last executing test programs: 18.545146795s ago: executing program 2 (id=1385): openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x108) 16.919042141s ago: executing program 1 (id=1390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) 16.654076762s ago: executing program 1 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15.056728025s ago: executing program 4 (id=1392): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008881}, 0x4) 14.508877883s ago: executing program 2 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0) 13.667109178s ago: executing program 1 (id=1395): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.6335852s ago: executing program 4 (id=1396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004500), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000045c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250a00000008000300", @ANYBLOB="0c00060000000000000000000c000600010000000200000008000300", @ANYRES32=0x0, @ANYBLOB="060009"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 13.22913576s ago: executing program 4 (id=1400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 12.528569931s ago: executing program 2 (id=1402): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x5, 0x191, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3300000010", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x111) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000c9c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x8074, 0x20) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x40000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 10.037385075s ago: executing program 1 (id=1407): socket$xdp(0x2c, 0x3, 0x0) mkdir(0x0, 0x20) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 10.036226763s ago: executing program 2 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.918887888s ago: executing program 3 (id=1409): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x140400c4}, 0x14004040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 9.257591919s ago: executing program 1 (id=1410): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x20, 0xb66c32b63972d1cc, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.780061562s ago: executing program 2 (id=1412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 7.523242519s ago: executing program 5 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0) 7.475430009s ago: executing program 4 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r3 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.382974878s ago: executing program 0 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.260846799s ago: executing program 3 (id=1417): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 7.083492079s ago: executing program 5 (id=1418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 6.932986623s ago: executing program 0 (id=1419): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x153042, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001c0000000000000018000000180000e1ffffffffffff0b020000000000000000009473fa68b8ecfac55f00"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000c000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000380)={0x1000000d, {{0xa, 0x4e22, 0x1, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e20, 0x0, @mcast2}}}, 0x108) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000080)='./file0/../file0\x00', r7, r8) socket$nl_xfrm(0x10, 0x3, 0x6) 5.950466849s ago: executing program 1 (id=1420): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.78159215s ago: executing program 0 (id=1421): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x3, 0x3, 0x8001, 0x3, 0x8}, {0x8, 0x2, 0x8, 0x8, 0x5, 0xc}, 0x1000006, 0x8, 0x1457}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3ace9b85e05b5271}, @TCA_TBF_RATE64={0xc, 0x4, 0x13805d442f28ef42}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5.550527928s ago: executing program 5 (id=1422): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x5, 0x191, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3300000010", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x111) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000c9c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x8074, 0x20) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x40000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.510308607s ago: executing program 3 (id=1423): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) gettid() r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.521310387s ago: executing program 4 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000000)) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.433523618s ago: executing program 0 (id=1425): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000780)=ANY=[@ANYBLOB="696f636861727365743d63703934392c6769643d666f726765742c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303135343333302c6e6f7672732c6d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d3048bfc29ca6a6b607303030303030303030303030303036353533352c6e6f6164696e6963622c00"], 0x1, 0xc32, &(0x7f0000003a80)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, '\x00'}) r1 = fsmount(r0, 0x1, 0x81) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, 0x0, 0x40000100) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0x2804206, &(0x7f0000000980), 0x1, 0xbd5, &(0x7f0000002080)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@nombcache}, {@jqfmt_vfsold}]}, 0x1, 0x57c, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0xa, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x2, 0x7ff, {{0x37, 0x4, 0x3, 0x32, 0xdc, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x17, [@private=0xa010102]}, @cipso={0x86, 0x64, 0x2, [{0x0, 0xc, "4b36ee2bf70a9bf43141"}, {0x7, 0x6, "e2d6039a"}, {0x6, 0xe, "cb63201b94f1accd630f239c"}, {0x7, 0x9, "340711eb1fe6f7"}, {0x5, 0xa, "db25ed2eff18d91c"}, {0x1, 0x6, "4cf11d05"}, {0x6, 0x10, "225941d23d9b78183d60173060ad"}, {0x1, 0xe, "3ec7aa6dacaf6d0abfbd9af6"}, {0x0, 0x7, "fd9190745f"}]}, @ssrr={0x89, 0x1f, 0x88, [@remote, @rand_addr=0x64010102, @multicast1, @broadcast, @rand_addr=0x64010101, @private=0xa010100, @multicast1]}, @lsrr={0x83, 0x17, 0x32, [@local, @rand_addr=0x64010101, @multicast2, @empty, @remote]}, @lsrr={0x83, 0x7, 0x39, [@dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x1b, 0x7f, [@remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010102]}, @noop]}}}}}) sendto$packet(r3, &(0x7f0000000180)="1003", 0x2, 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 4.335015997s ago: executing program 3 (id=1426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004500), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000045c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c000600010000000200000008000300", @ANYRES32=0x0, @ANYBLOB="060009"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 3.290393898s ago: executing program 3 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.145387526s ago: executing program 4 (id=1428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 2.386350483s ago: executing program 2 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.138918984s ago: executing program 5 (id=1430): sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r5, 0x8000017}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000680)="8f4cd2c8fd09865e53d25ad3", 0xc}, {&(0x7f0000000440)="16e69a", 0x3}], 0x2}, 0x4) 1.011069921s ago: executing program 0 (id=1431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 317.403078ms ago: executing program 5 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fc"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) 292.547683ms ago: executing program 3 (id=1433): socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket(0xa, 0x3, 0xff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="0f9a4055734b17378245bc7508627cdef24020f8f1e1a0382fa42462cf5db927ad4de1760fa6c71f98d341adf95d", @ANYRES32, @ANYRES8=r3, @ANYRESDEC], 0xfdef) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, 0x0, 0x8000) 49.440202ms ago: executing program 5 (id=1434): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 0 (id=1435): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) kernel console output (not intermixed with test programs): ci_device speed not set [ 145.492640][ T6934] loop1: detected capacity change from 0 to 2048 [ 145.502335][ T6934] udf: Bad value for 'rootdir' [ 145.506065][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.564940][ T6938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 145.571627][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.675421][ T6938] vhci_hcd vhci_hcd.0: Device attached [ 145.725491][ T6938] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 145.732076][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.753109][ T6934] loop1: detected capacity change from 0 to 4096 [ 145.790352][ T6938] vhci_hcd vhci_hcd.0: Device attached [ 145.809597][ T6934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.915338][ T792] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 146.434769][ T6944] vhci_hcd: connection closed [ 146.435983][ T6940] vhci_hcd: connection reset by peer [ 146.455591][ T6108] vhci_hcd vhci_hcd.4: stop threads [ 146.460863][ T6108] vhci_hcd vhci_hcd.4: release socket [ 146.554677][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.573505][ T6108] vhci_hcd vhci_hcd.4: disconnect device [ 146.604880][ T6108] vhci_hcd vhci_hcd.4: stop threads [ 146.616427][ T6108] vhci_hcd vhci_hcd.4: release socket [ 146.651943][ T6108] vhci_hcd vhci_hcd.4: disconnect device [ 146.697868][ T6099] usb 3-1: USB disconnect, device number 5 [ 146.731347][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.921874][ T6957] netlink: 220 bytes leftover after parsing attributes in process `syz.3.301'. [ 146.948841][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.977862][ T6957] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 147.122833][ T6962] syzkaller0: entered promiscuous mode [ 147.151604][ T6962] syzkaller0: entered allmulticast mode [ 147.327130][ T6966] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.429651][ T6966] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.543673][ T6976] block nbd5: not configured, cannot reconfigure [ 147.573495][ T6966] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.600020][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.748188][ T6966] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.761753][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.874195][ T6987] loop5: detected capacity change from 0 to 2048 [ 147.882163][ T6987] udf: Bad value for 'rootdir' [ 148.067367][ T5923] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 148.193301][ T6105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.270787][ T6987] loop5: detected capacity change from 0 to 4096 [ 148.348788][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.393989][ T6987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.448913][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.658082][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.844371][ T6108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.064130][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.678085][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.765212][ T7040] trusted_key: syz.5.331 sent an empty control message without MSG_MORE. [ 149.837891][ T7042] syzkaller0: entered promiscuous mode [ 149.843681][ T7042] syzkaller0: entered allmulticast mode [ 150.187719][ T7052] syzkaller0: entered promiscuous mode [ 150.197717][ T7052] syzkaller0: entered allmulticast mode [ 150.252962][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.5.338'. [ 150.379876][ T7055] syz_tun: entered promiscuous mode [ 150.403078][ T7055] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 150.433646][ T7055] hsr1: entered allmulticast mode [ 150.445395][ T7055] dummy0: entered allmulticast mode [ 150.461473][ T7055] syz_tun: entered allmulticast mode [ 150.557099][ T7065] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 150.563659][ T7065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.613918][ T7065] vhci_hcd vhci_hcd.0: Device attached [ 150.646102][ T7068] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 150.652663][ T7068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.689058][ T7068] vhci_hcd vhci_hcd.0: Device attached [ 150.706274][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.722636][ T7076] netlink: 164 bytes leftover after parsing attributes in process `syz.5.344'. [ 150.793239][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.847243][ T30] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 151.112077][ T792] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 151.351892][ T7066] vhci_hcd: connection reset by peer [ 151.363289][ T6108] vhci_hcd vhci_hcd.3: stop threads [ 151.372248][ T7071] vhci_hcd: connection closed [ 151.375365][ T6108] vhci_hcd vhci_hcd.3: release socket [ 151.428244][ T6108] vhci_hcd vhci_hcd.3: disconnect device [ 151.444819][ T6108] vhci_hcd vhci_hcd.3: stop threads [ 151.458855][ T6108] vhci_hcd vhci_hcd.3: release socket [ 151.470615][ T6108] vhci_hcd vhci_hcd.3: disconnect device [ 151.747071][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.143435][ T7104] syzkaller0: entered promiscuous mode [ 152.172086][ T7104] syzkaller0: entered allmulticast mode [ 152.335483][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.361'. [ 152.788006][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.060101][ T7141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 153.066690][ T7141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.090963][ T7141] vhci_hcd vhci_hcd.0: Device attached [ 153.325604][ T5922] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 153.834403][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.038417][ T7146] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 154.044995][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.053530][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 154.059330][ T7149] vhci_hcd: connection closed [ 154.114526][ T12] vhci_hcd vhci_hcd.2: stop threads [ 154.147506][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.165724][ T12] vhci_hcd vhci_hcd.2: release socket [ 154.175361][ T7142] vhci_hcd: connection reset by peer [ 154.183413][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 154.215338][ T12] vhci_hcd vhci_hcd.2: stop threads [ 154.221318][ T12] vhci_hcd vhci_hcd.2: release socket [ 154.231307][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 154.865736][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.073058][ T7174] syzkaller0: entered promiscuous mode [ 155.090219][ T7174] syzkaller0: entered allmulticast mode [ 155.104315][ T7180] tipc: Started in network mode [ 155.126578][ T7180] tipc: Node identity 2e0ab27fb03e, cluster identity 4711 [ 155.145733][ T7180] tipc: Enabled bearer , priority 0 [ 155.426929][ T7183] syzkaller0: entered promiscuous mode [ 155.432607][ T7183] syzkaller0: entered allmulticast mode [ 155.485581][ T7180] tipc: Resetting bearer [ 155.657059][ T7178] tipc: Resetting bearer [ 155.727503][ T7178] tipc: Disabling bearer [ 155.822926][ T7189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 155.871526][ T7189] Bluetooth: MGMT ver 1.23 [ 155.926077][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.976101][ T30] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 156.306419][ T7206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 156.313055][ T7206] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.337337][ T7204] loop3: detected capacity change from 0 to 2048 [ 156.360527][ T7204] udf: Bad value for 'rootdir' [ 156.370034][ T7206] vhci_hcd vhci_hcd.0: Device attached [ 156.460103][ T7215] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 156.466686][ T7215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.494418][ T7215] vhci_hcd vhci_hcd.0: Device attached [ 156.546080][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.554316][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.563128][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.679080][ T792] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 156.946946][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.070087][ T7207] vhci_hcd: connection reset by peer [ 157.076204][ T7216] vhci_hcd: connection closed [ 157.085127][ T6108] vhci_hcd vhci_hcd.0: stop threads [ 157.118701][ T7204] loop3: detected capacity change from 0 to 4096 [ 157.125483][ T6108] vhci_hcd vhci_hcd.0: release socket [ 157.138655][ T6108] vhci_hcd vhci_hcd.0: disconnect device [ 157.154661][ T6108] vhci_hcd vhci_hcd.0: stop threads [ 157.174789][ T6108] vhci_hcd vhci_hcd.0: release socket [ 157.187600][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.204595][ T6108] vhci_hcd vhci_hcd.0: disconnect device [ 157.238243][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.573921][ T7233] tipc: Started in network mode [ 157.586144][ T7233] tipc: Node identity 8282824a33c9, cluster identity 4711 [ 157.965748][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 157.986266][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.046827][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 158.077755][ T7233] tipc: Enabled bearer , priority 0 [ 158.153690][ T7238] syzkaller0: entered promiscuous mode [ 158.169104][ T7237] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 158.232473][ T7237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.408'. [ 158.242182][ T7238] syzkaller0: entered allmulticast mode [ 158.257887][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.444476][ T7238] tipc: Resetting bearer [ 158.455465][ T5922] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 158.673472][ T7244] syzkaller0: entered promiscuous mode [ 158.700877][ T7244] syzkaller0: entered allmulticast mode [ 158.775960][ T7231] tipc: Resetting bearer [ 158.917634][ T7231] tipc: Disabling bearer [ 159.001993][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 159.026442][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.109161][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.336338][ T7277] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 159.343012][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.369407][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 159.390465][ T7277] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 159.397113][ T7277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.405317][ T7277] vhci_hcd vhci_hcd.0: Device attached [ 159.807696][ T6099] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 159.988091][ T7278] vhci_hcd: connection reset by peer [ 159.993493][ T7284] vhci_hcd: connection closed [ 159.994210][ T6106] vhci_hcd vhci_hcd.1: stop threads [ 160.011586][ T6106] vhci_hcd vhci_hcd.1: release socket [ 160.018556][ T7289] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.422'. [ 160.030081][ T6106] vhci_hcd vhci_hcd.1: disconnect device [ 160.036859][ T6106] vhci_hcd vhci_hcd.1: stop threads [ 160.042226][ T6106] vhci_hcd vhci_hcd.1: release socket [ 160.050865][ T6106] vhci_hcd vhci_hcd.1: disconnect device [ 160.066522][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.106493][ T7293] binder: 7274:7293 ioctl 402c5639 200000000000 returned -22 [ 161.105789][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.559935][ T7301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.581208][ T7301] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.698411][ T7301] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.783147][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 161.819295][ T7301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.844139][ T7301] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.909438][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 161.947012][ T7301] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.002303][ T7322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 162.021449][ T7301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.065355][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 162.071554][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 162.091922][ T7301] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.145711][ T792] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 162.146205][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.161702][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.173066][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.195344][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.204774][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.215023][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.241394][ T7301] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.414719][ T7301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.434973][ T7301] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.530234][ T7301] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.576767][ T7301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.596311][ T7301] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.641046][ T7301] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.673803][ T7301] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 162.712909][ T7301] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 162.776349][ T7352] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.445'. [ 162.798801][ T7352] binder: 7347:7352 ioctl 402c5639 200000000000 returned -22 [ 162.943587][ T7301] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 163.267630][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.588231][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.825745][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.914736][ T7381] netlink: 44 bytes leftover after parsing attributes in process `syz.5.455'. [ 164.066230][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.305644][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.465394][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 164.627043][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.705399][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.020488][ T6099] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 165.220607][ T7417] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.465'. [ 165.266651][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.279656][ T7408] syzkaller0: entered promiscuous mode [ 165.284345][ T7420] binder: 7410:7420 ioctl 402c5639 200000000000 returned -22 [ 165.314497][ T7408] syzkaller0: entered allmulticast mode [ 165.360505][ T7423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.468'. [ 165.376089][ T7407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.387756][ T7407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.403260][ T7423] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.427138][ T7407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.474049][ T7407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.536309][ T7407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.566925][ T7407] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 166.148585][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.158377][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.171236][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.366432][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 167.062929][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 167.276079][ T7458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.309860][ T7467] netlink: 168 bytes leftover after parsing attributes in process `syz.0.484'. [ 167.348001][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.357022][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.369768][ T7467] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 167.383149][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.427135][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.427172][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.435016][ T6105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.497128][ T7458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.508153][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 167.508202][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.590629][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 167.590637][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.679651][ T7458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.931183][ T7458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.169759][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 168.237364][ T6107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.277276][ T6107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.324066][ T6107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.374199][ T6105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.468374][ T7477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.500368][ T7477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.521654][ T7477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.580956][ T7477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.581522][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.495'. [ 168.596406][ T7477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.612043][ T7477] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 168.988013][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 169.079943][ T7505] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.497'. [ 169.132549][ T7508] binder: 7499:7508 ioctl 402c5639 200000000000 returned -22 [ 169.403226][ T7514] netlink: 168 bytes leftover after parsing attributes in process `syz.5.503'. [ 169.763768][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.507'. [ 169.909295][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.076885][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.511'. [ 170.420519][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 170.445408][ T7543] syzkaller0: entered promiscuous mode [ 170.452319][ T7543] syzkaller0: entered allmulticast mode [ 170.460289][ T7547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.517'. [ 170.547081][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.547143][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.626939][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 170.629848][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 170.639232][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.718820][ T7553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.519'. [ 170.729722][ T7553] net_ratelimit: 3 callbacks suppressed [ 170.729744][ T7553] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.028380][ T7565] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.523'. [ 171.076994][ T7565] binder: 7559:7565 ioctl 402c5639 200000000000 returned -22 [ 171.084637][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 171.267213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.906301][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.918037][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.931330][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.092876][ T7575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.129528][ T7575] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.223027][ T7575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.267817][ T7575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.307816][ T7575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.335338][ T7575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 172.417936][ T7609] loop4: detected capacity change from 0 to 2048 [ 172.435934][ T7609] udf: Bad value for 'rootdir' [ 172.554563][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.568001][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.587094][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.730915][ T7609] loop4: detected capacity change from 0 to 4096 [ 172.849325][ T7609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.122077][ T7618] tipc: Started in network mode [ 173.138332][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.146945][ T7618] tipc: Node identity 2e8ff64f8798, cluster identity 4711 [ 173.178668][ T7618] tipc: Enabled bearer , priority 0 [ 173.246367][ T7619] syzkaller0: entered promiscuous mode [ 173.285921][ T7619] syzkaller0: entered allmulticast mode [ 173.469833][ T7616] tipc: Resetting bearer [ 173.511092][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.556899][ T7616] tipc: Disabling bearer [ 173.629173][ T7633] binder: 7627:7633 ioctl 402c5639 200000000000 returned -22 [ 173.665536][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.147479][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.225676][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.305744][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 174.356331][ T7650] syzkaller0: entered promiscuous mode [ 174.381312][ T7650] syzkaller0: entered allmulticast mode [ 174.387329][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 174.393666][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.413335][ T7663] __nla_validate_parse: 6 callbacks suppressed [ 174.413359][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 174.707809][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.815678][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.840606][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 176.866010][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.894365][ T7675] tipc: Enabling of bearer rejected, failed to enable media [ 176.974183][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 177.026910][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.036725][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.065659][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.206616][ T7707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.222836][ T7707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.243571][ T7707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.314439][ T7707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.355423][ T7707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.382854][ T7707] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 177.907667][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.916667][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.930860][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.027771][ T7732] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.572'. [ 178.069588][ T7732] binder: 7730:7732 ioctl 402c5639 200000000000 returned -22 [ 178.140081][ T7739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.577'. [ 178.658338][ T7748] syzkaller0: entered promiscuous mode [ 178.726972][ T7748] syzkaller0: entered allmulticast mode [ 178.946262][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.125734][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 179.267018][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.273282][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.273347][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.346894][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 179.425314][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 179.425439][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.997495][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.900734][ T7756] tipc: Started in network mode [ 180.906459][ T7756] tipc: Node identity fa9e2bc409fd, cluster identity 4711 [ 180.913743][ T7756] tipc: Enabled bearer , priority 0 [ 180.950309][ T7761] syzkaller0: entered promiscuous mode [ 180.966909][ T7761] syzkaller0: entered allmulticast mode [ 181.011689][ T7779] tipc: Resetting bearer [ 181.028359][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.035910][ T7750] tipc: Resetting bearer [ 181.070137][ T7750] tipc: Disabling bearer [ 181.094411][ T7774] syzkaller0: entered promiscuous mode [ 181.104154][ T7774] syzkaller0: entered allmulticast mode [ 181.402797][ T7815] netlink: 64 bytes leftover after parsing attributes in process `syz.2.592'. [ 181.509426][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.519031][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.528523][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.538556][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.563293][ T7822] netlink: 248 bytes leftover after parsing attributes in process `syz.4.595'. [ 181.817515][ T7834] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.598'. [ 181.851626][ T7834] binder: 7827:7834 ioctl 402c5639 200000000000 returned -22 [ 182.125437][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.236473][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.267621][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.276494][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.722017][ T7835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.776024][ T7835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.839343][ T7835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.847399][ T7835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.854399][ T7835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.977960][ T7835] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 183.041456][ T7852] netlink: 156 bytes leftover after parsing attributes in process `syz.5.603'. [ 183.110264][ T7852] openvswitch: netlink: EtherType 0 is less than min 600 [ 183.466569][ T7857] syzkaller0: entered promiscuous mode [ 183.472226][ T7857] syzkaller0: entered allmulticast mode [ 183.656237][ T7862] tipc: Enabled bearer , priority 0 [ 183.674784][ T7860] syzkaller0: entered promiscuous mode [ 183.681555][ T7860] syzkaller0: entered allmulticast mode [ 183.717692][ T7864] tipc: Enabled bearer , priority 0 [ 183.731840][ T7860] tipc: Resetting bearer [ 183.752048][ T7859] tipc: Resetting bearer [ 183.772383][ T7859] tipc: Disabling bearer [ 183.798882][ T7864] syzkaller0: entered promiscuous mode [ 183.805452][ T7864] syzkaller0: entered allmulticast mode [ 183.865844][ T7864] tipc: Resetting bearer [ 183.900114][ T7863] tipc: Resetting bearer [ 184.036850][ T7863] tipc: Disabling bearer [ 184.095371][ T7869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.609'. [ 184.306470][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.653278][ T7891] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.616'. [ 184.667746][ T7891] binder: 7884:7891 ioctl 402c5639 200000000000 returned -22 [ 184.736476][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 184.795819][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.866697][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.873062][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 184.945357][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.951494][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 185.884017][ T7909] tipc: Enabled bearer , priority 0 [ 185.896404][ T7909] syzkaller0: entered promiscuous mode [ 185.901978][ T7909] syzkaller0: entered allmulticast mode [ 185.917590][ T7909] tipc: Resetting bearer [ 186.016402][ T7908] tipc: Resetting bearer [ 186.130244][ T7908] tipc: Disabling bearer [ 186.169572][ T7913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.624'. [ 186.227035][ T7917] tipc: Enabled bearer , priority 0 [ 186.260580][ T7917] syzkaller0: entered promiscuous mode [ 186.325895][ T7917] syzkaller0: entered allmulticast mode [ 186.427349][ T7917] tipc: Resetting bearer [ 186.456023][ T7923] syzkaller0: entered promiscuous mode [ 186.487415][ T7923] syzkaller0: entered allmulticast mode [ 186.527613][ T7916] tipc: Resetting bearer [ 186.547500][ T6036] net_ratelimit: 5 callbacks suppressed [ 186.547524][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.660213][ T7916] tipc: Disabling bearer [ 186.759306][ T7933] netlink: 156 bytes leftover after parsing attributes in process `syz.4.632'. [ 187.248972][ T7946] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.636'. [ 187.265814][ T3458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.274990][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.280690][ T7946] binder: 7940:7946 ioctl 402c5639 200000000000 returned -22 [ 187.290698][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.299063][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.500226][ T7952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.641'. [ 188.369157][ T7950] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.389441][ T7976] netlink: 156 bytes leftover after parsing attributes in process `syz.5.647'. [ 188.427857][ T7950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.499770][ T7950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.570791][ T7950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.603680][ T7950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.634475][ T7950] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 189.380661][ T7998] syzkaller0: entered promiscuous mode [ 189.386506][ T7998] syzkaller0: entered allmulticast mode [ 189.515182][ T8003] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 189.585908][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.589161][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.0.655'. [ 189.817673][ T8010] ip6t_srh: unknown srh invflags BA61 [ 189.847098][ T8010] netlink: 120 bytes leftover after parsing attributes in process `syz.3.658'. [ 189.909007][ T8010] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.952517][ T8013] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.659'. [ 190.005049][ T8015] binder: 8011:8015 ioctl 402c5639 200000000000 returned -22 [ 190.059653][ T8010] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.171383][ T8010] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.255689][ T8010] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.465841][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.545547][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.581853][ T3512] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.609178][ T3512] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.625894][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 190.633758][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.635801][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 190.689585][ T8023] tipc: Enabled bearer , priority 0 [ 190.734185][ T8026] syzkaller0: entered promiscuous mode [ 190.769613][ T8026] syzkaller0: entered allmulticast mode [ 190.814233][ T6108] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.842771][ T8023] tipc: Resetting bearer [ 190.870288][ T8022] tipc: Resetting bearer [ 190.908252][ T8022] tipc: Disabling bearer [ 190.966558][ T3512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.261125][ T8037] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 191.267712][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.341030][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 191.368680][ T8044] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 191.375238][ T8044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.432443][ T8044] vhci_hcd vhci_hcd.0: Device attached [ 191.902691][ T792] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 191.912622][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.923463][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.971327][ T8045] vhci_hcd: connection closed [ 191.971831][ T8039] vhci_hcd: connection reset by peer [ 191.972039][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.017925][ T3512] vhci_hcd vhci_hcd.3: stop threads [ 192.030688][ T3512] vhci_hcd vhci_hcd.3: release socket [ 192.046558][ T3512] vhci_hcd vhci_hcd.3: disconnect device [ 192.082108][ T3512] vhci_hcd vhci_hcd.3: stop threads [ 192.107827][ T3512] vhci_hcd vhci_hcd.3: release socket [ 192.150340][ T3512] vhci_hcd vhci_hcd.3: disconnect device [ 192.486783][ T8058] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 192.516260][ T8058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.672'. [ 192.935980][ T8052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.996623][ T8052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 193.038548][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.075611][ T8052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.082594][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.091678][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.101618][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.133244][ T8052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.155366][ T8052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.304117][ T8052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 193.570527][ T8083] netlink: 248 bytes leftover after parsing attributes in process `syz.0.680'. [ 193.650344][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'. [ 193.669864][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.674188][ T6108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.676311][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.691616][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.700856][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.709482][ T8085] netlink: 'syz.5.681': attribute type 1 has an invalid length. [ 193.753507][ T8085] netlink: 224 bytes leftover after parsing attributes in process `syz.5.681'. [ 193.813133][ T8096] syzkaller0: entered promiscuous mode [ 193.821366][ T8096] syzkaller0: entered allmulticast mode [ 193.909044][ T8097] syzkaller1: entered promiscuous mode [ 193.920092][ T8097] syzkaller1: entered allmulticast mode [ 194.047393][ T8094] can: request_module (can-proto-5) failed. [ 194.235606][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.463969][ T8087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.575335][ T8112] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 194.581898][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.633639][ T8112] vhci_hcd vhci_hcd.0: Device attached [ 194.640607][ T8115] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 194.647148][ T8115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.654986][ T8115] vhci_hcd vhci_hcd.0: Device attached [ 194.965370][ T6036] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 195.013988][ T8113] vhci_hcd: connection reset by peer [ 195.024006][ T8116] vhci_hcd: connection closed [ 195.026795][ T3458] vhci_hcd vhci_hcd.5: stop threads [ 195.037327][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 195.076048][ T3458] vhci_hcd vhci_hcd.5: release socket [ 195.105462][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.105653][ T3458] vhci_hcd vhci_hcd.5: disconnect device [ 195.132392][ T8130] tipc: Enabled bearer , priority 0 [ 195.146859][ T3458] vhci_hcd vhci_hcd.5: stop threads [ 195.154471][ T3458] vhci_hcd vhci_hcd.5: release socket [ 195.177180][ T8130] syzkaller0: entered promiscuous mode [ 195.182744][ T8130] syzkaller0: entered allmulticast mode [ 195.195740][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.203280][ T3458] vhci_hcd vhci_hcd.5: disconnect device [ 195.203801][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 195.213375][ T8138] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 195.249424][ T8138] netlink: 224 bytes leftover after parsing attributes in process `syz.4.694'. [ 195.338539][ T8130] tipc: Resetting bearer [ 195.345660][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 195.416288][ T8129] tipc: Resetting bearer [ 195.473165][ T8129] tipc: Disabling bearer [ 195.637307][ T8140] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.835746][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 195.979556][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 196.029870][ T8154] ip6t_srh: unknown srh invflags BA61 [ 196.029875][ T30] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.046714][ T8154] netlink: 120 bytes leftover after parsing attributes in process `syz.5.697'. [ 196.055018][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.085342][ T30] usb 1-1: Product: syz [ 196.089600][ T30] usb 1-1: Manufacturer: syz [ 196.094261][ T30] usb 1-1: SerialNumber: syz [ 196.096273][ T8140] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.202013][ T8154] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.258183][ T8140] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.339931][ T30] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 196.362027][ T30] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 196.376148][ T8154] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.407294][ T30] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 196.419094][ T8140] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.489897][ T8154] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.512299][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 196.591912][ T8154] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.666971][ T163] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.703763][ T6106] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.763480][ T6106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.823937][ T6106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.927264][ T6106] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.946068][ T6106] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.972618][ T3458] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.015657][ T792] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 197.042761][ T3458] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.175146][ T8178] tipc: Enabled bearer , priority 0 [ 197.202549][ T8178] syzkaller0: entered promiscuous mode [ 197.219740][ T8178] syzkaller0: entered allmulticast mode [ 197.271313][ T8178] tipc: Resetting bearer [ 197.280304][ T8176] tipc: Resetting bearer [ 197.287101][ T8181] loop4: detected capacity change from 0 to 4096 [ 197.308948][ T8176] tipc: Disabling bearer [ 197.332856][ T8181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.429831][ T8188] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 197.436506][ T8188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.466619][ T8188] vhci_hcd vhci_hcd.0: Device attached [ 197.484089][ T8191] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 197.490698][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.508288][ T3512] net_ratelimit: 6 callbacks suppressed [ 197.508313][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.515558][ T8191] vhci_hcd vhci_hcd.0: Device attached [ 197.530439][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.545523][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.706286][ T5935] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 198.105193][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.187159][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.210170][ T8192] vhci_hcd: connection closed [ 198.210671][ T163] vhci_hcd vhci_hcd.1: stop threads [ 198.223608][ T8189] vhci_hcd: connection reset by peer [ 198.228542][ T163] vhci_hcd vhci_hcd.1: release socket [ 198.249276][ T163] vhci_hcd vhci_hcd.1: disconnect device [ 198.309596][ T163] vhci_hcd vhci_hcd.1: stop threads [ 198.322504][ T163] vhci_hcd vhci_hcd.1: release socket [ 198.336254][ T163] vhci_hcd vhci_hcd.1: disconnect device [ 198.511155][ T5922] usb 1-1: USB disconnect, device number 2 [ 198.836170][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.844643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.919152][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.996004][ T8221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.010853][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.054286][ T8221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.158535][ T8231] netlink: 'syz.4.726': attribute type 3 has an invalid length. [ 199.168220][ T8231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.726'. [ 199.224861][ T8232] loop0: detected capacity change from 0 to 2048 [ 199.251502][ T8232] udf: Bad value for 'rootdir' [ 199.263474][ T8220] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.352407][ T8234] syzkaller0: entered promiscuous mode [ 199.369396][ T8234] syzkaller0: entered allmulticast mode [ 199.513652][ T8232] loop0: detected capacity change from 0 to 4096 [ 199.594376][ T8232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.652622][ T8220] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.847002][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.903166][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.018403][ T8220] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.042083][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 200.063010][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.075394][ T6036] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 200.102398][ T5923] usb 4-1: Product: syz [ 200.115379][ T5923] usb 4-1: Manufacturer: syz [ 200.117107][ T8248] syzkaller1: entered promiscuous mode [ 200.127806][ T5923] usb 4-1: SerialNumber: syz [ 200.147498][ T8248] syzkaller1: entered allmulticast mode [ 200.191176][ T8220] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.361451][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 200.397322][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.436692][ T5923] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 200.440439][ T6106] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.484940][ T8265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 200.491707][ T8265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.501855][ T3512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.510943][ T8265] vhci_hcd vhci_hcd.0: Device attached [ 200.552283][ T3512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.601468][ T8265] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 200.608083][ T8265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.626269][ T8265] vhci_hcd vhci_hcd.0: Device attached [ 200.665294][ T3458] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.742523][ T8268] vhci_hcd: connection closed [ 200.743456][ T8266] vhci_hcd: connection closed [ 200.750941][ T3458] vhci_hcd vhci_hcd.4: stop threads [ 200.755509][ T10] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 200.760771][ T3458] vhci_hcd vhci_hcd.4: release socket [ 200.773904][ T8267] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 200.808679][ T3458] vhci_hcd vhci_hcd.4: disconnect device [ 200.841540][ T3458] vhci_hcd vhci_hcd.4: stop threads [ 200.855742][ T3458] vhci_hcd vhci_hcd.4: release socket [ 200.861445][ T3458] vhci_hcd vhci_hcd.4: disconnect device [ 201.163957][ T8287] loop5: detected capacity change from 0 to 2048 [ 201.187021][ T8287] udf: Bad value for 'rootdir' [ 201.410410][ T8287] loop5: detected capacity change from 0 to 512 [ 201.448818][ T8287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.521783][ T8287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.585535][ T8287] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.668443][ T8287] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.744: corrupted inode contents [ 201.684329][ T8287] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.744: mark_inode_dirty error [ 201.731082][ T8287] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.744: corrupted inode contents [ 201.762984][ T8287] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.744: mark_inode_dirty error [ 201.809515][ T8302] EXT4-fs warning (device loop5): ext4_es_cache_extent:1079: inode #2: comm syz.5.744: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 201.809515][ T8302] [ 201.843456][ T8302] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.744: corrupted inode contents [ 201.858288][ T8302] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.744: mark_inode_dirty error [ 201.872083][ T8302] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 201.881035][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 202.549226][ T30] net_ratelimit: 19 callbacks suppressed [ 202.549252][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.553163][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.632044][ T5923] usb 4-1: USB disconnect, device number 3 [ 202.706736][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.720654][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.735491][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.959131][ T8321] tipc: Enabled bearer , priority 0 [ 203.065031][ T8321] syzkaller0: entered promiscuous mode [ 203.098823][ T8321] syzkaller0: entered allmulticast mode [ 203.120381][ T8333] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 203.126959][ T8333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.175145][ T8338] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 203.181719][ T8338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.219142][ T8321] tipc: Resetting bearer [ 203.249417][ T8333] vhci_hcd vhci_hcd.0: Device attached [ 203.255435][ T5935] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 203.271685][ T8318] tipc: Resetting bearer [ 203.299346][ T8338] vhci_hcd vhci_hcd.0: Device attached [ 203.534565][ T8318] tipc: Disabling bearer [ 203.586891][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.732473][ T8346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.741528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.791305][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 203.799810][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 204.007650][ T8339] vhci_hcd: connection closed [ 204.008184][ T8334] vhci_hcd: connection closed [ 204.013099][ T3512] vhci_hcd vhci_hcd.4: stop threads [ 204.043501][ T3512] vhci_hcd vhci_hcd.4: release socket [ 204.053878][ T3512] vhci_hcd vhci_hcd.4: disconnect device [ 204.068918][ T8354] loop0: detected capacity change from 0 to 2048 [ 204.088037][ T8354] udf: Bad value for 'rootdir' [ 204.092959][ T3512] vhci_hcd vhci_hcd.4: stop threads [ 204.108494][ T3512] vhci_hcd vhci_hcd.4: release socket [ 204.120900][ T3512] vhci_hcd vhci_hcd.4: disconnect device [ 204.293556][ T8354] loop0: detected capacity change from 0 to 4096 [ 204.326763][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.426650][ T8362] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 204.535345][ T5979] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 204.635721][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.710256][ T5979] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.733382][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.770441][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.791267][ T5979] usb 6-1: Product: syz [ 204.807172][ T5979] usb 6-1: Manufacturer: syz [ 204.835379][ T5979] usb 6-1: SerialNumber: syz [ 205.066813][ T5979] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 205.120090][ T5979] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 205.171797][ T5979] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.260321][ T5979] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 205.297614][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.517825][ T8388] ip6t_srh: unknown srh invflags BA61 [ 205.534845][ T8388] netlink: 120 bytes leftover after parsing attributes in process `syz.4.782'. [ 205.733476][ T8400] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 205.740073][ T8400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.765665][ T8400] vhci_hcd vhci_hcd.0: Device attached [ 205.804425][ T8400] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 205.811011][ T8400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.829425][ T8400] vhci_hcd vhci_hcd.0: Device attached [ 205.895639][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 206.041443][ T792] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 206.058417][ T8407] loop4: detected capacity change from 0 to 2048 [ 206.084755][ T8407] udf: Bad value for 'rootdir' [ 206.218529][ T8413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.789'. [ 206.566587][ T8407] loop4: detected capacity change from 0 to 4096 [ 206.589079][ T8404] vhci_hcd: connection closed [ 206.589533][ T6106] vhci_hcd vhci_hcd.0: stop threads [ 206.601793][ T6106] vhci_hcd vhci_hcd.0: release socket [ 206.602722][ T8384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.613344][ T8384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.619464][ T8384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.625538][ T8384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.631668][ T8384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.637767][ T8384] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 206.674471][ T6106] vhci_hcd vhci_hcd.0: disconnect device [ 206.739106][ T8401] vhci_hcd: connection reset by peer [ 206.758061][ T6106] vhci_hcd vhci_hcd.0: stop threads [ 206.788983][ T8407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.815364][ T6106] vhci_hcd vhci_hcd.0: release socket [ 206.820941][ T6106] vhci_hcd vhci_hcd.0: disconnect device [ 207.103169][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.204555][ T5224] usb 6-1: USB disconnect, device number 3 [ 207.589612][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.657669][ T8444] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 207.667505][ T8439] syzkaller0: entered promiscuous mode [ 207.673008][ T8439] syzkaller0: entered allmulticast mode [ 207.713996][ T8444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.802'. [ 207.728201][ T8440] tipc: Enabled bearer , priority 0 [ 207.745865][ T5923] net_ratelimit: 4 callbacks suppressed [ 207.745892][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.749358][ T8440] syzkaller0: entered promiscuous mode [ 207.777130][ T8440] syzkaller0: entered allmulticast mode [ 207.869220][ T8447] can: request_module (can-proto-5) failed. [ 207.930444][ T8451] tipc: Resetting bearer [ 207.954724][ T8449] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.020328][ T8437] tipc: Resetting bearer [ 208.052257][ T8437] tipc: Disabling bearer [ 208.088294][ T8449] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.228066][ T8449] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.307406][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.316574][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.325342][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.351948][ T8449] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.385967][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.396834][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.407262][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.515816][ T8452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.523015][ T8452] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.551447][ T8452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.582906][ T8452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.588480][ T3512] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.635475][ T8452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.650518][ T6106] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.665554][ T8452] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 208.793178][ T3512] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.837462][ T3512] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.933757][ T8469] loop0: detected capacity change from 0 to 2048 [ 208.983685][ T8469] udf: Bad value for 'rootdir' [ 209.083239][ T8472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 209.089819][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.091911][ T8478] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 209.106127][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 209.135597][ T8478] netlink: 124 bytes leftover after parsing attributes in process `syz.4.812'. [ 209.163269][ T8472] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 209.169854][ T8472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.193682][ T8469] loop0: detected capacity change from 0 to 4096 [ 209.227922][ T8472] vhci_hcd vhci_hcd.0: Device attached [ 209.235401][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.259480][ T8469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.423654][ T5922] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 209.817281][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 209.841551][ T8480] vhci_hcd: connection closed [ 209.845425][ T8474] vhci_hcd: connection reset by peer [ 209.860584][ T37] vhci_hcd vhci_hcd.3: stop threads [ 209.870390][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.887098][ T37] vhci_hcd vhci_hcd.3: release socket [ 209.892603][ T5923] usb 3-1: Product: syz [ 209.907959][ T5923] usb 3-1: Manufacturer: syz [ 209.926442][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 209.985834][ T37] vhci_hcd vhci_hcd.3: stop threads [ 209.991603][ T5923] usb 3-1: SerialNumber: syz [ 210.001487][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.028596][ T37] vhci_hcd vhci_hcd.3: release socket [ 210.054619][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 210.184588][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.227239][ T5923] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 210.246108][ T5923] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 210.304098][ T5923] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 210.368827][ T5923] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 210.545306][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.625428][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.625453][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 210.625476][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.705293][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 211.048714][ T8506] syzkaller0: entered promiscuous mode [ 211.095106][ T8506] syzkaller0: entered allmulticast mode [ 211.127650][ T8510] netlink: 248 bytes leftover after parsing attributes in process `syz.1.823'. [ 211.175372][ T792] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 211.917081][ T5224] usb 3-1: USB disconnect, device number 6 [ 211.994392][ T8517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.019107][ T8517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.047180][ T8517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.075033][ T8517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.106839][ T8543] ip6t_srh: unknown srh invflags BA61 [ 212.127043][ T8517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.135587][ T8543] netlink: 120 bytes leftover after parsing attributes in process `syz.0.828'. [ 212.166351][ T8517] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 212.328309][ T8543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.665652][ T8543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.888065][ T8543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.012210][ T8570] syzkaller0: entered promiscuous mode [ 213.020176][ T8570] syzkaller0: entered allmulticast mode [ 213.059925][ T8543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.233956][ T3512] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.260407][ T3512] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.287039][ T3458] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.325624][ T5979] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.337861][ T6106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.425424][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.480873][ T5979] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.496042][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.514823][ T5979] usb 2-1: Product: syz [ 213.522589][ T5979] usb 2-1: Manufacturer: syz [ 213.537561][ T5979] usb 2-1: SerialNumber: syz [ 213.764315][ T5979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 213.805736][ T5979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 213.845446][ T5979] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 213.899875][ T5979] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 214.069045][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.069063][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.147610][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.153682][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 214.166695][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.176462][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.186785][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.226319][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 214.727262][ T8634] syzkaller0: entered promiscuous mode [ 214.732912][ T8634] syzkaller0: entered allmulticast mode [ 214.786345][ T6107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.806421][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.815272][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.849673][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.853197][ T8638] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.862'. [ 214.889656][ T5922] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 214.922322][ T8637] binder: 8632:8637 ioctl 402c5639 200000000000 returned -22 [ 215.175783][ T8648] tipc: Enabled bearer , priority 0 [ 215.199329][ T8648] syzkaller0: entered promiscuous mode [ 215.217124][ T8648] syzkaller0: entered allmulticast mode [ 215.245099][ T8648] tipc: Resetting bearer [ 215.256462][ T8647] tipc: Resetting bearer [ 215.274183][ T8647] tipc: Disabling bearer [ 215.782611][ T8670] netlink: 60 bytes leftover after parsing attributes in process `syz.5.879'. [ 215.893137][ T8676] netem: change failed [ 215.905772][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.093578][ T30] usb 2-1: USB disconnect, device number 5 [ 216.688921][ T8702] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.889'. [ 216.799247][ T8706] binder: 8694:8706 ioctl 402c5639 200000000000 returned -22 [ 216.799526][ T8699] syzkaller0: entered promiscuous mode [ 216.813989][ T8699] syzkaller0: entered allmulticast mode [ 216.859642][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.894'. [ 216.945579][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.845378][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 218.017638][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.047534][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.065461][ T5923] usb 2-1: Product: syz [ 218.069931][ T5923] usb 2-1: Manufacturer: syz [ 218.074897][ T5923] usb 2-1: SerialNumber: syz [ 218.284592][ T8741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.900'. [ 218.345765][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 218.385400][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.437315][ T5923] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 218.931349][ T8762] loop0: detected capacity change from 0 to 2048 [ 218.948268][ T8762] udf: Bad value for 'rootdir' [ 218.990407][ T8768] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.908'. [ 219.001215][ T8768] binder: 8763:8768 ioctl 402c5639 200000000000 returned -22 [ 219.026214][ T5922] net_ratelimit: 6 callbacks suppressed [ 219.026239][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.043625][ T8769] netlink: 60 bytes leftover after parsing attributes in process `syz.5.910'. [ 219.172179][ T8762] loop0: detected capacity change from 0 to 4096 [ 219.202242][ T8762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.245051][ T8778] ip6t_srh: unknown srh