt_policy: output policy not valid in PREROUTING and INPUT [ 923.424301][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.432675][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.735352][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.579160][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.773877][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.742487][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.842967][T16994] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 925.873735][T16994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.853913][ T8896] net_ratelimit: 2 callbacks suppressed [ 926.853932][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.875731][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.911332][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.038495][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.457722][T15017] Bluetooth: hci3: command 0x0406 tx timeout [ 928.537336][T16999] device veth9 entered promiscuous mode [ 928.738945][T17007] netlink: 'syz.2.3345': attribute type 11 has an invalid length. [ 928.781348][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3345'. [ 928.834322][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 928.963574][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.183196][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.495548][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.509713][T17025] device syzkaller0 entered promiscuous mode [ 929.572239][T17038] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 929.631156][T17038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.729060][T17038] device veth11 entered promiscuous mode [ 929.987590][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.388540][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.022299][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.516378][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.523015][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.060707][ T8896] net_ratelimit: 5 callbacks suppressed [ 932.060725][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.541047][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.623990][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.097939][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.264403][T17057] device syzkaller0 entered promiscuous mode [ 933.739620][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.139847][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.850352][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.182281][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.581116][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.975583][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.467230][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 936.677839][T17109] netlink: 'syz.0.3374': attribute type 1 has an invalid length. [ 936.780082][T17109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 936.849582][T17115] device veth13 entered promiscuous mode [ 937.105073][T15319] net_ratelimit: 2 callbacks suppressed [ 937.105090][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.269308][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.886385][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.895462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.953776][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.023276][T17147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.034427][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.076220][T17147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.096438][T17147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.293751][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.693517][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 938.764427][T17164] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 938.812517][T17164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 938.934049][T17164] device veth5 entered promiscuous mode [ 938.982550][T17164] bond5: (slave veth5): Enslaving as an active interface with a down link [ 939.068278][T17167] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 939.238158][T17173] netlink: 'syz.3.3395': attribute type 1 has an invalid length. [ 939.413125][T17175] netlink: 'syz.2.3396': attribute type 11 has an invalid length. [ 940.228107][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 940.407186][T17203] netlink: 'syz.2.3408': attribute type 1 has an invalid length. [ 940.459250][T17203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 940.606752][T17203] bond6: (slave gretap2): making interface the new active one [ 940.651855][T17203] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 940.686548][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 942.484671][ T952] net_ratelimit: 19 callbacks suppressed [ 942.484687][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.664617][T17243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.673001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.694376][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.747442][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.809310][T17243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.818351][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.827254][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.844800][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.879751][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.558195][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 943.893949][T15767] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 944.093398][T15767] usb 3-1: Using ep0 maxpacket: 16 [ 944.101038][T15767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.142533][T15767] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 944.201717][T15767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.261052][T15767] usb 3-1: config 0 descriptor?? [ 944.307818][T17286] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 944.442994][T17286] siw: device registration error -19 [ 944.697431][T15767] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 945.115503][T17275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.149276][T17275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.166169][T17275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.215504][T17275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.406771][T15094] usb 3-1: USB disconnect, device number 31 [ 946.851908][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 946.924124][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 947.012561][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 947.054277][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 947.267595][T17337] xt_policy: output policy not valid in PREROUTING and INPUT [ 947.423931][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 947.653829][T15767] net_ratelimit: 26 callbacks suppressed [ 947.653844][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.735307][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.464331][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.587054][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.615846][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.694029][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.515266][T17368] netlink: 'syz.0.3461': attribute type 1 has an invalid length. [ 949.588799][T17368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 949.639202][T17370] bond5: (slave geneve2): making interface the new active one [ 949.648634][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.656819][T17370] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 949.676252][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 949.738791][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.854022][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.878281][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.519699][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 950.638447][T17381] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.647399][T17381] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.656305][T17381] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.665463][T17381] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.802932][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 951.012511][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3466'. [ 951.598070][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 951.598217][ T27] audit: type=1326 audit(1769944055.912:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.654932][ T27] audit: type=1326 audit(1769944055.912:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.654968][ T27] audit: type=1326 audit(1769944055.912:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.654994][ T27] audit: type=1326 audit(1769944055.912:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655032][ T27] audit: type=1326 audit(1769944055.912:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655057][ T27] audit: type=1326 audit(1769944055.952:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655082][ T27] audit: type=1326 audit(1769944055.952:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655106][ T27] audit: type=1326 audit(1769944055.952:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655131][ T27] audit: type=1326 audit(1769944055.952:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.655162][ T27] audit: type=1326 audit(1769944055.952:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fe0b9aeb9 code=0x7ffc0000 [ 951.730703][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.798605][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.866011][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.913775][T17418] netlink: 'syz.3.3472': attribute type 11 has an invalid length. [ 951.922367][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3472'. [ 952.962669][ T952] net_ratelimit: 9 callbacks suppressed [ 952.962687][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.154746][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.395047][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.411464][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.818240][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.997938][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.294080][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.537782][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.546720][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.019540][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.776636][T17416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3471'. [ 956.270985][T17445] device wlan0 entered promiscuous mode [ 956.321262][T17452] netlink: 'syz.3.3483': attribute type 11 has an invalid length. [ 956.383712][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'. [ 957.853841][ T952] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 958.060919][ T952] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 958.143222][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.188134][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.205864][ T952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 958.232654][T13351] net_ratelimit: 15 callbacks suppressed [ 958.232670][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.258873][ T952] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 958.274008][ T952] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 958.299733][ T952] usb 5-1: Manufacturer: syz [ 958.321547][ T952] usb 5-1: config 0 descriptor?? [ 958.390125][T17511] device veth7 entered promiscuous mode [ 958.764662][ T952] appleir 0003:05AC:8243.001B: item fetching failed at offset 0/1 [ 958.784232][ T952] appleir 0003:05AC:8243.001B: parse failed [ 958.790255][ T952] appleir: probe of 0003:05AC:8243.001B failed with error -22 [ 958.797927][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.977509][T13351] usb 5-1: USB disconnect, device number 37 [ 959.125004][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.152778][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.166649][T17534] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 959.235745][T17534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.263840][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.756075][T17551] device syzkaller0 entered promiscuous mode [ 959.779372][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 959.779396][ T27] audit: type=1326 audit(1769944064.092:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834641][ T27] audit: type=1326 audit(1769944064.092:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834686][ T27] audit: type=1326 audit(1769944064.092:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834722][ T27] audit: type=1326 audit(1769944064.092:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834758][ T27] audit: type=1326 audit(1769944064.092:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834790][ T27] audit: type=1326 audit(1769944064.132:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834825][ T27] audit: type=1326 audit(1769944064.132:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834862][ T27] audit: type=1326 audit(1769944064.132:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834896][ T27] audit: type=1326 audit(1769944064.132:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.834932][ T27] audit: type=1326 audit(1769944064.132:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.3.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 959.911321][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.979624][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.047456][ C0] vkms_vblank_simulate: vblank timer overrun [ 960.109219][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.133867][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.202012][T17558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3516'. [ 960.301246][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.543832][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.587384][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.159905][T17584] device macvlan2 entered promiscuous mode [ 961.445503][T17590] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 961.551227][T17590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 963.424283][ T4326] net_ratelimit: 9 callbacks suppressed [ 963.424296][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.503562][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.984012][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.992324][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.189932][T17639] device macvlan2 entered promiscuous mode [ 964.294249][T15017] Bluetooth: hci5: command 0x0406 tx timeout [ 964.461053][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.663887][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.234032][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.280960][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.414081][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.502095][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.614058][ T4326] net_ratelimit: 14 callbacks suppressed [ 968.614079][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.756026][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.780829][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.115281][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.179863][T17705] device macvlan2 entered promiscuous mode [ 969.243600][ T952] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 969.445219][ T952] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 969.478856][ T952] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.504228][T17735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.513170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.550551][ T952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 969.577098][ T952] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 969.616451][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.671471][ T952] usb 4-1: config 0 descriptor?? [ 969.694760][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.936130][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.974752][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.112385][ T952] input: HID 28bd:0934 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.001C/input/input8 [ 970.175895][ T952] uclogic 0003:28BD:0934.001C: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 970.263587][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.319965][ T952] usb 4-1: USB disconnect, device number 45 [ 970.817767][T17747] fido_id[17747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 971.224264][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 971.954474][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 971.954491][ T27] audit: type=1326 audit(1769944076.272:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 971.983385][ C1] vkms_vblank_simulate: vblank timer overrun [ 972.013803][T17774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3572'. [ 972.130576][ T27] audit: type=1326 audit(1769944076.272:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.282318][ T27] audit: type=1326 audit(1769944076.272:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.423471][ T27] audit: type=1326 audit(1769944076.272:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.532818][ T27] audit: type=1326 audit(1769944076.272:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.648768][ T27] audit: type=1326 audit(1769944076.302:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.712037][ T27] audit: type=1326 audit(1769944076.302:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.774946][ T27] audit: type=1326 audit(1769944076.302:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.835888][ T27] audit: type=1326 audit(1769944076.302:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 972.863536][ T27] audit: type=1326 audit(1769944076.302:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17768 comm="syz.3.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e879aeb9 code=0x7ffc0000 [ 973.007202][T17791] device syzkaller0 entered promiscuous mode [ 973.153679][T17793] device veth9 entered promiscuous mode [ 973.724596][ T11] net_ratelimit: 14 callbacks suppressed [ 973.724610][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.853985][T17809] device syzkaller0 entered promiscuous mode [ 973.973863][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.533560][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 974.626219][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.657304][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.873616][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.014107][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.022340][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.813637][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.833060][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.014649][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.442816][T17838] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 979.143398][ T4312] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 979.184132][ T952] net_ratelimit: 23 callbacks suppressed [ 979.184151][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.245003][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.264180][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.356743][T17890] device syzkaller0 entered promiscuous mode [ 979.363517][ T4312] usb 3-1: Using ep0 maxpacket: 32 [ 979.371228][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.381476][ T4312] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 979.404094][ T4312] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 979.434200][ T4312] usb 3-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 62 [ 979.460834][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 979.468117][ T4312] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 979.477601][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.487937][ T4312] usb 3-1: config 0 descriptor?? [ 979.494485][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.934329][ T4312] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 979.949708][ T4312] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 979.961923][ T4312] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 979.978189][ T4312] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 979.990318][ T4312] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 980.039776][ T4312] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 980.144721][ T4312] hid-thrustmaster 0003:044F:B65D.001D: setup data couldn't be sent [ 980.169008][ C1] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 980.208728][ T4312] usb 3-1: USB disconnect, device number 32 [ 980.224228][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.415673][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.425095][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.454669][T17915] fido_id[17915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 980.514414][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.260600][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.512372][T17900] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 