invflags BA61 [ 219.252575][ T8778] netlink: 120 bytes leftover after parsing attributes in process `syz.5.912'. [ 219.273833][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.282304][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.311698][ T8773] syzkaller0: entered promiscuous mode [ 219.328971][ T8773] syzkaller0: entered allmulticast mode [ 219.346499][ T8778] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.044182][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.077716][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.306480][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.317297][ T8785] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.915:8785 [ 220.550589][ T5979] usb 2-1: USB disconnect, device number 6 [ 220.847772][ T8803] netlink: 248 bytes leftover after parsing attributes in process `syz.1.917'. [ 221.106576][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.147165][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.310396][ T8778] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.326567][ T8781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.914'. [ 222.404425][ T8778] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.556212][ T8825] netlink: 64 bytes leftover after parsing attributes in process `syz.4.924'. [ 222.598026][ T8778] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.693726][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 222.806348][ T6106] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.879376][ T6108] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.956164][ T6106] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.015544][ T5979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.033351][ T6106] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.181525][ T5979] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.198378][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.208428][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.210694][ T5979] usb 4-1: Product: syz [ 223.222022][ T5979] usb 4-1: Manufacturer: syz [ 223.239395][ T5979] usb 4-1: SerialNumber: syz [ 223.346070][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.413418][ T8827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.425875][ T8845] netlink: 248 bytes leftover after parsing attributes in process `syz.0.930'. [ 223.433679][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 223.476740][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 223.501588][ T5979] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 223.549886][ T5979] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 223.807600][ T8869] loop5: detected capacity change from 0 to 2048 [ 223.822489][ T8869] udf: Bad value for 'rootdir' [ 223.891132][ T8878] netlink: 64 bytes leftover after parsing attributes in process `syz.4.941'. [ 224.050347][ T8868] syzkaller0: entered promiscuous mode [ 224.056471][ T8868] syzkaller0: entered allmulticast mode [ 224.064276][ T8869] loop5: detected capacity change from 0 to 4096 [ 224.154477][ T8869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.226014][ T5915] net_ratelimit: 1 callbacks suppressed [ 224.226043][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.846451][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.982743][ T8891] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.942'. [ 225.019253][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.075569][ T8894] binder: 8884:8894 ioctl 402c5639 200000000000 returned -22 [ 225.129701][ T8895] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 225.143743][ T8895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.944'. [ 225.272893][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.719511][ T792] usb 4-1: USB disconnect, device number 4 [ 226.315877][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.554398][ T8871] syzkaller0: entered promiscuous mode [ 226.570707][ T8871] syzkaller0: entered allmulticast mode [ 227.357343][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.457742][ T8921] netlink: 248 bytes leftover after parsing attributes in process `syz.0.951'. [ 227.691383][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.952'. [ 227.777596][ T8930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.954'. [ 227.907200][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.393764][ T8960] netem: change failed [ 228.393921][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.466029][ T8963] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.964'. [ 228.479496][ T8963] binder: 8955:8963 ioctl 402c5639 200000000000 returned -22 [ 228.509045][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.966'. [ 228.528663][ T8966] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 228.535271][ T8966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.565501][ T8966] vhci_hcd vhci_hcd.0: Device attached [ 228.594412][ T8971] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 228.601028][ T8971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.645834][ T8971] vhci_hcd vhci_hcd.0: Device attached [ 228.825560][ T5923] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 228.875842][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.270595][ T8978] tipc: Enabled bearer , priority 0 [ 229.283553][ T8982] syzkaller0: entered promiscuous mode [ 229.293810][ T8972] vhci_hcd: connection closed [ 229.294273][ T3458] vhci_hcd vhci_hcd.0: stop threads [ 229.306453][ T8982] syzkaller0: entered allmulticast mode [ 229.330080][ T3458] vhci_hcd vhci_hcd.0: release socket [ 229.341065][ T8967] vhci_hcd: connection reset by peer [ 229.343063][ T3458] vhci_hcd vhci_hcd.0: disconnect device [ 229.374212][ T3458] vhci_hcd vhci_hcd.0: stop threads [ 229.382123][ T3458] vhci_hcd vhci_hcd.0: release socket [ 229.402754][ T3458] vhci_hcd vhci_hcd.0: disconnect device [ 229.435648][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.526733][ T8969] tipc: Resetting bearer [ 229.526733][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.661863][ T8969] tipc: Disabling bearer [ 229.949329][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 229.995842][ T9002] dummy0: entered promiscuous mode [ 230.014584][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 230.044334][ T9002] macvtap1: entered promiscuous mode [ 230.064616][ T9002] macvtap1: entered allmulticast mode [ 230.110480][ T9002] dummy0: entered allmulticast mode [ 230.130356][ T9005] loop2: detected capacity change from 0 to 2048 [ 230.159231][ T9005] udf: Bad value for 'rootdir' [ 230.199924][ T9003] dummy0: left allmulticast mode [ 230.205879][ T9003] dummy0: left promiscuous mode [ 230.466210][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.491446][ T9010] syzkaller0: entered promiscuous mode [ 230.509101][ T9010] syzkaller0: entered allmulticast mode [ 230.530119][ T9005] loop2: detected capacity change from 0 to 512 [ 230.559392][ T9024] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 230.583118][ T9005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.637398][ T9005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.677510][ T9005] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.699551][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.702549][ T9031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.986'. [ 230.708344][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.735839][ T9005] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.979: corrupted inode contents [ 230.748820][ T9005] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #2: comm syz.2.979: mark_inode_dirty error [ 230.770772][ T9005] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.979: corrupted inode contents [ 230.788603][ T9005] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.979: mark_inode_dirty error [ 230.806393][ T9034] EXT4-fs warning (device loop2): ext4_es_cache_extent:1079: inode #2: comm syz.2.979: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 230.806393][ T9034] [ 230.828521][ T9034] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #2: comm syz.2.979: corrupted inode contents [ 230.843242][ T9034] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.979: mark_inode_dirty error [ 230.854815][ T9034] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 230.863439][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.946449][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.955348][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.040071][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.518888][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.973800][ T9024] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.980100][ T9018] vlan2: entered allmulticast mode [ 231.994639][ T9018] bridge0: port 3(vlan2) entered blocking state [ 232.001293][ T9018] bridge0: port 3(vlan2) entered disabled state [ 232.009789][ T9018] vlan2: entered promiscuous mode [ 232.122343][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.137691][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.158343][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.169740][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.268335][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 232.401349][ T9048] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 232.407932][ T9048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.450801][ T9048] vhci_hcd vhci_hcd.0: Device attached [ 232.476404][ T9060] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 232.483235][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.532488][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 232.550570][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.695659][ T5915] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 233.011203][ T9042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.236712][ T9054] vhci_hcd: connection reset by peer [ 233.240565][ T9061] vhci_hcd: connection closed [ 233.285304][ T163] vhci_hcd vhci_hcd.2: stop threads [ 233.296884][ T163] vhci_hcd vhci_hcd.2: release socket [ 233.302417][ T163] vhci_hcd vhci_hcd.2: disconnect device [ 233.325162][ T163] vhci_hcd vhci_hcd.2: stop threads [ 233.330552][ T163] vhci_hcd vhci_hcd.2: release socket [ 233.337316][ T163] vhci_hcd vhci_hcd.2: disconnect device [ 233.595478][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.858980][ T9091] loop1: detected capacity change from 0 to 2048 [ 233.890781][ T9091] udf: Bad value for 'rootdir' [ 233.937844][ T9095] netlink: 'syz.0.1001': attribute type 9 has an invalid length. [ 233.976288][ T5923] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 233.978699][ T9095] netlink: 'syz.0.1001': attribute type 11 has an invalid length. [ 234.000682][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.014508][ T9095] netlink: 'syz.0.1001': attribute type 12 has an invalid length. [ 234.030902][ T9097] syzkaller0: entered promiscuous mode [ 234.042827][ T9095] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1001'. [ 234.056403][ T9097] syzkaller0: entered allmulticast mode [ 234.063685][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 234.150217][ T9100] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1003'. [ 234.639001][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.267309][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.520535][ T9141] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.777602][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.838049][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.845909][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.045588][ T9145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.062610][ T9145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.246658][ T9143] tipc: Enabled bearer , priority 0 [ 236.329177][ T9149] vlan2: entered allmulticast mode [ 236.334722][ T9149] bridge0: port 3(vlan2) entered blocking state [ 236.356982][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.369218][ T9149] bridge0: port 3(vlan2) entered disabled state [ 236.377025][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.395867][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.412250][ T9149] vlan2: entered promiscuous mode [ 236.418085][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.443128][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.467663][ T9156] tipc: Resetting bearer [ 236.489941][ T9174] netlink: 'syz.5.1021': attribute type 1 has an invalid length. [ 236.516937][ T3458] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.528195][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.537215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.552218][ T3458] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.581008][ T9141] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.621160][ T9142] tipc: Disabling bearer [ 236.750943][ T3458] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.769916][ T3458] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.817188][ T9178] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.835522][ T5922] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.854079][ T9178] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 236.888469][ T9181] bond1: (slave gretap1): making interface the new active one [ 236.897595][ T9181] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 236.950312][ T9162] syzkaller0: entered promiscuous mode [ 236.956116][ T9162] syzkaller0: entered allmulticast mode [ 236.973169][ T9174] macvlan2: entered promiscuous mode [ 236.981735][ T9174] macvlan2: entered allmulticast mode [ 236.988936][ T9174] bond1: entered promiscuous mode [ 236.994100][ T9174] gretap1: entered promiscuous mode [ 237.001248][ T9174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.014692][ T9174] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 237.020223][ T5922] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.037621][ T9174] bond1: left promiscuous mode [ 237.045149][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.051024][ T9174] gretap1: left promiscuous mode [ 237.055003][ T5922] usb 3-1: Product: syz [ 237.074494][ T5922] usb 3-1: Manufacturer: syz [ 237.086592][ T5922] usb 3-1: SerialNumber: syz [ 237.113741][ T9141] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.333260][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 237.345851][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.362886][ T5922] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 237.368843][ T9198] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1025'. [ 237.388069][ T9198] netlink: 'syz.5.1025': attribute type 2 has an invalid length. [ 237.400459][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1025'. [ 237.690590][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1027'. [ 237.830716][ T5915] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 238.383933][ T9141] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.851454][ T9232] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1035'. [ 238.995936][ T9236] syzkaller0: entered promiscuous mode [ 239.001714][ T9236] syzkaller0: entered allmulticast mode [ 239.287300][ T9242] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1039'. [ 239.305578][ T9242] netlink: 'syz.3.1039': attribute type 2 has an invalid length. [ 239.320683][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 239.410473][ T10] usb 3-1: USB disconnect, device number 7 [ 239.749540][ C0] net_ratelimit: 13 callbacks suppressed [ 239.749568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.854107][ T9271] syzkaller0: entered promiscuous mode [ 239.876333][ T9271] syzkaller0: entered allmulticast mode [ 239.908403][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.968987][ T9247] xt_CT: No such helper "syz1" [ 240.945525][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.308488][ T9311] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1056'. [ 241.325386][ T9311] netlink: 'syz.2.1056': attribute type 2 has an invalid length. [ 241.334375][ T792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.342225][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 241.353637][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.516044][ T792] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.525306][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.533344][ T792] usb 4-1: Product: syz [ 241.560572][ T792] usb 4-1: Manufacturer: syz [ 241.570308][ T792] usb 4-1: SerialNumber: syz [ 241.810163][ T792] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 241.859945][ T792] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 241.899472][ T792] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.947787][ T792] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 241.986282][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.063275][ T9324] syzkaller0: entered promiscuous