982.617450][T17918] device syzkaller0 entered promiscuous mode [ 984.347432][ T26] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 984.390086][ T952] net_ratelimit: 15 callbacks suppressed [ 984.390105][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.568222][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.587329][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.600832][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 984.623670][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 984.635651][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.650470][ T26] usb 2-1: config 0 descriptor?? [ 984.657492][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.669400][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.679477][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.690468][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.894288][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.904490][T15317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.963938][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.083119][ T26] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 985.107170][ T26] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 985.161395][ T26] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 985.318311][ T952] usb 2-1: USB disconnect, device number 46 [ 985.420740][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.573752][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.812101][T17957] device syzkaller0 entered promiscuous mode [ 986.273459][ T4326] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 986.473570][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 986.486446][ T4326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.521870][ T4326] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 986.553598][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.579219][ T4326] usb 2-1: config 0 descriptor?? [ 987.006290][ T4326] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 987.414035][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.441627][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.468242][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.491555][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.441518][ T4451] net_ratelimit: 13 callbacks suppressed [ 989.441535][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.455501][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.466726][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.583743][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.563656][ T4444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.625261][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.644477][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.652799][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.875779][T18009] device syzkaller0 entered promiscuous mode [ 990.882890][ T4326] usb 2-1: USB disconnect, device number 47 [ 991.363710][T15767] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 991.573493][T15767] usb 5-1: Using ep0 maxpacket: 32 [ 991.587733][T15767] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 991.613554][T15767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.640241][T15767] usb 5-1: config 0 descriptor?? [ 991.656805][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.665744][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.082350][T15767] a4tech 0003:09DA:000A.0020: unknown main item tag 0x0 [ 992.100601][T15767] a4tech 0003:09DA:000A.0020: unknown main item tag 0x0 [ 992.134109][T15767] a4tech 0003:09DA:000A.0020: unknown main item tag 0x0 [ 992.182000][T15767] a4tech 0003:09DA:000A.0020: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.4-1/input0 [ 992.284076][T15767] usb 5-1: USB disconnect, device number 38 [ 992.579255][T18052] fido_id[18052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 992.945141][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.951611][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.697613][ T4312] net_ratelimit: 12 callbacks suppressed [ 994.697638][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.784003][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.049668][T18062] device veth15 entered promiscuous mode [ 995.104510][ T4443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.223692][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.241707][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.251097][T18076] device syzkaller0 entered promiscuous mode [ 995.604327][ T26] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 995.809566][ T26] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 995.824355][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.845891][ T26] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 995.873457][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 995.888554][ T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 995.935290][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.979305][ T26] usb 2-1: config 0 descriptor?? [ 996.082560][T18103] device syzkaller0 entered promiscuous mode [ 996.244806][ T4443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.316255][T18107] device syzkaller0 entered promiscuous mode [ 996.416366][ T26] hid-rmi 0003:17EF:6085.0021: unknown main item tag 0x0 [ 996.426044][ T26] hid-rmi 0003:17EF:6085.0021: unknown main item tag 0x0 [ 996.434846][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.450006][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.464523][ T26] hid-rmi 0003:17EF:6085.0021: item fetching failed at offset 3/5 [ 996.498451][ T26] hid-rmi 0003:17EF:6085.0021: parse failed [ 996.514262][ T26] hid-rmi: probe of 0003:17EF:6085.0021 failed with error -22 [ 996.618044][ T26] usb 2-1: USB disconnect, device number 48 [ 996.854005][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.863840][ T75] net_ratelimit: 10 callbacks suppressed [ 999.863860][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.881527][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.976813][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.431989][T18131] device veth3 entered promiscuous mode [ 1000.577602][T18135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1000.595163][T18135] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1000.634667][T18135] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1000.653924][T18135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1000.660076][T18135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1000.673660][T18135] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1000.689459][T18135] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1000.698992][T18135] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1000.709791][T18135] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1000.720565][T18135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1000.730738][T18135] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1000.743954][ T4443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.763762][T18135] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1000.774053][ T4443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.784334][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.797059][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.804238][T18135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1000.811269][T18135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1000.835824][T18135] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1001.022610][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1001.034123][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.043040][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.053005][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.170932][T18164] device syzkaller0 entered promiscuous mode [ 1002.162376][T18177] netlink: 'syz.2.3674': attribute type 1 has an invalid length. [ 1002.221200][T18177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1002.492815][T18193] device veth11 entered promiscuous mode [ 1002.613794][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 1002.693622][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 1002.699774][T15017] Bluetooth: hci4: command 0x0c1a tx timeout [ 1002.757916][T18202] device syzkaller0 entered promiscuous mode [ 1002.773594][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 1002.853748][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 1002.929362][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1003.267205][T18213] loop7: detected capacity change from 0 to 7 [ 1003.291569][T17750] Dev loop7: unable to read RDB block 7 [ 1003.306439][T17750] loop7: unable to read partition table [ 1003.326969][T17750] loop7: partition table beyond EOD, truncated [ 1003.390147][T18213] Dev loop7: unable to read RDB block 7 [ 1003.405653][T18216] device syzkaller0 entered promiscuous mode [ 1003.413571][T18213] loop7: unable to read partition table [ 1003.419572][T18213] loop7: partition table beyond EOD, truncated [ 1003.437861][T18213] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1003.524178][T17750] udevd[17750]: symlink '../../loop7' '/dev/disk/by-diskseq/69.tmp-b7:7' failed: Read-only file system [ 1003.632174][T17750] udevd[17750]: symlink '../../loop7' '/dev/disk/by-diskseq/69.tmp-b7:7' failed: Read-only file system [ 1003.712946][T17750] udevd[17750]: symlink '../../loop7' '/dev/disk/by-diskseq/69.tmp-b7:7' failed: Read-only file system [ 1003.956750][T15767] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1004.004035][T18222] device syzkaller0 entered promiscuous mode [ 1004.163407][T15767] usb 5-1: Using ep0 maxpacket: 32 [ 1004.170430][T15767] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 1004.225792][T15767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.282626][T15767] usb 5-1: config 0 has no interface number 0 [ 1004.312832][T15767] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1004.371476][T15767] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x5 has invalid maxpacket 1431, setting to 1024 [ 1004.430488][T15767] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1004.482671][T15767] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3 [ 1004.535671][T15767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.581287][T15767] usb 5-1: Product: syz [ 1004.603473][T15767] usb 5-1: Manufacturer: syz [ 1004.626661][T15767] usb 5-1: SerialNumber: syz [ 1004.654785][T15767] usb 5-1: config 0 descriptor?? [ 1004.670460][T18220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1004.691294][T15767] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.17/input/input10 [ 1004.700895][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 1004.773439][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 1004.779542][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 1004.853512][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 1004.933500][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 1004.984402][ T4312] usb 5-1: USB disconnect, device number 39 [ 1005.297662][T18172] net_ratelimit: 16 callbacks suppressed [ 1005.297679][T18172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.380132][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1005.493975][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.704133][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.712401][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.087558][T18267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.384645][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.395077][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.406682][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.466762][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.861277][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.881360][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.603864][T18304] ======================================================= [ 1009.603864][T18304] WARNING: The mand mount option has been deprecated and [ 1009.603864][T18304] and is ignored by this kernel. Remove the mand [ 1009.603864][T18304] option from the mount to silence this warning. [ 1009.603864][T18304] ======================================================= [ 1009.641270][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1010.346017][T18169] net_ratelimit: 12 callbacks suppressed [ 1010.346033][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.373465][T15017] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.399440][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.477821][T18327] device syzkaller0 entered promiscuous mode [ 1010.534378][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.895656][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1011.044140][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.549991][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.563925][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.573788][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.144634][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.153651][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.172023][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.888062][T18338] device syzkaller0 entered promiscuous mode [ 1015.564786][T15319] net_ratelimit: 14 callbacks suppressed [ 1015.564805][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.975442][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.073818][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.087633][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.293777][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.358670][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 1016.707160][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.759737][T18415] device syzkaller0 entered promiscuous mode [ 1016.814701][T13351] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1017.013524][T13351] usb 2-1: Using ep0 maxpacket: 8 [ 1017.026224][T13351] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1017.065246][T13351] usb 2-1: config 179 has no interface number 0 [ 1017.071650][T13351] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1017.113441][T13351] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1017.153532][T13351] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1017.178559][T13351] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1017.213405][T13351] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1017.213863][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.251657][ T4460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.259827][T13351] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1017.259859][T13351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.315113][T18407] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1017.336342][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.796067][T13351] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 1017.873710][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.049754][T18454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.083807][T18454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.230341][T18451] device syzkaller0 entered promiscuous mode [ 1020.425481][ T4350] usb 2-1: USB disconnect, device number 49 [ 1020.425506][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1020.439902][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1020.611344][T18464] netlink: 'syz.2.3747': attribute type 3 has an invalid length. [ 1020.733771][ T11] net_ratelimit: 15 callbacks suppressed [ 1020.733789][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.790160][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.021630][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.374942][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.883618][T15094] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1021.961851][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.055773][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.064638][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.083605][T15094] usb 3-1: Using ep0 maxpacket: 32 [ 1022.091385][T15094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.111066][T15094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.121225][T15094] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1022.130632][T15094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.156427][T15094] usb 3-1: config 0 descriptor?? [ 1022.165225][T15094] hub 3-1:0.0: USB hub found [ 1022.373584][T18495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.396681][T18495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.438164][T15094] hub 3-1:0.0: 19 ports detected [ 1022.447208][T15094] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1022.534994][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.674723][T15094] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1022.681763][T15094] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1022.710596][T15094] usbhid 3-1:0.0: can't add hid device: -71 [ 1022.717236][T15094] usbhid: probe of 3-1:0.0 failed with error -71 [ 1022.778664][T15094] usb 3-1: USB disconnect, device number 33 [ 1023.023482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.094334][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.768433][T18506] netlink: 'syz.0.3758': attribute type 3 has an invalid length. [ 1023.923173][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1023.968377][T18513] netlink: 'syz.1.3759': attribute type 4 has an invalid length. [ 1023.990660][T18515] xt_hashlimit: size too large, truncated to 1048576 [ 1024.166799][T18512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1024.204452][T18517] netlink: 'syz.1.3759': attribute type 4 has an invalid length. [ 1024.633809][T18517] ip6t_srh: unknown srh match flags 4000 [ 1025.023867][T15094] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1025.232871][T15094] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1025.281682][T15094] usb 2-1: config 0 has no interface number 0 [ 1025.385765][T15094] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1025.469698][T15094] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1025.544378][T15094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.737749][T15094] usb 2-1: Product: syz [ 1025.847651][T15094] usb 2-1: Manufacturer: syz [ 1025.894451][ T4311] net_ratelimit: 7 callbacks suppressed [ 1025.894464][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.938922][T15094] usb 2-1: SerialNumber: syz [ 1026.084244][T15094] usb 2-1: config 0 descriptor?? [ 1026.133392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.294153][T15767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.306070][T15094] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1026.508033][T15094] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1026.524265][T15094] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1026.589833][T15094] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 1026.706172][T15094] peak_usb: probe of 2-1:0.29 failed with error -22 [ 1026.762966][T18556] netlink: 'syz.0.3770': attribute type 3 has an invalid length. [ 1026.976743][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1027.075279][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.129894][T18564] device macvlan2 entered promiscuous mode [ 1027.173484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.333812][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.483462][T15094] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1027.692182][T15094] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1027.713809][T15094] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.788484][T15094] usb 3-1: config 8 has no interface number 0 [ 1027.807116][T15094] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1027.869301][T15094] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1027.899270][T15094] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1027.930842][T15094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.996717][T15094] ir_toy 3-1:8.177: required endpoints not found [ 1028.141281][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.204802][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.213588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.373919][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.413370][T13351] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1028.473706][T18567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.537877][T15094] usb 2-1: USB disconnect, device number 50 [ 1028.613445][T13351] usb 5-1: Using ep0 maxpacket: 8 [ 1028.624968][T13351] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1028.630923][T18567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.730867][T13351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.795550][T13351] usb 5-1: config 0 descriptor?? [ 1028.800556][T18567] netlink: 'syz.2.3771': attribute type 21 has an invalid length. [ 1029.302962][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.352928][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.452988][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.521214][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.601819][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.653671][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.693581][T13351] pantherlord 0003:0E8F:0003.0022: unknown main item tag 0x0 [ 1029.823977][T13351] pantherlord 0003:0E8F:0003.0022: hidraw0: USB HID v0.20 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 1029.873466][ T4350] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1029.903488][T13351] pantherlord 0003:0E8F:0003.0022: no output reports found [ 1030.003700][T13351] usb 5-1: USB disconnect, device number 40 [ 1030.063530][ T4350] usb 2-1: Using ep0 maxpacket: 8 [ 1030.074349][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.144562][ T4350] usb 2-1: config 0 has no interfaces? [ 1030.159644][ T4350] usb 2-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 1030.230186][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.280277][ T4350] usb 2-1: config 0 descriptor?? [ 1030.584194][T18590] fido_id[18590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1030.644786][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1030.644813][ T27] audit: type=1326 audit(1769944134.962:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646126][ T27] audit: type=1326 audit(1769944134.962:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646157][ T27] audit: type=1326 audit(1769944134.962:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646183][ T27] audit: type=1326 audit(1769944134.962:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646207][ T27] audit: type=1326 audit(1769944134.962:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646233][ T27] audit: type=1326 audit(1769944134.962:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646258][ T27] audit: type=1326 audit(1769944134.962:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646283][ T27] audit: type=1326 audit(1769944134.962:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646308][ T27] audit: type=1326 audit(1769944134.962:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.646335][ T27] audit: type=1326 audit(1769944134.962:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.4.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e39aeb9 code=0x7ffc0000 [ 1030.730894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.792910][T18601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1030.799673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.174326][T13351] net_ratelimit: 5 callbacks suppressed [ 1031.174345][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.246016][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.333625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.674669][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1031.756776][ T26] usb 2-1: USB disconnect, device number 51 [ 1031.863682][T18614] device macvlan2 entered promiscuous mode [ 1031.914897][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.969421][T15094] usb 3-1: USB disconnect, device number 34 [ 1032.204903][ T4350] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1032.231174][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.373448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.413456][ T4350] usb 4-1: Using ep0 maxpacket: 16 [ 1032.420877][ T4350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.439487][ T4350] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.468433][T18630] kvm: pic: non byte write [ 1032.473654][ T4350] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.491863][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.510900][ T4350] usb 4-1: Product: syz [ 1032.516649][ T4350] usb 4-1: Manufacturer: syz [ 1032.521493][ T4350] usb 4-1: SerialNumber: syz [ 1032.553480][T15094] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1032.744406][ T4350] usb 4-1: 0:2 : does not exist [ 1032.756746][ T4350] usb 4-1: unit 9 not found! [ 1032.765111][T15094] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.784311][ T4350] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1032.801500][T15094] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.865368][T15094] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1032.878591][ T4350] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1032.900264][T15094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1032.917075][ T4350] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1032.943689][T15094] usb 3-1: SerialNumber: syz [ 1032.959946][ T4350] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1032.997676][T18640] device veth3 entered promiscuous mode [ 1033.007305][ T4350] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1033.046494][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.061903][ T4350] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1033.179059][ T4350] usb 4-1: USB disconnect, device number 46 [ 1033.189594][T15094] usb 3-1: 0:2 : does not exist [ 1033.255143][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.332268][T15094] usb 3-1: USB disconnect, device number 35 [ 1033.423536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.956365][T14233] tipc: Left network mode [ 1034.131825][T18659] device wlan0 entered promiscuous mode [ 1034.192560][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.513865][T13351] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1034.703378][T13351] usb 3-1: Using ep0 maxpacket: 16 [ 1034.724701][T13351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1034.748908][T13351] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1034.763614][ T26] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1034.769475][T13351] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1034.799814][T13351] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1034.842503][T13351] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1034.873194][T13351] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1034.899277][T13351] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1034.920949][T13351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.955424][T13351] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1034.966125][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.993104][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.046288][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1035.082638][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.108503][ T26] usb 2-1: SerialNumber: syz [ 1035.170684][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1035.189786][T13351] scsi host1: usb-storage 3-1:1.0 [ 1035.244689][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1035.382685][ T26] usb 2-1: 0:2 : does not exist [ 1035.458958][ T26] usb 2-1: USB disconnect, device number 52 [ 1035.480862][T14233] bond1: (slave gretap1): Releasing active interface [ 1035.674512][T18687] device veth3 entered promiscuous mode [ 1035.718806][T17750] udevd[17750]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.220755][T18173] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1036.373866][T13351] net_ratelimit: 6 callbacks suppressed [ 1036.373884][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.426022][T18173] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1036.434184][T18171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.533470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.544412][T18682] sddr09: could not read card info [ 1036.550860][T15094] usb 3-1: USB disconnect, device number 36 [ 1036.594463][T18169] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1036.618480][T18169] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1036.654714][T18169] sd 1:0:0:0: [sdb] Write Protect is off [ 1036.697349][T18169] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1036.753530][T18169] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1036.822605][T14233] device hsr_slave_0 left promiscuous mode [ 1036.876050][T18169] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1036.891161][T14233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.903658][T14233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.934071][T14233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.977799][T14233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.024317][T14233] device bridge_slave_1 left promiscuous mode [ 1037.047217][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.072811][T14233] device bridge_slave_0 left promiscuous mode [ 1037.130076][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.253497][T13351] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1037.301547][T14233] device batadv0 left promiscuous mode [ 1037.325622][T14233] device veth1_macvtap left promiscuous mode [ 1037.352385][T14233] device veth0_macvtap left promiscuous mode [ 1037.362686][T14233] device veth1_vlan left promiscuous mode [ 1037.368610][ T4385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.393738][T14233] device veth0_vlan left promiscuous mode [ 1037.413938][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.457684][T13351] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1037.489268][T13351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.558972][T13351] usb 2-1: Product: syz [ 1037.573653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.601001][T13351] usb 2-1: Manufacturer: syz [ 1037.621874][T13351] usb 2-1: SerialNumber: syz [ 1037.634942][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.981027][T17750] udevd[17750]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1038.257707][T17750] udevd[17750]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1038.337973][T13351] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6e:3c:d1:3f:bc:c6 [ 1038.463644][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.476829][T14233] bond4 (unregistering): Released all slaves [ 1038.583629][T14233] bond3 (unregistering): (slave veth3): Releasing active interface [ 1038.613491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.782089][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.830257][T14233] bond3 (unregistering): Released all slaves [ 1039.212874][T14233] bond2 (unregistering): Released all slaves [ 1039.465897][T14233] bond1 (unregistering): Released all slaves [ 1040.087738][T14233] team0 (unregistering): Port device team_slave_1 removed [ 1040.139352][T14233] team0 (unregistering): Port device team_slave_0 removed [ 1040.189270][T14233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.242706][T14233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.603070][T14233] bond0 (unregistering): Released all slaves [ 1040.732265][T18726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1040.741560][T13351] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 