mode [ 242.069852][ T9324] syzkaller0: entered allmulticast mode [ 243.029099][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.453011][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 243.550922][ T9368] sctp: [Deprecated]: syz.5.1069 (pid 9368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.550922][ T9368] Use struct sctp_sack_info instead [ 243.814860][ T9372] loop4: detected capacity change from 0 to 2048 [ 243.846768][ T9372] udf: Bad value for 'rootdir' [ 244.039156][ T9377] syzkaller0: entered promiscuous mode [ 244.065526][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.085416][ T9377] syzkaller0: entered allmulticast mode [ 244.102755][ T9372] loop4: detected capacity change from 0 to 4096 [ 244.155319][ T5915] usb 4-1: USB disconnect, device number 5 [ 244.212683][ T9372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.386775][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.490399][ T9382] syzkaller0: entered promiscuous mode [ 244.572125][ T9382] syzkaller0: entered allmulticast mode [ 244.800579][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.105509][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.691106][ T9422] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.1085'. [ 245.828500][ T9421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.881738][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.895588][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.904446][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.914739][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.923367][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.936637][ T9430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.945377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.025337][ T9432] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 246.031912][ T9432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.061351][ T9432] vhci_hcd vhci_hcd.0: Device attached [ 246.080346][ T9432] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 246.086890][ T9432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.113906][ T9432] vhci_hcd vhci_hcd.0: Device attached [ 246.151363][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.206065][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.575493][ T6194] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 246.680932][ T5915] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.692002][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.714879][ T9437] vhci_hcd: connection closed [ 246.715299][ T3458] vhci_hcd vhci_hcd.3: stop threads [ 246.729652][ T5915] usb 3-1: Product: syz [ 246.739780][ T9433] vhci_hcd: connection reset by peer [ 246.760005][ T3458] vhci_hcd vhci_hcd.3: release socket [ 246.770135][ T5915] usb 3-1: Manufacturer: syz [ 246.770199][ T3458] vhci_hcd vhci_hcd.3: disconnect device [ 246.795520][ T5915] usb 3-1: SerialNumber: syz [ 246.800243][ T3458] vhci_hcd vhci_hcd.3: stop threads [ 246.817412][ T3458] vhci_hcd vhci_hcd.3: release socket [ 246.833191][ T3458] vhci_hcd vhci_hcd.3: disconnect device [ 247.036810][ T5915] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 247.060074][ T5915] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 247.117178][ T5915] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 247.376801][ T9456] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1095'. [ 247.402771][ T9456] netlink: 'syz.4.1095': attribute type 2 has an invalid length. [ 247.412666][ T9451] syzkaller0: entered promiscuous mode [ 247.438002][ T9451] syzkaller0: entered allmulticast mode [ 247.450855][ T9459] sctp: [Deprecated]: syz.1.1096 (pid 9459) Use of int in max_burst socket option. [ 247.450855][ T9459] Use struct sctp_assoc_value instead [ 248.099812][ T9488] syzkaller1: entered promiscuous mode [ 248.118638][ T9488] syzkaller1: entered allmulticast mode [ 248.393710][ T9493] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 248.400293][ T9493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.426789][ T9493] vhci_hcd vhci_hcd.0: Device attached [ 248.448750][ T9493] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 248.455306][ T9493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.458381][ T9499] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1110'. [ 248.477714][ T9493] vhci_hcd vhci_hcd.0: Device attached [ 248.493099][ T9499] netlink: 'syz.0.1110': attribute type 2 has an invalid length. [ 248.825315][ T5224] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 249.198298][ T9497] vhci_hcd: connection closed [ 249.199304][ T6106] vhci_hcd vhci_hcd.4: stop threads [ 249.215469][ T9494] vhci_hcd: connection reset by peer [ 249.245442][ T6106] vhci_hcd vhci_hcd.4: release socket [ 249.251491][ T6106] vhci_hcd vhci_hcd.4: disconnect device [ 249.272285][ T6106] vhci_hcd vhci_hcd.4: stop threads [ 249.292400][ T6106] vhci_hcd vhci_hcd.4: release socket [ 249.306650][ T6106] vhci_hcd vhci_hcd.4: disconnect device [ 249.316660][ T5923] usb 3-1: USB disconnect, device number 8 [ 249.686815][ T9515] syzkaller0: entered promiscuous mode [ 249.704288][ T9515] syzkaller0: entered allmulticast mode [ 250.305697][ T5915] net_ratelimit: 10 callbacks suppressed [ 250.305724][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.478446][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.125093][ T9551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.152779][ T9551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.173018][ T9551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.193078][ T9551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.207063][ T9561] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1128'. [ 251.231852][ T9551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.250811][ T9551] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 251.345658][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.366212][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.375643][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.515616][ T5923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 251.655338][ T6194] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 251.724050][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.751873][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.816572][ T5923] usb 2-1: Product: syz [ 251.820793][ T5923] usb 2-1: Manufacturer: syz [ 251.840884][ T5923] usb 2-1: SerialNumber: syz [ 251.944650][ T9581] xt_CT: No such helper "syz1" [ 252.146404][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.187621][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 252.223551][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.385462][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.417540][ T5923] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 252.945292][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.188246][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.194574][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.271503][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 253.278441][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.284850][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 253.425552][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.508389][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.517719][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.984205][ T5923] usb 2-1: USB disconnect, device number 7 [ 254.219148][ T5224] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 255.104473][ T9655] syzkaller1: entered promiscuous mode [ 255.120836][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.129151][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.139697][ T9655] syzkaller1: entered allmulticast mode [ 255.505768][ T5922] net_ratelimit: 2 callbacks suppressed [ 255.505797][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.625390][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 255.658111][ T9664] tipc: Enabled bearer , priority 0 [ 255.842894][ T5923] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 255.852362][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.860563][ T5923] usb 1-1: Product: syz [ 255.864837][ T5923] usb 1-1: Manufacturer: syz [ 255.869910][ T5923] usb 1-1: SerialNumber: syz [ 256.105105][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 256.130045][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 256.151807][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 256.303544][ T5923] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 256.565547][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.573734][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.684028][ T792] tipc: Node number set to 3077239401 [ 257.585441][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.897509][ T9708] tipc: Enabled bearer , priority 0 [ 257.923156][ T9708] tipc: Resetting bearer [ 257.938179][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 257.951202][ T9710] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 257.973812][ T9707] tipc: Disabling bearer [ 258.309265][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.319391][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.329889][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.398446][ T5922] usb 1-1: USB disconnect, device number 3 [ 258.541366][ T9575] Set syz1 is full, maxelem 65536 reached [ 259.045307][ T5922] IPVS: starting estimator thread 0... [ 259.122526][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 259.165959][ T9745] IPVS: using max 23 ests per chain, 55200 per kthread [ 259.258759][ T9752] syzkaller0: entered promiscuous mode [ 259.264906][ T9752] syzkaller0: entered allmulticast mode [ 259.582117][ T9763] tipc: Enabled bearer , priority 0 [ 259.706248][ T9760] tipc: Resetting bearer [ 259.786100][ T9759] tipc: Disabling bearer [ 259.905377][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 260.087436][ T5915] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.100638][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.142781][ T5915] usb 4-1: Product: syz [ 260.155261][ T5915] usb 4-1: Manufacturer: syz [ 260.159891][ T5915] usb 4-1: SerialNumber: syz [ 260.401850][ T5915] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 260.449767][ T5915] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 260.487385][ T5915] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 260.509768][ T9779] xt_CT: No such helper "syz1" [ 260.724385][ T5922] net_ratelimit: 6 callbacks suppressed [ 260.724410][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.742940][ T9802] netem: change failed [ 261.079827][ T9816] ip6t_srh: unknown srh invflags BA61 [ 261.099756][ T9816] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1206'. [ 261.686986][ T9830] tipc: Enabled bearer , priority 0 [ 261.720986][ T9830] tipc: Resetting bearer [ 261.775398][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.928718][ T9829] tipc: Disabling bearer [ 261.985515][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.064698][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1216'. [ 262.739822][ T30] usb 4-1: USB disconnect, device number 6 [ 262.825744][ T9838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.830215][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.627264][ T9893] ip6t_srh: unknown srh invflags BA61 [ 263.687106][ T9891] tipc: Enabled bearer , priority 0 [ 263.697893][ T9893] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1230'. [ 263.813183][ T9891] tipc: Resetting bearer [ 263.836406][ T9890] tipc: Disabling bearer [ 263.908999][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.169225][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.246152][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.275354][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.284244][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.331050][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.593532][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.605321][ T5923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.667607][ T3458] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.709794][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 264.761006][ T6105] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.800023][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.812526][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.832385][ T5923] usb 3-1: Product: syz [ 264.859606][ T5923] usb 3-1: Manufacturer: syz [ 264.868700][ T5923] usb 3-1: SerialNumber: syz [ 264.932953][ T6105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.172854][ T5923] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 265.184253][ T5923] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 265.255339][ T5923] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 265.441112][ T9921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.999522][ T30] net_ratelimit: 7 callbacks suppressed [ 265.999548][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.503563][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 266.860003][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1251'. [ 266.915468][ T9955] syzkaller0: entered promiscuous mode [ 266.921041][ T9955] syzkaller0: entered allmulticast mode [ 266.960861][ T9787] Set syz1 is full, maxelem 65536 reached [ 267.025583][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.205970][ T5224] usb 3-1: USB disconnect, device number 9 [ 267.221329][ T9904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.308308][ T9976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1253'. [ 267.317673][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'. [ 267.908397][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.066086][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.074315][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.881240][T10005] loop5: detected capacity change from 0 to 2048 [ 268.897475][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'. [ 268.925339][T10005] udf: Bad value for 'rootdir' [ 269.115537][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.174509][T10005] loop5: detected capacity change from 0 to 4096 [ 269.270582][T10005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.466576][ T792] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 269.678978][ T792] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 269.708451][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.730154][ T792] usb 5-1: Product: syz [ 269.750731][T10021] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 269.759512][ T792] usb 5-1: Manufacturer: syz [ 269.761092][T10021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1272'. [ 269.772975][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.785079][ T792] usb 5-1: SerialNumber: syz [ 269.858307][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'. [ 270.048297][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 270.106940][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 270.127588][ T5224] IPVS: starting estimator thread 0... [ 270.182954][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.191250][ T792] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 270.251417][T10035] IPVS: using max 30 ests per chain, 72000 per kthread [ 270.338555][ T792] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 270.467568][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1275'. [ 271.187254][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.794591][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.054987][T10048] syzkaller0: entered promiscuous mode [ 272.113674][T10048] syzkaller0: entered allmulticast mode [ 272.237776][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.245765][ T792] usb 5-1: USB disconnect, device number 5 [ 272.273999][T10061] loop5: detected capacity change from 0 to 16 [ 272.346101][T10061] erofs (device loop5): mounted with root inode @ nid 36. [ 272.733944][T10073] mmap: syz.5.1280 (10073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.952715][T10075] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 273.268466][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.368009][T10086] loop5: detected capacity change from 0 to 2048 [ 273.378908][T10086] udf: Bad value for 'rootdir' [ 273.510198][T10086] loop5: detected capacity change from 0 to 4096 [ 273.555967][T10086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.326400][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.527484][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.539162][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1288'. [ 274.867769][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.038911][T10075] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 275.217997][T10104] loop2: detected capacity change from 0 to 16 [ 275.238265][T10104] erofs (device loop2): mounted with root inode @ nid 36. [ 275.295798][T10095] netlink: 'syz.5.1289': attribute type 1 has an invalid length. [ 275.409056][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.290834][T10105] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 276.302556][T10105] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 276.307486][T10095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1289'. [ 276.558603][T10105] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 276.575710][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.669052][T10105] erofs (device loop2): read error -117 @ 0 of nid 89 [ 276.939112][ T31] audit: type=1800 audit(1775725147.353:2): pid=10105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1290" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 277.491913][ T6194] IPVS: starting estimator thread 0... [ 277.505558][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.586104][T10126] IPVS: using max 24 ests per chain, 57600 per kthread [ 277.599991][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.800637][T10131] loop3: detected capacity change from 0 to 16 [ 277.918197][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.982642][T10131] erofs (device loop3): mounted with root inode @ nid 36. [ 278.695359][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.750445][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.655552][T10163] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 280.664336][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1306'. [ 280.895903][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.860453][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.130722][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.984605][T10173] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.062823][T10173] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 283.275266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 283.286282][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.422236][T10175] macvlan2: entered promiscuous mode [ 283.428605][T10175] macvlan2: entered allmulticast mode [ 283.434926][T10175] bond1: entered promiscuous mode [ 283.440991][T10175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.459142][T10175] bond1: left promiscuous mode [ 284.305789][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.748102][T10207] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1322'. [ 284.865782][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.084998][T10212] loop2: detected capacity change from 0 to 16 [ 285.136678][T10215] loop0: detected capacity change from 0 to 16 [ 285.148225][T10215] erofs (device loop0): mounted with root inode @ nid 36. [ 285.219209][T10212] erofs (device loop2): mounted with root inode @ nid 36. [ 285.645899][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.661292][T10215] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 285.668706][T10215] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 285.676136][T10215] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 285.683444][T10215] erofs (device loop0): read error -117 @ 0 of nid 89 [ 285.745799][ T31] audit: type=1800 audit(1775725156.113:3): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1324" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 286.716400][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.156340][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.558935][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.583498][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.815464][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.082502][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.699863][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.239752][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.047170][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.067853][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.077134][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.086329][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.096282][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.104859][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.113351][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.121860][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.130593][T10290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.363091][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 294.692903][T10319] loop4: detected capacity change from 0 to 16 [ 294.723452][T10319] erofs (device loop4): mounted with root inode @ nid 36. [ 296.012413][T10325] loop0: detected capacity change from 0 to 2048 [ 296.089880][T10325] udf: Bad value for 'rootdir' [ 296.324471][T10325] loop0: detected capacity change from 0 to 4096 [ 296.436710][T10325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.467364][ T5224] net_ratelimit: 52 callbacks suppressed [ 297.467392][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.675906][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.747320][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.770404][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.574928][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 298.584456][T10356] syzkaller1: entered promiscuous mode [ 298.592144][T10356] syzkaller1: entered allmulticast mode [ 298.725894][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.737900][T10360] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 298.755235][T10360] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1367'. [ 299.316577][T10371] loop3: detected capacity change from 0 to 16 [ 299.651190][T10371] erofs (device loop3): mounted with root inode @ nid 36. [ 299.803561][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.875729][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.884767][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.932989][T10380] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 301.179337][T10386] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 301.292085][T10386] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 302.093500][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.577645][T10396] macvlan2: entered promiscuous mode [ 302.599489][T10396] macvlan2: entered allmulticast mode [ 302.657984][T10396] bond1: entered promiscuous mode [ 302.663750][T10396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.691513][T10396] bond1: left promiscuous mode [ 303.115377][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.161362][T10422] loop3: detected capacity change from 0 to 16 [ 303.178909][T10422] erofs (device loop3): mounted with root inode @ nid 36. [ 303.569553][T10425] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 303.577243][T10425] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 303.585991][T10425] erofs (device loop3): readahead error at folio 0 @ nid 89 [ 303.593927][T10425] erofs (device loop3): read error -117 @ 0 of nid 89 [ 303.615375][ T31] audit: type=1800 audit(1775725174.023:4): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1384" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 303.971617][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.402431][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.925264][ T5224] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 305.098011][ T5224] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.132887][ T5224] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 306.080946][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.123127][ T5224] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.154020][ T5224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.757557][ T5224] usb 6-1: Product: syz [ 306.761786][ T5224] usb 6-1: Manufacturer: syz [ 306.817102][ T5224] usb 6-1: SerialNumber: syz [ 306.853293][ T5224] usb 6-1: config 0 descriptor?? [ 307.106240][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.166483][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.175255][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.174376][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.222017][ T5923] usb 6-1: USB disconnect, device number 4 [ 308.317496][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1396'. [ 308.472438][T10468] netlink: 'syz.5.1398': attribute type 1 has an invalid length. [ 308.538609][T10468] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1398'. [ 309.170622][T10484] loop2: detected capacity change from 0 to 16 [ 309.213228][T10484] erofs (device loop2): mounted with root inode @ nid 36. [ 309.225064][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.443640][T10486] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 309.451474][T10486] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 309.459538][T10486] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 309.468098][T10486] erofs (device loop2): read error -117 @ 0 of nid 89 [ 309.487314][ T31] audit: type=1800 audit(1775725179.903:5): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1402" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 309.737351][T10488] tipc: Enabling of bearer rejected, failed to enable media [ 310.227299][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.235531][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.299790][T10494] loop5: detected capacity change from 0 to 2048 [ 310.347502][T10494] udf: Bad value for 'rootdir' [ 311.505538][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.827708][T10494] loop5: detected capacity change from 0 to 512 [ 311.924458][T10494] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.217369][T10494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.250339][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.269478][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.278210][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.287057][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.295620][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.327256][T10494] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.436779][T10494] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.1404: corrupted inode contents [ 312.505701][T10494] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.1404: mark_inode_dirty error [ 312.532305][T10494] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.1404: corrupted inode contents [ 312.608180][T10494] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1404: mark_inode_dirty error [ 312.865994][T10526] EXT4-fs warning (device loop5): ext4_es_cache_extent:1079: inode #2: comm syz.5.1404: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 312.865994][T10526] [ 312.937161][T10526] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.1404: corrupted inode contents [ 312.976371][ T5979] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 312.994510][T10526] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.1404: mark_inode_dirty error [ 313.034033][T10526] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 313.243436][ T5979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.274370][ T5224] net_ratelimit: 55 callbacks suppressed [ 313.274419][ T5224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.471555][ T5979] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.596743][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.780226][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.785537][ T5979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 313.806913][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.826184][ T5979] usb 2-1: Product: syz [ 313.830388][ T5979] usb 2-1: Manufacturer: syz [ 313.848176][ T5979] usb 2-1: SerialNumber: syz [ 313.920958][ T5979] usb 2-1: config 0 descriptor?? [ 314.019569][T10540] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1413'. [ 314.411587][T10548] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 314.420146][T10548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1416'. [ 314.626277][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.647403][ T5224] usb 2-1: USB disconnect, device number 8 [ 315.940671][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.108649][T10574] tipc: Enabling of bearer rejected, failed to enable media [ 316.306133][ T6194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.448323][ T5922] IPVS: starting estimator thread 0... [ 316.551122][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.557878][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.645833][T10588] IPVS: using max 22 ests per chain, 52800 per kthread [ 316.666061][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.955802][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.475696][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.577873][T10606] loop0: detected capacity change from 0 to 2048 [ 318.599072][T10606] udf: Bad value for 'rootdir' [ 318.942108][T10606] loop0: detected capacity change from 0 to 4096 [ 319.102987][T10606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.347586][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.482300][T10616] loop5: detected capacity change from 0 to 16 [ 319.888821][T10616] erofs (device loop5): mounted with root inode @ nid 36. [ 319.891795][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.011865][T10618] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 320.019557][T10618] erofs (device loop5): readahead error at folio 1 @ nid 89 [ 320.031065][T10618] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 320.038983][T10618] erofs (device loop5): read error -117 @ 0 of nid 89 [ 320.058454][ T31] audit: type=1800 audit(1775725190.473:6): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1422" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 320.672578][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.767594][T10625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.776165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.793330][T10625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.802776][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.867584][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.925390][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.934286][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.023920][T10632] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 321.065726][T10632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1431'. [ 321.076262][T10625] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.277911][T10625] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.531667][T10625] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.668227][ C1] ------------[ cut here ]------------ [ 321.674078][ C1] ODEBUG: free active (active state 0) object: ffff888053e2c090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 321.687170][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.1420/10599 [ 321.697421][ C1] Modules linked in: [ 321.701598][ C1] CPU: 1 UID: 0 PID: 10599 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 321.711075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.721198][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 321.727095][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 321.746913][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 321.753191][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 321.761326][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 321.769360][ C1] RBP: 0000000000000001 R08: ffff888053e2c090 R09: ffffffff8bb2bba0 [ 321.777410][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 321.785451][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b88b0 R15: ffffc90000a08b38 [ 321.793482][ C1] FS: 0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 321.802551][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.809188][ C1] CR2: 00007f6d44d456b8 CR3: 000000005adcb000 CR4: 0000000000350ef0 [ 321.817232][ C1] Call Trace: [ 321.820520][ C1] [ 321.823372][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 321.829086][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.834962][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.840665][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 321.846287][ C1] ? exit_to_user_mode_loop+0x86/0x4a0 [ 321.851816][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 321.857975][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.863675][ C1] ? mark_held_locks+0x40/0x70 [ 321.868529][ C1] ? kasan_quarantine_put+0x104/0x240 [ 321.873945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.879789][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 321.885029][ C1] ? rose_timer_expiry+0x53f/0x630 [ 321.890227][ C1] kfree+0x38f/0x6b0 [ 321.894179][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.899913][ C1] rose_timer_expiry+0x53f/0x630 [ 321.904911][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 321.910565][ C1] call_timer_fn+0x19a/0x670 [ 321.915232][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 321.920415][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.926174][ C1] ? __run_timers+0x747/0xb30 [ 321.930924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.936637][ C1] ? rcu_is_watching+0x12/0xc0 [ 321.941449][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 321.947102][ C1] __run_timers+0x757/0xb30 [ 321.951723][ C1] ? __pfx___run_timers+0x10/0x10 [ 321.956844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.962654][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 321.967777][ C1] run_timer_base+0x114/0x190 [ 321.972524][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 321.977828][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.983517][ C1] run_timer_softirq+0x1a/0x50 [ 321.988361][ C1] handle_softirqs+0x1eb/0x9e0 [ 321.993197][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 321.998557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.004241][ C1] __irq_exit_rcu+0xef/0x150 [ 322.008913][ C1] irq_exit_rcu+0x9/0x30 [ 322.013223][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 322.018928][ C1] [ 322.021955][ C1] [ 322.024901][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.030968][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 322.037107][ C1] Code: 00 00 00 5b e9 e2 d8 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 a5 99 05 12 48 8b 34 24 <65> 48 8b 15 81 99 05 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 322.056811][ C1] RSP: 0018:ffffc90004397148 EFLAGS: 00000287 [ 322.062945][ C1] RAX: 0000000080000000 RBX: 0000000000000008 RCX: ffffffff8281244e [ 322.071151][ C1] RDX: 0000000000000000 RSI: ffffffff8281245c RDI: ffff8880320f9e80 [ 322.079279][ C1] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001000 [ 322.087327][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 322.095389][ C1] R13: ffffea00011c6d40 R14: ffffea00011c6d74 R15: dffffc0000000000 [ 322.103405][ C1] ? __nr_to_section+0x3e/0x100 [ 322.108358][ C1] ? __nr_to_section+0x4c/0x100 [ 322.113291][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.119003][ C1] __nr_to_section+0x4c/0x100 [ 322.123726][ C1] lookup_page_ext+0x46/0x100 [ 322.128643][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.134320][ C1] __page_table_check_zero+0xe1/0x410 [ 322.139779][ C1] ? __reset_page_owner+0x144/0x190 [ 322.145185][ C1] free_unref_folios+0xb2c/0x1790 [ 322.150285][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.155187][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.161094][ C1] folios_put_refs+0x53c/0x840 [ 322.165955][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 322.171289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.177028][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.182699][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 322.189216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.194962][ C1] shmem_undo_range+0x5e5/0x1570 [ 322.199990][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 322.205483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.211235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.216944][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 322.222629][ C1] shmem_evict_inode+0x39e/0xbd0 [ 322.227680][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.233349][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 322.239147][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 322.244698][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 322.250852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.256600][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.262305][ C1] ? find_held_lock+0x2b/0x80 [ 322.267275][ C1] ? evict+0x37e/0xad0 [ 322.271387][ C1] ? evict+0x37e/0xad0 [ 322.275564][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.281310][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 322.286854][ C1] evict+0x3c2/0xad0 [ 322.290822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.296562][ C1] ? find_held_lock+0x2b/0x80 [ 322.301350][ C1] ? __pfx_evict+0x10/0x10 [ 322.305864][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.311638][ C1] ? iput.part.0+0x5fd/0xf50 [ 322.316307][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.322082][ C1] iput.part.0+0x605/0xf50 [ 322.326585][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 322.331931][ C1] iput+0x35/0x40 [ 322.335626][ C1] dentry_unlink_inode+0x2a1/0x490 [ 322.340773][ C1] __dentry_kill+0x1d0/0x600 [ 322.345448][ C1] finish_dput+0x76/0x480 [ 322.349910][ C1] dput.part.0+0x456/0x570 [ 322.354368][ C1] dput+0x1f/0x30 [ 322.358105][ C1] __fput+0x519/0xb40 [ 322.362149][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.367444][ C1] task_work_run+0x150/0x240 [ 322.372252][ C1] ? __pfx_task_work_run+0x10/0x10 [ 322.377437][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.383111][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.388382][ C1] do_exit+0x8b8/0x2b60 [ 322.392586][ C1] ? __pfx___might_resched+0x10/0x10 [ 322.397961][ C1] ? __pfx_do_exit+0x10/0x10 [ 322.402606][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.408308][ C1] ? do_raw_spin_lock+0x128/0x260 [ 322.413399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.419096][ C1] ? find_held_lock+0x2b/0x80 [ 322.423821][ C1] ? get_signal+0x7e0/0x21e0 [ 322.428504][ C1] do_group_exit+0xd5/0x2a0 [ 322.433103][ C1] get_signal+0x1ec7/0x21e0 [ 322.437738][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 322.442756][ C1] ? __pfx_get_signal+0x10/0x10 [ 322.447684][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 322.452767][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 322.458385][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 322.464611][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.470357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.476084][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 322.481317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.487022][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 322.492458][ C1] do_syscall_64+0x67c/0xf80 [ 322.497125][ C1] ? irqentry_exit+0x138/0x670 [ 322.501933][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.507896][ C1] RIP: 0033:0x7fef9359c819 [ 322.512363][ C1] Code: Unable to access opcode bytes at 0x7fef9359c7ef. [ 322.519512][ C1] RSP: 002b:00007fef917d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 322.528001][ C1] RAX: 0000000000010106 RBX: 00007fef93816180 RCX: 00007fef9359c819 [ 322.536025][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 322.544075][ C1] RBP: 00007fef93632c91 R08: 0000000000000000 R09: 0000000000000000 [ 322.552115][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 322.560152][ C1] R13: 00007fef93816218 R14: 00007fef93816180 R15: 00007ffe9d611248 [ 322.568286][ C1] [ 322.571326][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.578621][ C1] CPU: 1 UID: 0 PID: 10599 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 322.588031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 322.598091][ C1] Call Trace: [ 322.601368][ C1] [ 322.604217][ C1] dump_stack_lvl+0x100/0x190 [ 322.608940][ C1] vpanic+0x552/0x970 [ 322.612935][ C1] ? __pfx_vpanic+0x10/0x10 [ 322.617471][ C1] panic+0xd1/0xe0 [ 322.621202][ C1] ? __pfx_panic+0x10/0x10 [ 322.625640][ C1] ? check_panic_on_warn+0x1f/0x90 [ 322.630792][ C1] check_panic_on_warn.cold+0x19/0x34 [ 322.636180][ C1] ? debug_print_object+0x18e/0x2a0 [ 322.641387][ C1] __warn.cold+0x191/0x348 [ 322.645821][ C1] __report_bug+0x296/0x3d0 [ 322.650331][ C1] ? debug_print_object+0x18e/0x2a0 [ 322.655546][ C1] ? __pfx___report_bug+0x10/0x10 [ 322.660603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.666255][ C1] ? lock_acquire+0x1cf/0x380 [ 322.671118][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.676859][ C1] ? mark_held_locks+0x40/0x70 [ 322.681766][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.687646][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.693301][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 322.698521][ C1] report_bug_entry+0xe1/0x290 [ 322.703297][ C1] ? debug_print_object+0x19b/0x2a0 [ 322.708505][ C1] handle_bug+0x1cd/0x2a0 [ 322.712946][ C1] exc_invalid_op+0x17/0x50 [ 322.717472][ C1] asm_exc_invalid_op+0x1a/0x20 [ 322.722337][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 322.728157][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 322.747952][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 322.754098][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 322.762072][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 322.770050][ C1] RBP: 0000000000000001 R08: ffff888053e2c090 R09: ffffffff8bb2bba0 [ 322.778046][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 322.786023][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b88b0 R15: ffffc90000a08b38 [ 322.794024][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.799876][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.805536][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 322.811187][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.817031][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.822691][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 322.828258][ C1] ? exit_to_user_mode_loop+0x86/0x4a0 [ 322.833769][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 322.840157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.845818][ C1] ? mark_held_locks+0x40/0x70 [ 322.850663][ C1] ? kasan_quarantine_put+0x104/0x240 [ 322.856059][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.861832][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 322.867116][ C1] ? rose_timer_expiry+0x53f/0x630 [ 322.872257][ C1] kfree+0x38f/0x6b0 [ 322.876202][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.881896][ C1] rose_timer_expiry+0x53f/0x630 [ 322.886877][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.892373][ C1] call_timer_fn+0x19a/0x670 [ 322.897026][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 322.902182][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.907868][ C1] ? __run_timers+0x747/0xb30 [ 322.912586][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.918242][ C1] ? rcu_is_watching+0x12/0xc0 [ 322.923095][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.928628][ C1] __run_timers+0x757/0xb30 [ 322.933191][ C1] ? __pfx___run_timers+0x10/0x10 [ 322.938261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.943940][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 322.949022][ C1] run_timer_base+0x114/0x190 [ 322.953747][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 322.958978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.964651][ C1] run_timer_softirq+0x1a/0x50 [ 322.969452][ C1] handle_softirqs+0x1eb/0x9e0 [ 322.974255][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.979670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.985371][ C1] __irq_exit_rcu+0xef/0x150 [ 322.989994][ C1] irq_exit_rcu+0x9/0x30 [ 322.994266][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 322.999926][ C1] [ 323.002856][ C1] [ 323.005788][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.011794][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 323.017906][ C1] Code: 00 00 00 5b e9 e2 d8 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 a5 99 05 12 48 8b 34 24 <65> 48 8b 15 81 99 05 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 323.037561][ C1] RSP: 0018:ffffc90004397148 EFLAGS: 00000287 [ 323.043653][ C1] RAX: 0000000080000000 RBX: 0000000000000008 RCX: ffffffff8281244e [ 323.051665][ C1] RDX: 0000000000000000 RSI: ffffffff8281245c RDI: ffff8880320f9e80 [ 323.059655][ C1] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001000 [ 323.067727][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 323.075716][ C1] R13: ffffea00011c6d40 R14: ffffea00011c6d74 R15: dffffc0000000000 [ 323.083976][ C1] ? __nr_to_section+0x3e/0x100 [ 323.088953][ C1] ? __nr_to_section+0x4c/0x100 [ 323.093838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.099508][ C1] __nr_to_section+0x4c/0x100 [ 323.104224][ C1] lookup_page_ext+0x46/0x100 [ 323.108930][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.114593][ C1] __page_table_check_zero+0xe1/0x410 [ 323.120006][ C1] ? __reset_page_owner+0x144/0x190 [ 323.125240][ C1] free_unref_folios+0xb2c/0x1790 [ 323.130357][ C1] ? rcu_is_watching+0x12/0xc0 [ 323.135139][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 323.141092][ C1] folios_put_refs+0x53c/0x840 [ 323.145890][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 323.151199][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.156861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.162527][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 323.168888][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.174547][ C1] shmem_undo_range+0x5e5/0x1570 [ 323.179528][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 323.184966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.190667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.196325][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 323.201995][ C1] shmem_evict_inode+0x39e/0xbd0 [ 323.206962][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.212706][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 323.218457][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 323.223968][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 323.230061][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.235808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.241552][ C1] ? find_held_lock+0x2b/0x80 [ 323.246258][ C1] ? evict+0x37e/0xad0 [ 323.250344][ C1] ? evict+0x37e/0xad0 [ 323.254429][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.260093][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 323.265588][ C1] evict+0x3c2/0xad0 [ 323.269527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.275189][ C1] ? find_held_lock+0x2b/0x80 [ 323.279906][ C1] ? __pfx_evict+0x10/0x10 [ 323.284367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.290041][ C1] ? iput.part.0+0x5fd/0xf50 [ 323.294667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.300374][ C1] iput.part.0+0x605/0xf50 [ 323.304827][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 323.310195][ C1] iput+0x35/0x40 [ 323.313887][ C1] dentry_unlink_inode+0x2a1/0x490 [ 323.319035][ C1] __dentry_kill+0x1d0/0x600 [ 323.323668][ C1] finish_dput+0x76/0x480 [ 323.328025][ C1] dput.part.0+0x456/0x570 [ 323.332468][ C1] dput+0x1f/0x30 [ 323.336151][ C1] __fput+0x519/0xb40 [ 323.340154][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.345400][ C1] task_work_run+0x150/0x240 [ 323.350099][ C1] ? __pfx_task_work_run+0x10/0x10 [ 323.355229][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.360890][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 323.366129][ C1] do_exit+0x8b8/0x2b60 [ 323.370410][ C1] ? __pfx___might_resched+0x10/0x10 [ 323.375933][ C1] ? __pfx_do_exit+0x10/0x10 [ 323.380669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.386327][ C1] ? do_raw_spin_lock+0x128/0x260 [ 323.391369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.397029][ C1] ? find_held_lock+0x2b/0x80 [ 323.401735][ C1] ? get_signal+0x7e0/0x21e0 [ 323.406445][ C1] do_group_exit+0xd5/0x2a0 [ 323.411003][ C1] get_signal+0x1ec7/0x21e0 [ 323.415555][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 323.420534][ C1] ? __pfx_get_signal+0x10/0x10 [ 323.425416][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 323.430484][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 323.436070][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 323.442259][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.447937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.453597][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 323.458832][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.464502][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 323.469838][ C1] do_syscall_64+0x67c/0xf80 [ 323.474455][ C1] ? irqentry_exit+0x138/0x670 [ 323.479250][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.485166][ C1] RIP: 0033:0x7fef9359c819 [ 323.489597][ C1] Code: Unable to access opcode bytes at 0x7fef9359c7ef. [ 323.496616][ C1] RSP: 002b:00007fef917d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 323.505059][ C1] RAX: 0000000000010106 RBX: 00007fef93816180 RCX: 00007fef9359c819 [ 323.513403][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 323.521397][ C1] RBP: 00007fef93632c91 R08: 0000000000000000 R09: 0000000000000000 [ 323.529383][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 323.537367][ C1] R13: 00007fef93816218 R14: 00007fef93816180 R15: 00007ffe9d611248 [ 323.545402][ C1] [ 323.549065][ C1] Kernel Offset: disabled [ 323.553482][ C1] Rebooting in 86400 seconds..