1040.758512][T13351] usb 2-1: USB disconnect, device number 53 [ 1040.856471][T18728] device veth11 entered promiscuous mode [ 1041.129830][T18744] tipc: Started in network mode [ 1041.143246][T18744] tipc: Node identity e289b60514f5, cluster identity 4711 [ 1041.167049][T18744] tipc: Enabled bearer , priority 0 [ 1041.192566][T18738] tipc: Resetting bearer [ 1041.483459][ T4350] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1041.594098][ T8896] net_ratelimit: 7 callbacks suppressed [ 1041.594116][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.738133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.812824][ T4350] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1041.852234][ T4350] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.918263][ T4350] usb 2-1: config 8 has no interface number 0 [ 1041.948719][ T4350] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1041.990906][ T4350] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1042.008063][ T4350] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1042.052051][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.074608][ T4350] ir_toy 2-1:8.177: required endpoints not found [ 1042.184020][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.372696][T18760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.391894][T18760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.613643][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.788843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.325368][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.414183][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.664027][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.724113][ T4350] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1043.813681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.943876][ T4350] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1043.965819][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.977855][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.988104][ T4350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1044.001450][ T4350] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 1044.010830][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.031507][ T4350] usb 3-1: config 0 descriptor?? [ 1044.454086][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.462494][ T4350] wacom 0003:056A:0015.0023: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 1044.487112][ T4350] wacom 0003:056A:0015.0023: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 1044.499501][ T4350] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0023/input/input12 [ 1044.657589][T13351] usb 3-1: USB disconnect, device number 37 [ 1044.709177][T18766] fido_id[18766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1045.492172][T18738] tipc: Disabling bearer [ 1045.513408][ T8896] tipc: Node number set to 4135368197 [ 1045.521485][T18760] netlink: 'syz.1.3824': attribute type 21 has an invalid length. [ 1045.555222][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1045.662641][T18769] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1045.677640][T18769] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1045.741526][T18770] device macvlan2 entered promiscuous mode [ 1045.788869][T18770] device vlan1 entered promiscuous mode [ 1045.806129][T15094] usb 2-1: USB disconnect, device number 54 [ 1045.821973][T18770] bond8: (slave macvlan2): Enslaving as an active interface with an up link [ 1046.105288][T18782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3835'. [ 1046.277859][T18785] device veth3 entered promiscuous mode [ 1046.420302][T18797] device syzkaller0 entered promiscuous mode [ 1046.687050][ T4311] net_ratelimit: 7 callbacks suppressed [ 1046.687066][ T4311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.773691][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.933683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.083408][T15094] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1047.305335][T15094] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.360399][T15094] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.413776][T15094] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1047.501820][T15094] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1047.544802][T15094] usb 5-1: SerialNumber: syz [ 1047.813907][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.823395][ T4326] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1047.865490][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.871972][T15094] usb 5-1: 0:2 : does not exist [ 1047.922390][T15094] usb 5-1: USB disconnect, device number 41 [ 1047.983476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.015565][ T4326] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1048.040464][ T4326] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1048.076978][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.104557][T18828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1048.118109][ T4326] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1048.164551][T17750] udevd[17750]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.281333][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3851'. [ 1048.367239][T18835] device veth11 entered promiscuous mode [ 1048.863930][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.937798][T18852] device syzkaller0 entered promiscuous mode [ 1048.981549][T18852] 0: reclassify loop, rule prio 0, protocol 800 [ 1049.003919][T18169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.013470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.661741][T17750] udevd[17750]: symlink '../../loop7' '/dev/disk/by-diskseq/70.tmp-b7:7' failed: Read-only file system [ 1050.440326][T18878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1050.518146][ T4326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1050.538085][ T4326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1050.590498][ T4326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1050.618979][ T4326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1050.677470][ T4350] usb 2-1: USB disconnect, device number 55 [ 1050.714318][ T4326] rtc rtc0: __rtc_set_alarm: err=-22 [ 1050.817979][T18883] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 1050.890999][T18883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.113555][ T4326] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1051.345171][ T4326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.386052][ T4326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1051.465515][ T4326] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1051.536443][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1051.570857][ T4326] usb 3-1: SerialNumber: syz [ 1051.818958][ T4326] usb 3-1: 0:2 : does not exist [ 1051.874156][ T4326] usb 3-1: USB disconnect, device number 38 [ 1051.976164][ T8896] net_ratelimit: 7 callbacks suppressed [ 1051.976182][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.133474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.444603][T14233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.492502][T18917] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 1052.536860][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.650016][T18917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1052.692752][T18924] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 1052.811657][T18924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1053.003420][ T4350] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1053.018897][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.175107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.275784][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 1053.289724][ T4350] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1053.322908][ T4350] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.458838][ T4350] usb 5-1: config 8 has no interface number 0 [ 1053.505891][ T4350] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1053.521976][ T4350] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1053.529876][ T4350] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1053.546675][ T4350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.573489][ T4326] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1053.582313][ T4350] ir_toy 5-1:8.177: required endpoints not found [ 1053.592173][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.783696][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 1053.791414][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.811398][ T4326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.832303][ T4326] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1053.844910][T18925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.853562][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.864537][T18925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.879756][ T4326] usb 4-1: config 0 descriptor?? [ 1053.890751][T18925] netlink: 'syz.4.3877': attribute type 21 has an invalid length. [ 1053.914897][T18933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.053841][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.213446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.294569][ T4326] gt683r_led 0003:1770:FF00.0024: unknown main item tag 0x0 [ 1054.328605][ T4326] gt683r_led 0003:1770:FF00.0024: unknown main item tag 0x0 [ 1054.377617][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.384375][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.468119][ T4326] gt683r_led 0003:1770:FF00.0024: item fetching failed at offset 2/5 [ 1054.553842][ T4326] gt683r_led 0003:1770:FF00.0024: hid parsing failed [ 1054.601285][ T4326] gt683r_led: probe of 0003:1770:FF00.0024 failed with error -22 [ 1054.671953][ T4326] usb 4-1: USB disconnect, device number 47 [ 1054.733549][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.181033][T18964] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 1056.229756][T18964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1056.273679][ T4350] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1056.470245][ T4326] usb 5-1: USB disconnect, device number 42 [ 1056.476438][ T4350] usb 4-1: Using ep0 maxpacket: 16 [ 1056.490222][ T4350] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.537363][ T4350] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.565098][ T4350] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.581177][ T4350] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1056.599786][ T4350] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1056.615747][ T4350] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1056.632281][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.904397][T18983] device macvlan2 entered promiscuous mode [ 1057.059951][ T4350] hid (null): unknown global tag 0xd [ 1057.071276][ T4350] hid (null): report_id 0 is invalid [ 1057.080116][ T4350] hid (null): unknown global tag 0xc [ 1057.121112][ T4350] hid (null): usage index exceeded [ 1057.161650][ T4350] hid (null): report_id 5585 is invalid [ 1057.200254][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.212105][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.230453][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.249659][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.275820][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.295491][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.314871][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.333161][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.340233][ C1] net_ratelimit: 7 callbacks suppressed [ 1057.340250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.382758][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.402218][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.424526][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.444263][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.459001][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.480495][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.499826][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.521410][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.541002][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.560038][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.585385][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.603221][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.616606][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.636397][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.656483][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.677998][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.698705][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.713347][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.727799][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.742928][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.763357][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.783190][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.802662][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.821952][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.892593][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.934524][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1057.970229][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.008929][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.029065][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.055699][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.076689][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.098034][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.105677][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.143940][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.158028][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.177770][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.216274][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.223097][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.230668][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.260502][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.280720][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.338520][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.358354][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.373391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.453071][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.464068][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.470923][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.514427][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.559925][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.583858][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.613706][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.623946][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.630792][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.652856][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.665728][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.672550][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.679738][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.689786][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.701163][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.718036][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.728926][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.739842][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.758835][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.773604][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.780909][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.799605][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.809757][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.822046][T18999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.830392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.850361][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.858060][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.867672][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.880358][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.891909][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.907253][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.916767][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.930181][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.940594][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.961671][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.971947][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1058.988172][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.003139][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.013456][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.020253][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.031284][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.043354][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.053696][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.069127][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.079784][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.091001][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.106598][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.113577][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.120530][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.129336][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.136188][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.143799][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.150706][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.157786][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.164651][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.171431][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.178278][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.187340][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.201392][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.226351][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.233092][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.240727][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.268500][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.285071][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.291843][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.321556][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.328464][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.335380][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.342132][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.356832][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.373775][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.380526][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.413566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.431489][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.472048][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.501135][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.530501][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.560944][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.573497][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x0 [ 1059.580323][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x2 [ 1059.611956][ T4350] kye 0003:0458:5010.0025: unknown main item tag 0x6 [ 1059.635713][ T4350] kye 0003:0458:5010.0025: unknown global tag 0xd [ 1059.657700][ T4350] kye 0003:0458:5010.0025: item 0 4 1 13 parsing failed [ 1059.675943][ T4350] kye 0003:0458:5010.0025: parse failed [ 1059.706260][ T4350] kye: probe of 0003:0458:5010.0025 failed with error -22 [ 1059.753500][ T4350] usb 4-1: USB disconnect, device number 48 [ 1059.769268][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1059.779012][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.803501][T13351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.050712][T19003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.293766][T13351] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1060.501703][T13351] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1060.524075][T13351] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.587027][T13351] usb 2-1: config 8 has no interface number 0 [ 1060.667728][T13351] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1060.762258][T13351] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1060.821756][T13351] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1060.958457][T13351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.981513][T13351] ir_toy 2-1:8.177: required endpoints not found [ 1061.063567][T19029] xt_hashlimit: size too large, truncated to 1048576 [ 1061.609860][T19011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.440127][T19011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.533524][ C1] net_ratelimit: 6 callbacks suppressed [ 1062.533540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.605510][T15319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.663021][T19011] netlink: 'syz.1.3903': attribute type 21 has an invalid length. [ 1062.703433][ T26] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1062.853765][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.909134][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.928153][ T26] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1062.963189][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.020952][ T26] usb 4-1: config 0 descriptor?? [ 1063.325325][T19047] device wlan0 entered promiscuous mode [ 1063.385109][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.467664][ T26] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0026/input/input17 [ 1063.521067][ T26] uclogic 0003:28BD:0909.0026: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 1063.573411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.673465][ T4326] usb 4-1: USB disconnect, device number 49 [ 1063.864224][T18172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.079745][T19049] fido_id[19049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1064.464169][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.624051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.917937][ T4384] usb 2-1: USB disconnect, device number 56 [ 1065.024571][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.523965][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.466281][T19110] tun0: tun_chr_ioctl cmd 1074025677 [ 1066.479532][T19110] tun0: linktype set to 1 [ 1066.503406][ T4326] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1066.712712][ T4326] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1066.762344][ T4326] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.792692][ T4326] usb 4-1: config 8 has no interface number 0 [ 1066.813614][ T4326] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1066.839891][ T4326] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1066.874166][ T4326] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1066.907814][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.942945][ T4326] ir_toy 4-1:8.177: required endpoints not found [ 1067.189717][T19103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.214817][T19103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.284295][T19103] netlink: 'syz.3.3933': attribute type 21 has an invalid length. [ 1067.584485][ T8896] net_ratelimit: 6 callbacks suppressed [ 1067.584505][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.733364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.485080][T14233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.614867][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.773602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.943651][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.218312][T19148] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 1069.320029][T19148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1069.545578][ T8896] usb 4-1: USB disconnect, device number 50 [ 1069.623779][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.654197][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.813401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.695684][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.774091][ T4384] net_ratelimit: 6 callbacks suppressed [ 1072.774110][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.803520][ T4326] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1072.933377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.984183][T18173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.012383][ T4326] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1073.038308][ T4326] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.058193][ T4326] usb 5-1: config 8 has no interface number 0 [ 1073.071764][ T4326] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1073.093077][ T4326] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1073.102012][ T4326] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1073.111580][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.148476][ T4326] ir_toy 5-1:8.177: required endpoints not found [ 1073.558052][T19191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.570964][T19191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.820760][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.973380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.068661][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1074.081647][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1074.094552][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.242634][T19191] netlink: 'syz.4.3967': attribute type 21 has an invalid length. [ 1074.386623][T19196] netlink: 'syz.3.3969': attribute type 1 has an invalid length. [ 1074.424102][T19196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.561914][T19198] bond3: (slave geneve2): making interface the new active one [ 1074.611937][T19198] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1074.661023][T14233] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1074.859750][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.013561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.022490][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.194540][T14233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.118360][T19224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.129193][T19224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1076.145458][T19224] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1076.173612][T19224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1076.202872][T19224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1076.521302][T15094] usb 5-1: USB disconnect, device number 43 [ 1076.662935][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1076.720303][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1076.756186][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1077.191936][T19241] [ 1077.194722][T19241] ============================= [ 1077.199640][T19241] WARNING: suspicious RCU usage [ 1077.204756][T19241] syzkaller #0 Not tainted [ 1077.209249][T19241] ----------------------------- [ 1077.214191][T19241] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1077.222740][T19241] [ 1077.222740][T19241] other info that might help us debug this: [ 1077.222740][T19241] [ 1077.233368][T19241] [ 1077.233368][T19241] rcu_scheduler_active = 2, debug_locks = 1 [ 1077.241489][T19241] 1 lock held by syz.3.3983/19241: [ 1077.246756][T19241] #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1077.257415][T19241] [ 1077.257415][T19241] stack backtrace: [ 1077.263389][T19241] CPU: 0 PID: 19241 Comm: syz.3.3983 Not tainted syzkaller #0 [ 1077.270900][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1077.281002][T19241] Call Trace: [ 1077.284303][T19241] [ 1077.287238][T19241] dump_stack_lvl+0x188/0x24e [ 1077.291979][T19241] ? show_regs_print_info+0x12/0x12 [ 1077.297216][T19241] ? load_image+0x400/0x400 [ 1077.301764][T19241] lockdep_rcu_suspicious+0x1dd/0x300 [ 1077.307237][T19241] get_callchain_entry+0x2a5/0x3b0 [ 1077.312434][T19241] get_perf_callchain+0xc4/0x490 [ 1077.317423][T19241] ? put_callchain_entry+0xb0/0xb0 [ 1077.322638][T19241] ? __schedule+0x11d9/0x40e0 [ 1077.327439][T19241] __bpf_get_stack+0x2de/0x520 [ 1077.332310][T19241] ? stack_map_get_build_id_offset+0x970/0x970 [ 1077.338512][T19241] ? __cant_sleep+0x220/0x220 [ 1077.343308][T19241] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1077.349037][T19241] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1077.354386][T19241] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1077.359878][T19241] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1077.365373][T19241] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1077.371058][T19241] ? sock_gen_cookie+0x60/0x60 [ 1077.375878][T19241] ? sock_gen_cookie+0x60/0x60 [ 1077.380696][T19241] bpf_prog_test_run+0x31e/0x390 [ 1077.385769][T19241] __sys_bpf+0x62b/0x780 [ 1077.390066][T19241] ? bpf_link_show_fdinfo+0x380/0x380 [ 1077.395490][T19241] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1077.401440][T19241] ? lock_chain_count+0x20/0x20 [ 1077.406341][T19241] __x64_sys_bpf+0x78/0x90 [ 1077.410796][T19241] do_syscall_64+0x4c/0xa0 [ 1077.415256][T19241] ? clear_bhb_loop+0x60/0xb0 [ 1077.420047][T19241] ? clear_bhb_loop+0x60/0xb0 [ 1077.424766][T19241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.430689][T19241] RIP: 0033:0x7f61e879aeb9 [ 1077.435191][T19241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.454836][T19241] RSP: 002b:00007f61e9749028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.463286][T19241] RAX: ffffffffffffffda RBX: 00007f61e8a15fa0 RCX: 00007f61e879aeb9 [ 1077.471288][T19241] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1077.479300][T19241] RBP: 00007f61e8808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1077.487313][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.495322][T19241] R13: 00007f61e8a16038 R14: 00007f61e8a15fa0 R15: 00007ffc2d23fce8 [ 1077.503344][T19241] [ 1077.510129][T15017] Bluetooth: hci3: command 0x0c1a tx timeout [ 1077.990113][ T952] net_ratelimit: 8 callbacks suppressed [ 1077.990132][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.060499][ T4451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.072074][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.080839][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.140115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.143779][T15017] Bluetooth: hci4: command 0x0c1a tx timeout [ 1078.214882][T15017] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.220964][T15017] Bluetooth: hci2: command 0x0c1a tx timeout [ 1078.227220][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 1078.627836][T18172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.020887][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.173458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.744946][T14233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.057074][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.124637][ T11] net_ratelimit: 8 callbacks suppressed [ 1083.124658][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.173962][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.333496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.823731][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.834002][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.842692][T15094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.214263][ T952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.273732][T14233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.373543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.263938][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog