last executing test programs: 26m18.897138848s ago: executing program 32 (id=4236): r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4a22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) pselect6(0x40, &(0x7f0000000340)={0xa, 0x4, 0x6, 0x2, 0x8, 0x10000, 0xffffffffffffffff, 0xff}, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000240)="b8", 0x1}], 0x1) 23m27.326183761s ago: executing program 33 (id=5720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=""/28, &(0x7f0000000180)=0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 22m46.675117216s ago: executing program 34 (id=6121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x42042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 21m59.484773971s ago: executing program 35 (id=6463): unshare(0x6020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)='%pB \x00'}, 0x20) fremovexattr(r1, &(0x7f00000002c0)=@known='user.syz\x00') 20m25.70026973s ago: executing program 5 (id=7207): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff1f00000000000001"]) 20m25.443193478s ago: executing program 5 (id=7208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x4, 0xfffffffffffffffe, 0x37974643, 0x10, 0x1000, 0x1fe, 0x1003, 0xfffffffffffffff3, 0x10000ffff, 0x201, 0x9488, 0x3, 0x1000000080000008, 0xffffffffffffff00, 0xc, 0x20000000000024], 0xeeff4000, 0x54046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m24.331298247s ago: executing program 5 (id=7217): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 20m24.298804891s ago: executing program 5 (id=7218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 20m23.738865909s ago: executing program 5 (id=7223): userfaultfd(0x80801) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x90000000000004, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 20m22.587138303s ago: executing program 5 (id=7233): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x6, 0xf, 0x0, 0xcb8, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 20m22.19314169s ago: executing program 36 (id=7233): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x6, 0xf, 0x0, 0xcb8, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 16m55.445705551s ago: executing program 9 (id=8443): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) 16m54.718898106s ago: executing program 9 (id=8445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="9df387bf199bdb1de5e440516db4c3", 0xf}, {&(0x7f0000000140)="80e038c71519b044af0cf8c02fe9ad037488a47cc0f5a0d2b535558e0013c86e0f701cd48ae6197a24b664660537e03c31e5e0c981b98d9d5afa9cccf134a5cd8192c9708588cf8adecd3dbd5ce6bbb2e9f14ec4de2e6a6c4a0683e5640322234a51", 0x62}], 0x2, 0x1, 0xd0a1, 0x3) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) 16m51.66600793s ago: executing program 9 (id=8456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) 16m50.434491739s ago: executing program 9 (id=8457): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) read(r0, &(0x7f0000001600)=""/233, 0xe9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 16m49.204231386s ago: executing program 9 (id=8461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 16m43.879380354s ago: executing program 9 (id=8467): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16m28.280945509s ago: executing program 37 (id=8467): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7m58.70314426s ago: executing program 0 (id=11682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0xc) bind$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 7m57.406894881s ago: executing program 0 (id=11687): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 7m57.028119644s ago: executing program 0 (id=11695): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 7m56.689659477s ago: executing program 0 (id=11699): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001480)=@newtaction={0x18, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0x4}]}, 0x18}}, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000068000109000000000000000000000000000000000600030000000000140002"], 0x34}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x1f, 0x3, 0x7fffffff, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x400, 0x2, 0x3, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x289c, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) 7m55.422786583s ago: executing program 0 (id=11706): mount$overlay(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000180)={[], [], 0x3a}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 7m53.87825776s ago: executing program 0 (id=11723): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x500000a, 0x70072, 0xffffffffffffffff, 0x8000000) move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) mbind(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x4, 0x80, 0x3) 7m38.827752821s ago: executing program 38 (id=11723): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x500000a, 0x70072, 0xffffffffffffffff, 0x8000000) move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) mbind(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x4, 0x80, 0x3) 6m4.766447597s ago: executing program 1 (id=12823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0xc0) 6m4.159563943s ago: executing program 1 (id=12829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41004, 0xb, 0x6f, 0x3, 0x7f, 0x40, 0x2c, 0x0, 0x2e, 0x7}, {0xd000, 0x1, 0x4, 0x0, 0x41, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0x4, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0x2, 0x5, 0x81}, {0xeeee8000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x80, 0x8, 0x6, 0x7, 0xe}, {0xdddd1000, 0x1000, 0x9, 0x4, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0xffff1000, 0x1b, 0xa0, 0xb1, 0xff, 0x1, 0xa0, 0x80, 0x11, 0xbf, 0x3}, {0xa000, 0x60000, 0xb, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x9000, 0x8, 0x5, 0xf, 0x7, 0x5, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x69000, 0x242001, 0xb, 0x2000, 0x100000, [0x1000, 0x4, 0x5a, 0xc]}) 6m3.803723753s ago: executing program 1 (id=12836): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 6m2.647684462s ago: executing program 1 (id=12848): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 6m2.339517578s ago: executing program 1 (id=12853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, 0x0, 0x0) bind$packet(r3, &(0x7f0000004440)={0x11, 0x1c, r2, 0x1, 0xa, 0x6, @local}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 6m0.886238024s ago: executing program 1 (id=12870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000240)) 6m0.233116471s ago: executing program 39 (id=12870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000240)) 4m21.947262902s ago: executing program 4 (id=13467): io_setup(0x4fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m20.622206371s ago: executing program 4 (id=13469): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r4, 0x12) 4m20.163625537s ago: executing program 4 (id=13471): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2b, 0x6, 0xf}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @empty, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x18, 0x29, 0x37, {0x32}}}], 0x18}}], 0x1, 0x11) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m16.916173076s ago: executing program 4 (id=13482): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 4m12.074066621s ago: executing program 4 (id=13488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) openat(r4, 0x0, 0x0, 0x0) 4m10.242581568s ago: executing program 4 (id=13492): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@union={0x2, 0x3, 0x0, 0x5, 0x0, 0x10000, [{0x5, 0x5, 0x8000}, {0x6, 0x2, 0x7}, {0x9, 0x0, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0xa, 0x2}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x1c, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x8}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000700)=""/115, 0xa8, 0x73, 0x1, 0x7f}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x5, 0x2, 0x408, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB="000000000000000001000040002cc0243a6de1ff15c1bf19bbee760d893f47191bc1e83495fbaea6aed10ace2f0b798e93afbfa3c56e663dff7eb89cadb836ddabf4f8ad8cf12d7b19", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003500010326bd600000dcdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) 3m55.113511929s ago: executing program 40 (id=13492): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@union={0x2, 0x3, 0x0, 0x5, 0x0, 0x10000, [{0x5, 0x5, 0x8000}, {0x6, 0x2, 0x7}, {0x9, 0x0, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0xa, 0x2}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x1c, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x8}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000700)=""/115, 0xa8, 0x73, 0x1, 0x7f}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x5, 0x2, 0x408, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB="000000000000000001000040002cc0243a6de1ff15c1bf19bbee760d893f47191bc1e83495fbaea6aed10ace2f0b798e93afbfa3c56e663dff7eb89cadb836ddabf4f8ad8cf12d7b19", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003500010326bd600000dcdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) 7.018987604s ago: executing program 3 (id=14982): r0 = syz_open_dev$sg(&(0x7f0000000280), 0xa8c, 0x82100) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81c, &(0x7f0000000080)={0xa, 0x4e21, 0xbe7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x800000c0}, 0x1c) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/69, 0x45}], 0x1) 6.85723993s ago: executing program 3 (id=14984): r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 6.586719198s ago: executing program 3 (id=14987): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 5.038739638s ago: executing program 3 (id=15004): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000001800)={0x0, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000001cc0)) 4.831014953s ago: executing program 8 (id=15007): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) 4.752874877s ago: executing program 3 (id=15009): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) 4.421411349s ago: executing program 8 (id=15012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 4.108082381s ago: executing program 8 (id=15016): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4.035699292s ago: executing program 6 (id=15017): unshare(0x22020400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x600000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000004}) 3.807738758s ago: executing program 8 (id=15019): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) 3.717880107s ago: executing program 6 (id=15021): timerfd_create(0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6c, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x7, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x7, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x4, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x568, 0x2a2, 0xfffffffd, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f9, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.418637943s ago: executing program 8 (id=15024): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="0c0138ca5ed5", @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0xe, 0x6, "18aa39", 0x0, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) r0 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000000)={0xf, 0xfffffff9, 0x9cd}) 2.40297626s ago: executing program 6 (id=15025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x29a, 0x0, 0x80}]}) 2.126970151s ago: executing program 3 (id=15028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x2}, 0x8) 2.011152838s ago: executing program 8 (id=15030): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="201153000000a7fdf3eb2f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.972067808s ago: executing program 2 (id=15031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x8, @loopback, 0x8}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8d", 0xfef4, 0x4000854, &(0x7f00000000c0)={0xa, 0x4e21, 0xbe9, @loopback, 0x800000c0}, 0x1c) 1.806635276s ago: executing program 6 (id=15033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14, r1, 0x311, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 1.73508877s ago: executing program 2 (id=15034): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5433, 0x0) 1.635819449s ago: executing program 6 (id=15036): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c2243, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') symlink(&(0x7f0000000580)='.\x00', &(0x7f0000000200)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.543777558s ago: executing program 2 (id=15037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000010, 0x0, 0x5}]}) 1.543035874s ago: executing program 6 (id=15038): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) 1.108373016s ago: executing program 7 (id=15040): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) getpeername(r0, 0x0, &(0x7f00000000c0)) 1.034477566s ago: executing program 2 (id=15041): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 799.356939ms ago: executing program 7 (id=15042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x297}]}) 632.165922ms ago: executing program 7 (id=15043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x8}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffffe}]}]}, 0x30}}, 0x0) 246.152361ms ago: executing program 7 (id=15044): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) 228.062716ms ago: executing program 2 (id=15045): r0 = socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = eventfd(0x2) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x73ca, r0, 0x0, 0x0, 0x5, 0x0, 0x3, r2}]) 71.432282ms ago: executing program 7 (id=15046): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4104, 0x1008}, {0x0}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 26.869263ms ago: executing program 7 (id=15047): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x42032, 0xffffffffffffffff, 0x7f2f9000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000000000/0x2000)=nil) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x0, 0x1}, 0x4000002, 0x40, &(0x7f00000000c0)={0x0, 0x16, 0x5e, 0x6, 0x7436}, 0x743e, 0x6, 0x20008004, 0x0, 0x6, 0x3, 0x0}) 0s ago: executing program 2 (id=15048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0x2, 0x8, 0x4, 0xb, 0x0, 0x56, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x4, 0x4}) kernel console output (not intermixed with test programs): queue, screwing up backlog [ 1390.670856][T32532] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1392.016117][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.255366][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1392.415410][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1392.417535][ T31] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1392.420089][ T31] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1392.420119][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.420142][ T31] usb 5-1: Product: syz [ 1392.420157][ T31] usb 5-1: Manufacturer: syz [ 1392.420172][ T31] usb 5-1: SerialNumber: syz [ 1392.476173][ T31] usb 5-1: config 0 descriptor?? [ 1392.540073][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1392.540127][ T31] usb 5-1: setting power ON [ 1392.540146][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1392.579237][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1392.580001][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1392.580050][ T31] usb 5-1: media controller created [ 1392.894483][T32543] dvb-usb: bulk message failed: -22 (3/0) [ 1392.894511][T32543] dvb-usb: bulk message failed: -22 (6/0) [ 1393.684173][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.758940][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1393.896125][ T31] usb 5-1: selecting invalid altsetting 6 [ 1393.896143][ T31] usb 5-1: digital interface selection failed (-22) [ 1393.896154][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1393.899437][ T31] usb 5-1: setting power OFF [ 1393.899457][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1393.899470][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1393.899479][ T31] (NULL device *): no alternate interface [ 1394.103207][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1394.147914][ T31] usb 5-1: USB disconnect, device number 47 [ 1394.265299][ T49] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 1394.418373][ T49] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1394.418441][ T49] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 8 [ 1394.418487][ T49] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1394.418512][ T49] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.455299][T32573] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1394.685008][ T49] usb 9-1: string descriptor 0 read error: -71 [ 1395.145332][ T5872] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1395.372051][ T5872] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1395.372090][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1395.372130][ T5872] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1395.372156][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.432886][ T5872] usb 5-1: config 0 descriptor?? [ 1395.447223][T32585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1395.816895][ T49] usb 9-1: USB disconnect, device number 26 [ 1395.858091][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.994324][ T5872] samsung 0003:0419:0001.004A: unknown main item tag 0x0 [ 1395.994373][ T5872] samsung 0003:0419:0001.004A: unknown main item tag 0x0 [ 1395.994402][ T5872] samsung 0003:0419:0001.004A: unknown main item tag 0x0 [ 1396.067526][ T5872] samsung 0003:0419:0001.004A: hidraw0: USB HID v0.02 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 1396.187953][ T5872] usb 5-1: USB disconnect, device number 48 [ 1396.277662][T32598] netlink: 'syz.8.10758': attribute type 12 has an invalid length. [ 1396.333411][T32599] fido_id[32599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1397.146373][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.593448][ T37] audit: type=1326 audit(1770220426.437:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32632 comm="syz.8.10776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c4aceaeb9 code=0x0 [ 1398.922139][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1399.057419][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.085182][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1399.088540][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.088577][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.090908][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1399.090939][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1399.090963][ T9] usb 1-1: Product: syz [ 1399.090979][ T9] usb 1-1: Manufacturer: syz [ 1399.177652][ T9] hub 1-1:4.0: USB hub found [ 1399.460919][ T9] hub 1-1:4.0: 2 ports detected [ 1399.811440][ T9] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1399.811510][ T9] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1400.318347][ T9] usb 1-1: USB disconnect, device number 34 [ 1401.625702][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.935221][T18744] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1402.087102][T18744] usb 5-1: Using ep0 maxpacket: 32 [ 1402.090581][T18744] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1402.090601][T18744] usb 5-1: config 0 has no interface number 0 [ 1402.101083][T18744] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1402.101191][T18744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.101254][T18744] usb 5-1: Product: syz [ 1402.101298][T18744] usb 5-1: Manufacturer: syz [ 1402.101342][T18744] usb 5-1: SerialNumber: syz [ 1402.167976][T18744] usb 5-1: config 0 descriptor?? [ 1402.220427][T18744] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1402.469459][T18744] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1402.601740][T18744] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1402.929675][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1402.932332][ T9] usb 5-1: USB disconnect, device number 49 [ 1402.970320][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.009936][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1403.036785][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1403.037912][ T9] quatech2 5-1:0.51: device disconnected [ 1403.295715][T32745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1404.815983][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.384248][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.655971][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.584477][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.498296][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.109094][ T37] audit: type=1326 audit(1770220442.957:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=479 comm="syz.4.10908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3700caeb9 code=0x0 [ 1414.416012][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.706256][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.091779][ T520] IPv6: Can't replace route, no match found [ 1416.092071][ T520] IPv6: Can't replace route, no match found [ 1416.172872][ T523] program syz.8.10927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.298374][ T37] audit: type=1326 audit(1770220445.147:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.298434][ T37] audit: type=1326 audit(1770220445.147:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.306836][ T37] audit: type=1326 audit(1770220445.147:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.310033][ T37] audit: type=1326 audit(1770220445.157:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.323604][ T37] audit: type=1326 audit(1770220445.157:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.323660][ T37] audit: type=1326 audit(1770220445.167:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.323708][ T37] audit: type=1326 audit(1770220445.167:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.347783][ T37] audit: type=1326 audit(1770220445.177:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.353547][ T37] audit: type=1326 audit(1770220445.197:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=526 comm="syz.3.10929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1416.555188][ T31] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1416.705319][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 1416.708084][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1416.708131][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1416.708163][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.765757][ T31] usb 5-1: config 0 descriptor?? [ 1417.405293][ T9] usb 5-1: USB disconnect, device number 50 [ 1417.616144][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.669350][ T31] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 1417.673452][ T31] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1420.206879][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.456958][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.784570][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.296225][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.154917][ T745] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11023'. [ 1426.154970][ T745] bond0: Unable to set down delay as MII monitoring is disabled [ 1427.226774][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.501863][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.517865][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.517940][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.461410][ T812] loop2: detected capacity change from 0 to 7 [ 1429.477546][ T812] Dev loop2: unable to read RDB block 7 [ 1429.477598][ T812] loop2: AHDI p1 p2 [ 1429.477630][ T812] loop2: partition table partially beyond EOD, truncated [ 1429.477895][ T812] loop2: p1 start 1700753509 is beyond EOD, truncated [ 1430.631280][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.874947][ T846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.905301][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1432.106236][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1432.106272][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.106287][ T10] usb 5-1: Product: syz [ 1432.106298][ T10] usb 5-1: Manufacturer: syz [ 1432.106309][ T10] usb 5-1: SerialNumber: syz [ 1432.244727][ T852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11064'. [ 1432.771390][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1432.771455][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1432.864525][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1432.997396][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.099856][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1433.172150][ T10] usb 5-1: USB disconnect, device number 51 [ 1434.256205][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.176906][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.559351][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.028382][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.345634][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.119458][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.161169][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.206262][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.946561][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.967400][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.815850][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.155592][T18744] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1453.278606][T22535] Bluetooth: hci5: unexpected subevent 0x10 length: 9 > 2 [ 1453.310899][T18744] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.310936][T18744] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.310963][T18744] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1453.311001][T18744] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1453.311026][T18744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.324200][T18744] usb 9-1: config 0 descriptor?? [ 1453.769081][T18744] uclogic 0003:28BD:0042.004D: interface is invalid, ignoring [ 1454.007921][ T10] usb 9-1: USB disconnect, device number 27 [ 1454.147038][ T1176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11185'. [ 1456.658402][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.658969][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.770147][ T1278] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11226'. [ 1457.936680][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.416585][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.417134][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.585158][ T1395] syz.0.11275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1463.118002][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1463.118028][ T37] audit: type=1326 audit(1770220491.927:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1415 comm="syz.0.11283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cca5aeb9 code=0x7ffc0000 [ 1463.118083][ T37] audit: type=1326 audit(1770220491.927:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1415 comm="syz.0.11283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cca5aeb9 code=0x7ffc0000 [ 1463.118131][ T37] audit: type=1326 audit(1770220491.927:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1415 comm="syz.0.11283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cca5aeb9 code=0x7ffc0000 [ 1463.118186][ T37] audit: type=1326 audit(1770220491.927:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1415 comm="syz.0.11283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77cca5aeb9 code=0x7ffc0000 [ 1463.118244][ T37] audit: type=1326 audit(1770220491.927:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1415 comm="syz.0.11283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77cca5aeb9 code=0x7ffc0000 [ 1463.726343][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.778774][ T1437] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11293'. [ 1466.676519][ T1483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.676676][ T1483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.676814][ T1483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.933995][ T1488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11313'. [ 1467.714470][ T1517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11327'. [ 1468.220126][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.270074][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.648694][ T1523] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11329'. [ 1469.456185][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.815776][ T37] audit: type=1326 audit(1770220499.657:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1557 comm="syz.3.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1470.817790][ T37] audit: type=1326 audit(1770220499.667:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1557 comm="syz.3.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1470.819710][ T37] audit: type=1326 audit(1770220499.667:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1557 comm="syz.3.11345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1471.127868][ T1563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11344'. [ 1471.373469][ T1567] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11347'. [ 1472.115601][T29339] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1472.284099][T29339] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1472.284140][T29339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.284163][T29339] usb 5-1: Product: syz [ 1472.284178][T29339] usb 5-1: Manufacturer: syz [ 1472.284194][T29339] usb 5-1: SerialNumber: syz [ 1472.338867][T29339] usb 5-1: config 0 descriptor?? [ 1472.364276][T29339] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 052 [ 1472.525910][ T1580] kvm: kvm [1579]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff [ 1472.769567][T29339] (null): failure reading functionality [ 1472.826970][T29339] i2c i2c-1: connected i2c-tiny-usb device [ 1473.043828][T29339] usb 5-1: USB disconnect, device number 52 [ 1474.529515][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.530572][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.579980][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.835238][ T31] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1478.999756][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.999779][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1479.001457][ T31] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1479.001489][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1479.001511][ T31] usb 9-1: SerialNumber: syz [ 1479.336015][ T31] usb 9-1: 0:2 : does not exist [ 1479.440645][ T31] usb 9-1: USB disconnect, device number 28 [ 1479.661475][T30407] udevd[30407]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1480.335774][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.394084][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.463524][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.415580][ T1757] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11432'. [ 1482.571424][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11448'. [ 1482.862201][ T1804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11453'. [ 1482.863846][ T1804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11453'. [ 1483.025271][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1483.169670][ T1816] 9p: Bad value for 'rfdno' [ 1483.182680][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1483.191105][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.191168][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.191198][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1483.191222][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1483.191247][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1483.192810][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1483.192841][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1483.192863][ T10] usb 5-1: Manufacturer: syz [ 1483.324184][ T10] usb 5-1: config 0 descriptor?? [ 1483.646940][ T10] rc_core: IR keymap rc-hauppauge not found [ 1483.646965][ T10] Registered IR keymap rc-empty [ 1483.647156][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.666347][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.691897][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1483.723131][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input61 [ 1483.743846][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.755488][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.775561][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.797514][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.815444][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.835533][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.855418][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.875383][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.895485][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.915414][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1483.969393][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1483.969415][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1484.166693][ T10] usb 5-1: USB disconnect, device number 53 [ 1485.392930][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.096283][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.097277][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.493336][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.493389][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.633187][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.222254][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.555627][ T10] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1491.725897][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1491.725933][ T10] usb 5-1: config 0 has no interface number 0 [ 1491.745989][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1491.746030][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.746053][ T10] usb 5-1: Product: syz [ 1491.746068][ T10] usb 5-1: Manufacturer: syz [ 1491.746084][ T10] usb 5-1: SerialNumber: syz [ 1491.812793][ T10] usb 5-1: config 0 descriptor?? [ 1491.859540][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.053555][ T2011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11546'. [ 1492.973510][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1492.973543][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1492.973856][ T10] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1493.070300][ T2024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11549'. [ 1493.093568][ T10] usb 5-1: USB disconnect, device number 54 [ 1493.827339][ T2048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11563'. [ 1494.680952][ T2081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11578'. [ 1495.791870][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.167521][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.569020][ T2114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11591'. [ 1501.461579][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.509144][ T2148] netlink: 'syz.8.11605': attribute type 4 has an invalid length. [ 1501.865611][ T2155] 9p: Bad value for 'rfdno' [ 1501.886047][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11608'. [ 1501.986956][ T2159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11608'. [ 1502.255754][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.977087][ T2200] netlink: 165 bytes leftover after parsing attributes in process `syz.3.11628'. [ 1503.108410][ T2205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.108539][ T2205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.108669][ T2205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.100675][ T2239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11640'. [ 1505.972904][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.385827][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.857075][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1508.515397][ T2316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11677'. [ 1510.975758][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.729256][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11701'. [ 1512.008446][ T2374] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11702'. [ 1512.977155][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.145136][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1513.295186][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1513.311661][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1513.311693][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1513.311714][ T10] usb 1-1: Product: syz [ 1513.311729][ T10] usb 1-1: Manufacturer: syz [ 1513.311744][ T10] usb 1-1: SerialNumber: syz [ 1513.359055][ T10] usb 1-1: config 0 descriptor?? [ 1513.616994][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.641532][ T49] usb 1-1: USB disconnect, device number 35 [ 1513.642602][ T2401] macvlan0: entered promiscuous mode [ 1513.666439][ T2401] dummy0: entered promiscuous mode [ 1513.684738][ T2401] hsr1: entered promiscuous mode [ 1513.684796][ T2401] hsr1: entered allmulticast mode [ 1513.684810][ T2401] macvlan0: entered allmulticast mode [ 1513.684824][ T2401] veth1_vlan: entered allmulticast mode [ 1513.684857][ T2401] dummy0: entered allmulticast mode [ 1514.158636][ T2416] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11719'. [ 1516.200360][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.677274][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.736037][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.680851][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.503117][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.701413][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1526.319912][ T2636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11791'. [ 1527.056333][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.748207][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.749801][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.120759][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1531.150763][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1531.188547][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1531.205551][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1531.217025][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1532.176256][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.299725][T22535] Bluetooth: hci3: command tx timeout [ 1535.816342][T22535] Bluetooth: hci3: command tx timeout [ 1536.018376][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.667847][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.238897][T19957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.297079][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.495222][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1537.665362][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1537.668129][ T10] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.668166][ T10] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1537.668193][ T10] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1537.668217][ T10] usb 9-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1537.668244][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1537.743840][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1537.743875][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1537.743897][ T10] usb 9-1: SerialNumber: syz [ 1537.792561][ T2893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1537.792727][ T2893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1537.855220][T22535] Bluetooth: hci3: command tx timeout [ 1538.013088][ T2893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1538.013223][ T2893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1538.166873][T19957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.243491][ T2754] chnl_net:caif_netlink_parms(): no params data found [ 1538.324802][ T2929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11893'. [ 1538.613651][T19957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.764679][ T10] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1538.856233][ T31] usb 9-1: USB disconnect, device number 29 [ 1538.860803][ T31] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1539.196100][T19957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.812189][ T2754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.812406][ T2754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.812697][ T2754] bridge_slave_0: entered allmulticast mode [ 1539.826796][ T2754] bridge_slave_0: entered promiscuous mode [ 1539.846015][ T2754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.846514][ T2754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.847161][ T2754] bridge_slave_1: entered allmulticast mode [ 1539.857899][ T2754] bridge_slave_1: entered promiscuous mode [ 1539.942403][T22535] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1539.974395][T22535] Bluetooth: hci3: command tx timeout [ 1540.178078][ T2754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.213410][ T2754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.023079][ T2754] team0: Port device team_slave_0 added [ 1541.235711][ T2754] team0: Port device team_slave_1 added [ 1541.605533][ T2754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.605555][ T2754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.605585][ T2754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.612799][ T2754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.612818][ T2754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.612849][ T2754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.645809][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1541.776396][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.777637][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.817040][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1541.819927][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1541.819957][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1541.819984][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1541.820009][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1541.820052][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1541.820077][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.967306][T19957] bridge_slave_1: left allmulticast mode [ 1541.967341][T19957] bridge_slave_1: left promiscuous mode [ 1541.984167][T19957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.127118][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 1542.127171][ T10] usbtmc 5-1:16.0: can't read capabilities [ 1542.165390][T19957] bridge_slave_0: left allmulticast mode [ 1542.165422][T19957] bridge_slave_0: left promiscuous mode [ 1542.165693][T19957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.358524][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.364630][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368180][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368273][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368351][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368770][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368849][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.368921][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.369335][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.369410][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.371704][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.371787][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.371864][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.372265][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.372343][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.372621][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1542.423595][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.538231][T18744] usb 5-1: USB disconnect, device number 55 [ 1542.605494][ T31] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1542.757781][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.757819][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.757841][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1542.757887][ T31] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1542.757912][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.829530][ T31] usb 9-1: config 0 descriptor?? [ 1543.299338][ T31] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 1543.299383][ T31] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1543.299418][ T31] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1543.347536][ T31] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1543.557637][ T9] usb 9-1: USB disconnect, device number 30 [ 1545.060731][ T3088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.060946][ T3088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.061083][ T3088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.486086][T19957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.582653][T19957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.648552][T19957] bond0 (unregistering): Released all slaves [ 1546.841255][ T2754] hsr_slave_0: entered promiscuous mode [ 1546.842734][ T2754] hsr_slave_1: entered promiscuous mode [ 1546.843728][ T2754] debugfs: 'hsr0' already exists in 'hsr' [ 1546.843755][ T2754] Cannot create hsr debugfs directory [ 1546.941949][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.537072][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.538577][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.292766][T19957] hsr_slave_0: left promiscuous mode [ 1550.365517][T19957] hsr_slave_1: left promiscuous mode [ 1550.368054][T19957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.368098][T19957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.456661][T19957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.456694][T19957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.804928][T19957] veth1_macvtap: left promiscuous mode [ 1550.822170][T19957] veth0_macvtap: left promiscuous mode [ 1550.822459][T19957] veth1_vlan: left promiscuous mode [ 1550.822640][T19957] veth0_vlan: left promiscuous mode [ 1551.404384][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.404462][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.656746][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.302825][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.303109][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.138477][ T37] audit: type=1326 audit(1770220582.987:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3278 comm="syz.3.12041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x0 [ 1557.737339][T19957] team0 (unregistering): Port device team_slave_1 removed [ 1558.166751][T19957] team0 (unregistering): Port device team_slave_0 removed [ 1558.425509][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.426136][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.071553][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.604421][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.605684][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.167967][ T3585] loop0: detected capacity change from 0 to 16 [ 1564.816420][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.564093][T18744] kernel write not supported for file bpf-prog (pid: 18744 comm: kworker/1:2) [ 1568.676010][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.297497][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.858529][ T3020] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1569.871190][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.008857][ T3020] usb 9-1: Using ep0 maxpacket: 8 [ 1570.025158][ T3020] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1570.025223][ T3020] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1570.025246][ T3020] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1570.025272][ T3020] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1570.025297][ T3020] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1570.025343][ T3020] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1570.025366][ T3020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.480837][ T2754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1570.587257][ T2754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1570.638535][ T2754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1570.697806][ T2754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1570.865693][ T3788] usbtmc 9-1:16.0: simple usb_control_msg returned 0 [ 1571.069902][ T3020] usb 9-1: USB disconnect, device number 31 [ 1571.337907][ T2754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.386949][ T2754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.447506][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.447617][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.491596][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.491826][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.950262][ T3815] netlink: 'syz.3.12275': attribute type 2 has an invalid length. [ 1572.802337][ T2754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.510056][ T2754] veth0_vlan: entered promiscuous mode [ 1573.681910][ T2754] veth1_vlan: entered promiscuous mode [ 1573.866529][ T2754] veth0_macvtap: entered promiscuous mode [ 1573.890463][ T2754] veth1_macvtap: entered promiscuous mode [ 1573.997451][ T2754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1574.037686][ T3869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.054111][ T2754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1574.137934][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.155556][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.157335][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.158757][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.431594][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.056815][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.085783][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.091825][T19957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.091850][T19957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.558326][T19957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.558351][T19957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.229963][ T3950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1579.536447][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.768455][ T4089] syzkaller1: entered promiscuous mode [ 1580.816370][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.817193][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.487769][ T37] audit: type=1326 audit(1770220610.337:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4115 comm="syz.1.12383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f99aeb9 code=0x0 [ 1581.606146][ T4114] bond0: (slave team0): Releasing backup interface [ 1581.820884][ T4114] bridge_slave_0: left allmulticast mode [ 1581.820917][ T4114] bridge_slave_0: left promiscuous mode [ 1581.821207][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.938375][ T4114] bridge_slave_1: left allmulticast mode [ 1581.938414][ T4114] bridge_slave_1: left promiscuous mode [ 1581.938702][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.115771][ T4114] bond0: (slave bond_slave_0): Releasing backup interface [ 1582.201624][ T4114] bond0: (slave bond_slave_1): Releasing backup interface [ 1582.369206][ T4114] team0: Port device team_slave_0 removed [ 1582.491778][ T4114] team0: Port device team_slave_1 removed [ 1582.493639][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.493671][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.541196][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.541232][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.587266][ T4114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1582.682030][T25238] bond3: (slave vlan2): link status definitely down, disabling slave [ 1582.683016][T25238] bond3: now running without any active interface! [ 1583.844395][ T4200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.173542][ T4248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.296768][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.478297][ T4254] input: syz1 as /devices/virtual/input/input62 [ 1585.574683][ T4260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12426'. [ 1585.965007][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.306759][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.504843][ T5116] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1586.576852][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.462425][ T4331] binder: 4329:4331 ioctl c0306201 200000000640 returned -22 [ 1590.363885][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.515104][ T10] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1591.675210][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1591.677762][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1591.677816][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1591.677841][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.697940][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.699302][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.756195][ T10] usb 9-1: config 0 descriptor?? [ 1592.002511][ T10] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1592.559611][ T10] usb 9-1: USB disconnect, device number 32 [ 1593.137593][ T4454] nbd: socks must be embedded in a SOCK_ITEM attr [ 1593.173257][ T4454] block nbd0: shutting down sockets [ 1594.015570][T18744] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1594.190602][T18744] usb 9-1: Using ep0 maxpacket: 8 [ 1594.203149][T18744] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1594.203214][T18744] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1594.203240][T18744] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1594.203268][T18744] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1594.203294][T18744] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.203339][T18744] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1594.203364][T18744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.864471][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12517'. [ 1596.181524][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.156531][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.206414][ T3020] usb 9-1: USB disconnect, device number 33 [ 1597.459546][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.611549][ T4593] netlink: 'syz.4.12542': attribute type 1 has an invalid length. [ 1597.725391][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12542'. [ 1597.840284][ T4593] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1597.961473][ T4596] bond4: (slave gretap2): making interface the new active one [ 1597.991662][ T4596] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1599.838959][ T4660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12564'. [ 1600.056710][ T4666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12566'. [ 1601.946615][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.577906][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.599883][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.300820][ T4766] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12600'. [ 1605.337186][ T3745] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1605.495952][ T3745] usb 2-1: Using ep0 maxpacket: 16 [ 1605.513186][ T3745] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1605.513220][ T3745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.513243][ T3745] usb 2-1: Product: syz [ 1605.513260][ T3745] usb 2-1: Manufacturer: syz [ 1605.513271][ T3745] usb 2-1: SerialNumber: syz [ 1605.555932][ T3745] usb 2-1: config 0 descriptor?? [ 1605.997335][ T3745] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1606.001698][ T3745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1606.002697][ T3745] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1606.002768][ T3745] usb 2-1: media controller created [ 1606.081382][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12641'. [ 1606.081429][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12641'. [ 1606.081446][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12641'. [ 1606.095562][ T3745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1606.737449][ T4194] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1606.745621][ T3745] zl10353_read_register: readreg error (reg=127, ret==0) [ 1606.745698][ T3745] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1606.745715][ T3745] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1606.903615][ T3745] usb 2-1: USB disconnect, device number 30 [ 1606.918568][ T4194] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1606.918602][ T4194] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.918626][ T4194] usb 9-1: Product: syz [ 1606.918642][ T4194] usb 9-1: Manufacturer: syz [ 1606.918658][ T4194] usb 9-1: SerialNumber: syz [ 1606.969188][ T4194] usb 9-1: config 0 descriptor?? [ 1607.133474][ T3745] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1607.430768][ T4194] usb 9-1: Firmware: major: 145, minor: 244, hardware type: UNKNOWN (94) [ 1607.635762][ T4194] usb 9-1: failed to fetch extended address, random address set [ 1607.635796][ T4194] usb 9-1: atusb_probe: initialization failed, error = -524 [ 1607.636066][ T4194] atusb 9-1:0.0: probe with driver atusb failed with error -524 [ 1607.696176][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.696728][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.844046][ T4194] usb 9-1: USB disconnect, device number 34 [ 1608.336019][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.587367][ T37] audit: type=1326 audit(1770220637.437:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4910 comm="syz.1.12662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f99aeb9 code=0x0 [ 1609.282845][ T4932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.282980][ T4932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.283105][ T4932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.545939][ T5018] 9p: Bad value for 'wfdno' [ 1612.685481][ T3020] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1612.825203][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.825278][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.852772][ T3020] usb 9-1: Using ep0 maxpacket: 32 [ 1612.869926][ T3020] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1612.869957][ T3020] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1612.869979][ T3020] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.870000][ T3020] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1612.870038][ T3020] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1612.870063][ T3020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.981813][ T3020] usb 9-1: config 0 descriptor?? [ 1613.456129][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.019441][ T5054] delete_channel: no stack [ 1614.098965][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.441642][ T3050] usb 9-1: USB disconnect, device number 35 [ 1615.653401][ T5108] netlink: 'syz.4.12742': attribute type 1 has an invalid length. [ 1615.736684][ T5117] overlayfs: failed to clone lowerpath [ 1615.776058][ T3020] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1615.837042][ T5108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1615.935691][ T3020] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.935758][ T3020] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1615.935786][ T3020] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1615.935809][ T3020] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.935862][ T3020] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1615.935886][ T3020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.031388][ T3020] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.032413][ T3020] usb 2-1: invalid MIDI out EP 0 [ 1616.119479][ T3020] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1616.233444][ T3526] udevd[3526]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1616.363271][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12748'. [ 1616.364233][ T3020] usb 2-1: USB disconnect, device number 31 [ 1616.534132][ T5118] bond5: (slave dummy0): making interface the new active one [ 1616.580439][ T5118] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1616.582430][ T5130] batadv_slave_1: entered promiscuous mode [ 1616.905482][ T3020] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1617.028507][ T5133] batadv_slave_1 (unregistering): left promiscuous mode [ 1617.028615][ T5133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.075178][ T3020] usb 2-1: device descriptor read/64, error -71 [ 1617.335425][ T3020] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1617.469540][ T3020] usb 2-1: device descriptor read/64, error -71 [ 1617.582270][ T3020] usb usb2-port1: attempt power cycle [ 1617.975161][ T3020] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1617.996279][ T3020] usb 2-1: device descriptor read/8, error -71 [ 1618.245120][ T3020] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1618.271009][ T3020] usb 2-1: device descriptor read/8, error -71 [ 1618.375464][ T3020] usb usb2-port1: unable to enumerate USB device [ 1619.225902][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.867777][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.360470][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12785'. [ 1621.079756][ T5271] netlink: 'syz.3.12795': attribute type 4 has an invalid length. [ 1621.099687][ T5271] netlink: 'syz.3.12795': attribute type 4 has an invalid length. [ 1621.781690][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.402505][ T5329] netlink: 'syz.8.12816': attribute type 4 has an invalid length. [ 1624.976011][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.250104][ T5380] overlayfs: failed to clone upperpath [ 1625.616885][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.815761][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.593572][T22535] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1628.633262][T22535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1628.647823][T22535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1628.652191][T22535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1628.653005][T22535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1629.305962][ T5478] overlayfs: failed to clone upperpath [ 1629.361055][T25238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.469931][T25238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.743680][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.832156][ T5116] Bluetooth: hci3: command tx timeout [ 1631.138950][T25238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.381559][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.948686][T25238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.989013][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12914'. [ 1632.658049][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.898061][ T5116] Bluetooth: hci3: command tx timeout [ 1632.984141][ T5457] chnl_net:caif_netlink_parms(): no params data found [ 1633.661425][T25238] bridge_slave_1: left allmulticast mode [ 1633.661458][T25238] bridge_slave_1: left promiscuous mode [ 1633.661705][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.745361][ T3020] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1633.872530][T25238] bridge_slave_0: left allmulticast mode [ 1633.872564][T25238] bridge_slave_0: left promiscuous mode [ 1633.872864][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.905716][ T3020] usb 9-1: Using ep0 maxpacket: 16 [ 1633.908242][ T3020] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.908276][ T3020] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1633.908308][ T3020] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1633.908344][ T3020] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1633.908368][ T3020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.000056][ T3020] usb 9-1: config 0 descriptor?? [ 1634.454588][ T3020] nzxt-smart2 0003:1E71:2009.004F: unknown main item tag 0x0 [ 1634.454630][ T3020] nzxt-smart2 0003:1E71:2009.004F: unknown main item tag 0x0 [ 1634.454659][ T3020] nzxt-smart2 0003:1E71:2009.004F: unknown main item tag 0x0 [ 1634.454687][ T3020] nzxt-smart2 0003:1E71:2009.004F: unknown main item tag 0x0 [ 1634.454716][ T3020] nzxt-smart2 0003:1E71:2009.004F: unknown main item tag 0x0 [ 1634.459763][ T3020] nzxt-smart2 0003:1E71:2009.004F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 1634.661951][ T3020] usb 9-1: USB disconnect, device number 36 [ 1635.026265][ T5116] Bluetooth: hci3: command tx timeout [ 1636.533780][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.534352][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.069736][ T5116] Bluetooth: hci3: command tx timeout [ 1638.481444][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.640067][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.832095][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.882782][T25238] bond0 (unregistering): Released all slaves [ 1642.123001][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.123139][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.123391][ T5457] bridge_slave_0: entered allmulticast mode [ 1642.126488][ T5457] bridge_slave_0: entered promiscuous mode [ 1642.159287][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.159410][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.159622][ T5457] bridge_slave_1: entered allmulticast mode [ 1642.162429][ T5457] bridge_slave_1: entered promiscuous mode [ 1642.256254][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.256645][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.572419][ T5457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.263794][ T5457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.822536][ T5457] team0: Port device team_slave_0 added [ 1643.839174][ T5457] team0: Port device team_slave_1 added [ 1644.190901][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.157858][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.157881][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.157912][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.222446][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.222468][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.222499][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.470083][T25238] hsr_slave_0: left promiscuous mode [ 1645.505142][T25238] hsr_slave_1: left promiscuous mode [ 1645.506313][T25238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.506339][T25238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.608171][T25238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.608204][T25238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1646.136932][T25238] veth1_macvtap: left promiscuous mode [ 1646.137047][T25238] veth0_macvtap: left promiscuous mode [ 1646.137305][T25238] veth1_vlan: left promiscuous mode [ 1646.137494][T25238] veth0_vlan: left promiscuous mode [ 1647.299584][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.406250][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.312772][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.418315][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.495843][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.634415][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1653.650708][ T6039] input: syz1 as /devices/virtual/input/input63 [ 1654.386180][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1655.065928][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.768600][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13129'. [ 1657.660261][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.256437][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.563224][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13176'. [ 1659.759647][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13176'. [ 1659.882360][ T5996] netlink: 176 bytes leftover after parsing attributes in process `syz.4.13084'. [ 1659.942952][ T6089] ipvlan2: entered promiscuous mode [ 1660.823951][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.834535][ T5457] hsr_slave_0: entered promiscuous mode [ 1660.836233][ T5457] hsr_slave_1: entered promiscuous mode [ 1660.837177][ T5457] debugfs: 'hsr0' already exists in 'hsr' [ 1660.837201][ T5457] Cannot create hsr debugfs directory [ 1662.798715][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.016777][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.479019][ T6313] netlink: 'syz.4.13222': attribute type 10 has an invalid length. [ 1664.529425][ T6316] netlink: 'syz.4.13222': attribute type 10 has an invalid length. [ 1664.661654][ T6313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.710369][ T6313] bond0: (slave team0): Enslaving as an active interface with an up link [ 1665.635192][ T6317] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1665.737001][ T6317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1665.806719][ T37] audit: type=1326 audit(1770220694.657:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.806888][ T37] audit: type=1326 audit(1770220694.657:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.807243][ T37] audit: type=1326 audit(1770220694.657:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.807536][ T37] audit: type=1326 audit(1770220694.657:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.807848][ T37] audit: type=1326 audit(1770220694.657:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.807997][ T37] audit: type=1326 audit(1770220694.657:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.808245][ T37] audit: type=1326 audit(1770220694.657:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1665.814889][ T6342] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1665.875273][ T6342] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 1665.876260][ T6342] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1665.876474][ T6342] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1665.879503][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.896821][ T6342] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 1665.899859][ T6342] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 1665.901427][ T6342] kvm: requested 161752 ns i8254 timer period limited to 200000 ns [ 1665.903168][ T6342] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 1665.926069][ T6342] kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 1665.986800][ T6342] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 1666.165522][ T37] audit: type=1326 audit(1770220694.997:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1666.165726][ T37] audit: type=1326 audit(1770220695.017:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.8.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1667.361823][ T5457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1667.446762][ T5457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1667.500008][ T5457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1667.532633][ T6390] 9p: Bad value for 'rfdno' [ 1667.563612][ T5457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1668.054261][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.171197][ T5457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.223015][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.223129][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.253424][ T2359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.253675][ T2359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.501123][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.041749][ T37] audit: type=1326 audit(1770220697.877:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.4.13258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3700caeb9 code=0x7fc00000 [ 1669.136323][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.024140][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.063353][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.532642][ T5457] veth0_vlan: entered promiscuous mode [ 1671.604711][ T5457] veth1_vlan: entered promiscuous mode [ 1671.931373][ T5457] veth0_macvtap: entered promiscuous mode [ 1671.960474][ T5457] veth1_macvtap: entered promiscuous mode [ 1672.003404][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1672.070269][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1672.147742][T19957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.152185][T19957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.183961][T19957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.184255][T19957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.502261][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.502292][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.318063][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.318141][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.342438][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.368281][ T2359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.368307][ T2359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.898622][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.612770][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.106368][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13326'. [ 1679.106397][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13326'. [ 1680.583903][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.861120][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.130317][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.267843][ T6690] 9p: Bad value for 'rfdno' [ 1686.642145][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.924408][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.726809][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.125345][ T6835] create_pit_timer: 6 callbacks suppressed [ 1692.125369][ T6835] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1692.175967][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.176505][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.129253][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.630721][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13386'. [ 1697.833411][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.936944][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.382856][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.718708][ T6914] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13398'. [ 1701.718758][ T6914] netlink: 'syz.6.13398': attribute type 8 has an invalid length. [ 1701.817715][ T6920] 9p: Bad value for 'rfdno' [ 1704.261061][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.261566][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.644013][ T6965] fuse: Unknown parameter '0x0000000000000003' [ 1705.685710][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13413'. [ 1707.557411][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.034877][ T6998] vlan2: entered allmulticast mode [ 1708.034896][ T6998] bond0: entered allmulticast mode [ 1708.039233][ T6998] netlink: 14 bytes leftover after parsing attributes in process `syz.8.13422'. [ 1709.456204][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.456766][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.404553][ T6998] bond0 (unregistering): Released all slaves [ 1713.430000][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.776903][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.785001][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.541543][ T7071] tipc: Failed to remove unknown binding: 66,0,0/10136234:1635372987/1635372988 [ 1716.541911][ T7071] tipc: Failed to remove unknown binding: 66,0,0/10136234:1635372987/1635372988 [ 1718.358653][ T3745] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 1718.945798][ T7094] ptrace attach of "./syz-executor exec"[5802] was attempted by " [ 1719.100049][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.166476][ T3745] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1719.743638][ T7097] fido_id[7097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1720.983154][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.983375][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.313733][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.465793][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.466312][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.082451][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.725001][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.725079][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.768316][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.768835][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.710258][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.710808][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.286158][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1742.286178][ T37] audit: type=1326 audit(1770220771.137:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7296 comm="syz.6.13486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1134aeb9 code=0x0 [ 1744.863789][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.902732][ T7340] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13514'. [ 1747.750935][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.751443][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.435693][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.977367][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.147385][ T5116] Bluetooth: hci3: command 0x0406 tx timeout [ 1754.488351][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.857749][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1755.888855][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1755.983512][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1756.019340][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1756.053243][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1756.281989][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.722907][ T7419] tipc: Failed to remove unknown binding: 66,0,0/8432298:1419737191/1419737192 [ 1758.425342][ T7438] tmpfs: Unknown parameter 'fscontext' [ 1759.722133][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.238133][T22535] Bluetooth: hci5: command tx timeout [ 1760.266667][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.867012][ T7461] netlink: 5 bytes leftover after parsing attributes in process `syz.8.13545'. [ 1761.956031][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.105200][ T5872] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1762.236533][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1762.236785][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1762.251915][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1762.252959][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1762.270214][T22535] Bluetooth: hci5: command tx timeout [ 1762.283481][ T5872] usb 9-1: config 0 has an invalid interface number: 175 but max is 0 [ 1762.283526][ T5872] usb 9-1: config 0 has no interface number 0 [ 1762.283612][ T5872] usb 9-1: config 0 interface 175 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1762.283667][ T5872] usb 9-1: config 0 interface 175 has no altsetting 0 [ 1762.294754][ T5872] usb 9-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1762.294805][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.294844][ T5872] usb 9-1: Product: syz [ 1762.295061][ T5872] usb 9-1: Manufacturer: syz [ 1762.295081][ T5872] usb 9-1: SerialNumber: syz [ 1762.413834][ T7460] ceph: No mds server is up or the cluster is laggy [ 1762.930980][ T5872] usb 9-1: config 0 descriptor?? [ 1762.932273][ T7388] libceph: connect (1)[c::]:6789 error -101 [ 1762.932489][ T7388] libceph: mon0 (1)[c::]:6789 connect error [ 1763.004676][ T7473] IPv6: NLM_F_CREATE should be specified when creating new route [ 1763.272167][ T5872] hub 9-1:0.175: bad descriptor, ignoring hub [ 1763.272197][ T5872] hub 9-1:0.175: probe with driver hub failed with error -5 [ 1763.273766][ T5872] usbsevseg 9-1:0.175: USB 7 Segment device now attached [ 1763.359068][ T5872] usb 9-1: USB disconnect, device number 37 [ 1763.360134][ T5872] usbsevseg 9-1:0.175: USB 7 Segment now disconnected [ 1763.622669][ T7484] overlayfs: failed to clone lowerpath [ 1763.724299][ T7485] overlayfs: failed to clone lowerpath [ 1764.646904][T22535] Bluetooth: hci5: command tx timeout [ 1765.547848][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.576684][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13556'. [ 1767.627967][ T9] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 1767.862572][T22535] Bluetooth: hci5: command tx timeout [ 1767.898214][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.906819][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.952541][ T9] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1768.164105][ T7405] chnl_net:caif_netlink_parms(): no params data found [ 1768.585453][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.585650][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.585888][ T7405] bridge_slave_0: entered allmulticast mode [ 1768.588667][ T7405] bridge_slave_0: entered promiscuous mode [ 1768.658948][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.659076][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.659352][ T7405] bridge_slave_1: entered allmulticast mode [ 1768.662191][ T7405] bridge_slave_1: entered promiscuous mode [ 1768.827650][ T7405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.871813][ T7518] fido_id[7518]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1768.886222][ T7405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.043066][T22535] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1769.072632][ T7405] team0: Port device team_slave_0 added [ 1769.091264][ T7405] team0: Port device team_slave_1 added [ 1770.826957][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.826978][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.827010][ T7405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.848630][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.848695][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.848781][ T7405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.942492][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.082080][ T7405] hsr_slave_0: entered promiscuous mode [ 1771.092162][ T7405] hsr_slave_1: entered promiscuous mode [ 1771.093177][ T7405] debugfs: 'hsr0' already exists in 'hsr' [ 1771.093204][ T7405] Cannot create hsr debugfs directory [ 1773.225208][ T9] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1773.387628][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1773.387668][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1773.390790][ T9] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1773.390822][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.390845][ T9] usb 9-1: Product: syz [ 1773.390861][ T9] usb 9-1: Manufacturer: syz [ 1773.390877][ T9] usb 9-1: SerialNumber: syz [ 1773.416016][ T9] usb 9-1: config 0 descriptor?? [ 1773.417300][ T7595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1773.440275][ C0] port100 9-1:0.0: NFC: Urb failure (status -71) [ 1773.469948][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.474049][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.588142][ T9] port100 9-1:0.0: NFC: Could not get supported command types [ 1773.688859][ T4818] usb 9-1: USB disconnect, device number 38 [ 1777.071362][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.768568][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.769132][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.890281][ T7670] tipc: Failed to remove unknown binding: 66,0,0/0:3274907827/3274907828 [ 1779.890687][ T7670] tipc: Failed to remove unknown binding: 66,0,0/0:3274907827/3274907828 [ 1781.487588][ T7688] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1782.595860][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.975475][T22535] Bluetooth: hci1: adv larger than maximum supported [ 1783.853420][T22535] Bluetooth: hci0: unexpected cc 0x206e length: 4 > 3 [ 1783.853455][T22535] Bluetooth: hci0: unexpected event for opcode 0x206e [ 1785.089381][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.089907][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.776122][ T7405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1789.046027][ T7405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1789.784447][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.895870][ T7405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1789.974220][ T37] audit: type=1326 audit(1770220818.817:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.3.13661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1789.998999][ T37] audit: type=1326 audit(1770220818.817:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.3.13661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1790.002799][ T37] audit: type=1326 audit(1770220818.847:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.3.13661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1790.003113][ T37] audit: type=1326 audit(1770220818.847:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.3.13661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1790.098727][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.180134][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.356946][ T7405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1792.318975][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.719078][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.796673][T25545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.796848][T25545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.799743][T25545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.799913][T25545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.815612][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.054151][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.109481][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.049221][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.134068][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13691'. [ 1797.145734][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.145815][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.321215][ T7405] veth0_vlan: entered promiscuous mode [ 1797.359786][ T7405] veth1_vlan: entered promiscuous mode [ 1797.512371][ T7405] veth0_macvtap: entered promiscuous mode [ 1797.575340][ T7405] veth1_macvtap: entered promiscuous mode [ 1797.660053][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.714588][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.815360][ T6936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.818464][T25545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.823276][T25545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.823556][T25545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.607916][ T7965] tipc: Failed to remove unknown binding: 66,0,0/8432298:1112306184/1112306185 [ 1798.608181][ T7965] tipc: Failed to remove unknown binding: 66,0,0/8432298:1112306184/1112306185 [ 1798.734316][T19959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.734340][T19959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.889648][T25545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.889673][T25545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.446675][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.447205][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.645624][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.052413][ T8006] tipc: Failed to remove unknown binding: 66,0,0/0:39888527/39888528 [ 1802.052853][ T8006] tipc: Failed to remove unknown binding: 66,0,0/0:39888527/39888528 [ 1802.336535][ T8012] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.13530' sets config #1 [ 1802.562275][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13720'. [ 1803.976188][ T37] audit: type=1326 audit(1770220832.817:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1803.976539][ T37] audit: type=1326 audit(1770220832.827:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1803.980088][ T37] audit: type=1326 audit(1770220832.827:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1803.988473][ T37] audit: type=1326 audit(1770220832.837:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1804.043570][ T37] audit: type=1326 audit(1770220832.887:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1804.043787][ T37] audit: type=1326 audit(1770220832.887:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1804.045605][ T37] audit: type=1326 audit(1770220832.897:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1804.206978][ T8050] tipc: Enabling of bearer rejected, failed to enable media [ 1804.236443][ T37] audit: type=1326 audit(1770220833.047:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0331ddc747 code=0x7ffc0000 [ 1804.236517][ T37] audit: type=1326 audit(1770220833.077:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0331d9b78e code=0x7ffc0000 [ 1804.452847][ T37] audit: type=1326 audit(1770220833.297:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.3.13724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0331d9b78e code=0x7ffc0000 [ 1804.653348][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13729'. [ 1804.733777][ T8058] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1804.734195][ T8058] bridge1: entered promiscuous mode [ 1806.561449][ T8093] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13741'. [ 1806.740186][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.746423][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.379939][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.180501][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.511839][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.137874][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.172921][ T8209] lo: entered promiscuous mode [ 1813.189670][ T8209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1813.455668][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13783'. [ 1816.975283][ T8272] comedi comedi0: Minor 3 specified more than once! [ 1817.640801][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.256472][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.256551][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.669854][ T8324] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1819.559438][ T8334] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1819.724469][ T8334] bond0 (unregistering): Released all slaves [ 1820.396479][ T8370] tipc: Failed to remove unknown binding: 66,0,0/0:830335207/830335208 [ 1820.396635][ T8370] tipc: Failed to remove unknown binding: 66,0,0/0:830335207/830335208 [ 1820.706193][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13844'. [ 1821.861252][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13856'. [ 1823.025270][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13861'. [ 1823.025297][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13861'. [ 1823.376336][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.376922][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.490735][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.566921][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13867'. [ 1825.245407][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13870'. [ 1825.378540][ T8459] tipc: Failed to remove unknown binding: 66,0,0/0:476048663/476048664 [ 1825.378781][ T8459] tipc: Failed to remove unknown binding: 66,0,0/0:476048663/476048664 [ 1825.417943][ T8464] netlink: 'syz.6.13873': attribute type 1 has an invalid length. [ 1825.419701][ T8463] geneve2: entered promiscuous mode [ 1825.446965][ T6936] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1825.447036][T19951] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1825.447081][T19951] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1825.447120][T19951] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1829.233892][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.265422][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.265505][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.006918][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13913'. [ 1832.521890][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13921'. [ 1832.712672][ T8603] netlink: 140 bytes leftover after parsing attributes in process `syz.6.13920'. [ 1832.712835][ T8603] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13920'. [ 1833.170463][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13925'. [ 1833.174124][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13925'. [ 1833.950471][ T8640] comedi comedi2: multiq3: I/O port conflict (0x40,16) [ 1835.897064][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.897629][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.898532][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.296912][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.297971][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.299305][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.517370][T22535] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 1846.335963][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.415696][ T2359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.199962][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14010'. [ 1847.579554][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.157648][ T8872] netlink: 'syz.6.14021': attribute type 3 has an invalid length. [ 1852.713815][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.714716][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.739617][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.580405][ T8921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1857.263823][ T9025] netlink: 'syz.6.14089': attribute type 1 has an invalid length. [ 1858.188575][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.580488][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.583505][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.583580][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.125379][ T9132] kAFS: unable to lookup cell '(' [ 1862.380376][ T9141] netlink: 'syz.3.14136': attribute type 12 has an invalid length. [ 1862.793565][T22535] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 1863.801886][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.915865][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.945115][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.054070][ T9206] bridge1: entered allmulticast mode [ 1868.268617][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1868.268637][ T37] audit: type=1326 audit(1770220897.117:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.270307][ T37] audit: type=1326 audit(1770220897.117:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.318830][ T37] audit: type=1326 audit(1770220897.117:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.318980][ T37] audit: type=1326 audit(1770220897.167:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.319112][ T37] audit: type=1326 audit(1770220897.167:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.319230][ T37] audit: type=1326 audit(1770220897.167:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.332468][ T37] audit: type=1326 audit(1770220897.177:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.332617][ T37] audit: type=1326 audit(1770220897.177:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.332735][ T37] audit: type=1326 audit(1770220897.177:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9230 comm="syz.3.14176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1868.796718][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14181'. [ 1869.460495][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.706156][ T9258] tc_dump_action: action bad kind [ 1870.063088][T19957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.849098][ T9287] netlink: 'syz.8.14200': attribute type 34 has an invalid length. [ 1872.016996][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.083118][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14203'. [ 1873.714764][T22535] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 1874.125032][ T9329] netlink: 'syz.8.14218': attribute type 10 has an invalid length. [ 1874.185238][ T37] audit: type=1326 audit(1770220903.037:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1874.187491][ T37] audit: type=1326 audit(1770220903.037:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1874.189143][ T37] audit: type=1326 audit(1770220903.037:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1874.189476][ T37] audit: type=1326 audit(1770220903.037:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1874.189790][ T37] audit: type=1326 audit(1770220903.037:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9332 comm="syz.3.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0331ddaeb9 code=0x7ffc0000 [ 1875.161916][ T9] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1875.216527][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.316272][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1875.316310][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1875.316338][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1875.321746][ T9] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1875.321781][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.321804][ T9] usb 9-1: Product: syz [ 1875.321820][ T9] usb 9-1: Manufacturer: syz [ 1875.321836][ T9] usb 9-1: SerialNumber: syz [ 1875.409848][ T9] usb 9-1: config 0 descriptor?? [ 1875.412959][ T9353] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1875.413210][ T9353] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1875.457573][ T9] usb 9-1: ucan: probing device on interface #0 [ 1875.678590][ T9] usb 9-1: ucan: device protocol version 0 is not supported [ 1875.678620][ T9] usb 9-1: ucan: probe failed; try to update the device firmware [ 1875.862232][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.885056][ T3020] usb 9-1: USB disconnect, device number 39 [ 1877.614191][ T9404] netlink: 'syz.8.14249': attribute type 4 has an invalid length. [ 1877.614217][ T9404] netlink: 240 bytes leftover after parsing attributes in process `syz.8.14249'. [ 1878.029048][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.110276][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14276'. [ 1880.359164][ T9485] usb usb8: usbfs: process 9485 (syz.6.14282) did not claim interface 0 before use [ 1880.945037][ T3745] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1880.978473][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.979993][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.099261][ T3745] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1881.099294][ T3745] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1881.099315][ T3745] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.099336][ T3745] usb 9-1: config 220 has no interface number 2 [ 1881.099411][ T3745] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1881.099440][ T3745] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1881.099458][ T3745] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1881.099478][ T3745] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1881.103902][ T3745] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1881.103937][ T3745] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.103960][ T3745] usb 9-1: Product: syz [ 1881.103976][ T3745] usb 9-1: Manufacturer: syz [ 1881.103992][ T3745] usb 9-1: SerialNumber: syz [ 1881.423285][ T3745] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1881.423326][ T3745] uvcvideo 9-1:220.0: No valid video chain found. [ 1881.423391][ T3745] usb 9-1: selecting invalid altsetting 0 [ 1881.455403][T22535] Bluetooth: hci5: command 0x0406 tx timeout [ 1881.627713][ T3745] usb 9-1: selecting invalid altsetting 0 [ 1881.627754][ T3745] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1881.675556][ T3745] usb 9-1: USB disconnect, device number 40 [ 1883.789904][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.249914][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14334'. [ 1885.249985][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14334'. [ 1885.502882][ T37] audit: type=1326 audit(1770220914.347:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.532121][ T37] audit: type=1326 audit(1770220914.347:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.533557][ T37] audit: type=1326 audit(1770220914.377:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.533888][ T37] audit: type=1326 audit(1770220914.377:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.534170][ T37] audit: type=1326 audit(1770220914.377:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.534649][ T37] audit: type=1326 audit(1770220914.377:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1885.654737][ T37] audit: type=1326 audit(1770220914.497:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.8.14339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4aceaeb9 code=0x7ffc0000 [ 1886.095796][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.158716][ T37] audit: type=1326 audit(1770220915.007:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.2.14351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdf85aeb9 code=0x7ffc0000 [ 1886.159835][ T37] audit: type=1326 audit(1770220915.007:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.2.14351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdf85aeb9 code=0x7ffc0000 [ 1886.162770][ T37] audit: type=1326 audit(1770220915.007:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.2.14351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdf85aeb9 code=0x7ffc0000 [ 1887.627119][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.757835][ T9664] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1887.757874][ T9664] overlayfs: missing 'lowerdir' [ 1889.301840][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.723618][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14391'. [ 1891.257073][ T9755] tipc: Started in network mode [ 1891.257099][ T9755] tipc: Node identity 4246, cluster identity 4711 [ 1891.257114][ T9755] tipc: Node number set to 16966 [ 1891.257447][ T9755] tipc: Cannot configure node identity twice [ 1891.992702][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.142692][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.251481][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14418'. [ 1893.251575][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14418'. [ 1895.189464][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1896.466142][ T3020] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 1896.466182][ T3020] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 1896.466210][ T3020] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 1896.505778][ T3020] hid-generic 0003:0004:0000.0052: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1896.749235][ T9842] fido_id[9842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1897.059453][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1898.896175][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.096689][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14456'. [ 1900.817854][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1902.242024][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14468'. [ 1902.741425][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.811615][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.580949][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.698007][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1910.425114][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.606991][T25238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.699242][T10070] smc: net device bond0 applied user defined pnetid SYZ2 [ 1914.902984][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.176221][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.335532][ T4792] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1916.487758][ T4792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1916.487833][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1916.487864][ T4792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1916.487892][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1916.487919][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1916.581568][ T4792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1916.581630][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1916.581660][ T4792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1916.581686][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1916.581713][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1916.602272][ T4792] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1916.602332][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1916.602361][ T4792] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1916.602387][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1916.602413][ T4792] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1916.700398][ T4792] usb 3-1: string descriptor 0 read error: -22 [ 1916.711720][ T4792] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1916.711754][ T4792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.775776][ T4792] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1917.507677][ T4792] usb 3-1: USB disconnect, device number 37 [ 1918.644129][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14568'. [ 1918.746449][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1920.031815][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.031893][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.656513][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.936929][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.769032][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.418058][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.949284][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14625'. [ 1928.031807][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1930.297726][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.452639][T19961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.458444][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.797017][T10360] netem: change failed [ 1934.425439][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14669'. [ 1935.404732][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.670174][T10417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14682'. [ 1937.095104][T22535] Bluetooth: hci5: SCO packet for unknown connection handle 2005 [ 1937.973122][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.454372][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14693'. [ 1939.226028][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.861146][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.585935][T22535] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1943.879130][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.291935][T10532] netlink: 'syz.6.14724': attribute type 6 has an invalid length. [ 1944.975603][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.247472][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.265124][ T4792] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1948.534604][ T4792] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1948.534656][ T4792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.555073][ T4792] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1948.555107][ T4792] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1948.555129][ T4792] usb 9-1: Manufacturer: syz [ 1948.606237][ T4792] usb 9-1: config 0 descriptor?? [ 1948.975163][ T4792] rc_core: IR keymap rc-hauppauge not found [ 1948.975187][ T4792] Registered IR keymap rc-empty [ 1948.978787][ T4792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1948.982294][ T4792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input66 [ 1949.288076][T10594] bridge0: entered promiscuous mode [ 1949.343454][T10594] bridge0: port 3(macvlan2) entered blocking state [ 1949.343962][T10594] bridge0: port 3(macvlan2) entered disabled state [ 1949.344595][T10594] macvlan2: entered allmulticast mode [ 1949.344610][T10594] bridge0: entered allmulticast mode [ 1949.473491][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.475413][T18744] usb 9-1: USB disconnect, device number 41 [ 1949.641649][T10594] macvlan2: left allmulticast mode [ 1949.641683][T10594] bridge0: left allmulticast mode [ 1949.643238][T10594] bridge0: left promiscuous mode [ 1950.316221][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14757'. [ 1950.316261][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14757'. [ 1950.753583][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.347828][T10655] netlink: 'syz.2.14778': attribute type 21 has an invalid length. [ 1953.347989][T10655] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14778'. [ 1953.349554][T10655] netlink: 'syz.2.14778': attribute type 21 has an invalid length. [ 1953.349631][T10655] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14778'. [ 1954.168078][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.135671][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.612426][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.874508][T25545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1961.738014][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.255584][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.311825][T10782] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14830'. [ 1965.633175][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.283064][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14857'. [ 1967.385542][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.015661][T19951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.661831][T10917] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1969.662088][T10917] dvmrp1: linktype set to 270 [ 1971.245980][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.360728][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1974.629928][T19959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.085597][T11007] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14923'. [ 1975.085622][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14923'. [ 1976.985342][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.909666][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.410404][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.467531][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.467606][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.548279][T19956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.939137][ T6936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.505210][ T5872] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1986.671528][ T5872] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1986.671564][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1986.671591][ T5872] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1986.690133][ T5872] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1986.690229][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.690285][ T5872] usb 9-1: Product: syz [ 1986.690337][ T5872] usb 9-1: Manufacturer: syz [ 1986.690386][ T5872] usb 9-1: SerialNumber: syz [ 1986.767347][ T5872] usb 9-1: config 0 descriptor?? [ 1986.768276][T11247] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1986.768417][T11247] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1986.826751][ T5872] usb 9-1: ucan: probing device on interface #0 [ 1987.392569][ T5872] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 1987.617729][ T31] usb 9-1: USB disconnect, device number 42 [ 1989.447135][ T57] ------------[ cut here ]------------ [ 1989.447151][ T57] time_after(jiffies, timeout) [ 1989.447169][ T57] WARNING: io_uring/io_uring.c:3027 at io_ring_exit_work+0x4a3/0x960, CPU#1: kworker/u8:3/57 [ 1989.447223][ T57] Modules linked in: [ 1989.447250][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1989.447278][ T57] Tainted: [L]=SOFTLOCKUP [ 1989.447286][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1989.447300][ T57] Workqueue: iou_exit io_ring_exit_work [ 1989.447334][ T57] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1989.447366][ T57] Code: c6 05 61 63 07 0e 01 48 c7 c7 e0 ad 84 8b be 25 00 00 00 48 c7 c2 20 a9 84 8b e8 18 8c 74 00 e9 88 fe ff ff e8 ae 96 98 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1989.447384][ T57] RSP: 0000:ffffc9000123f8e0 EFLAGS: 00010293 [ 1989.447401][ T57] RAX: ffffffff812a9dc2 RBX: 000000010002931f RCX: ffff8880206bdac0 [ 1989.447417][ T57] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1989.447430][ T57] RBP: ffffc9000123fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1989.447443][ T57] R10: dffffc0000000000 R11: fffffbfff1e8fbef R12: dffffc0000000000 [ 1989.447459][ T57] R13: 000000010002930a R14: 0000000000002000 R15: ffff88802f8b4000 [ 1989.447475][ T57] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 1989.447492][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1989.447507][ T57] CR2: 00007f40ad68cc28 CR3: 000000002a53a000 CR4: 00000000003526f0 [ 1989.447526][ T57] Call Trace: [ 1989.447535][ T57] [ 1989.447562][ T57] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1989.447615][ T57] ? process_scheduled_works+0xa0f/0x17a0 [ 1989.447652][ T57] ? process_scheduled_works+0xa0f/0x17a0 [ 1989.447691][ T57] process_scheduled_works+0xaec/0x17a0 [ 1989.447758][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1989.447793][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1989.447831][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1989.447872][ T57] ? schedule+0x90/0x360 [ 1989.447909][ T57] worker_thread+0xda6/0x1360 [ 1989.447958][ T57] kthread+0x726/0x8b0 [ 1989.447989][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1989.448010][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.448035][ T57] ? rt_spin_unlock+0x14f/0x200 [ 1989.448061][ T57] ? rt_spin_unlock+0x160/0x200 [ 1989.448082][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.448111][ T57] ret_from_fork+0x51b/0xa40 [ 1989.448139][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.448161][ T57] ? __switch_to+0xc82/0x1410 [ 1989.448198][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.448228][ T57] ret_from_fork_asm+0x1a/0x30 [ 1989.448281][ T57] [ 1989.448299][ T57] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1989.448318][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1989.448347][ T57] Tainted: [L]=SOFTLOCKUP [ 1989.448355][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1989.448370][ T57] Workqueue: iou_exit io_ring_exit_work [ 1989.448401][ T57] Call Trace: [ 1989.448411][ T57] [ 1989.448421][ T57] vpanic+0x1e0/0x670 [ 1989.448456][ T57] panic+0xc5/0xd0 [ 1989.448486][ T57] ? __pfx_panic+0x10/0x10 [ 1989.448526][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 1989.448565][ T57] __warn+0x315/0x4a0 [ 1989.448593][ T57] ? io_ring_exit_work+0x4a3/0x960 [ 1989.448626][ T57] ? io_ring_exit_work+0x4a3/0x960 [ 1989.448659][ T57] __report_bug+0x29a/0x540 [ 1989.448687][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1989.448715][ T57] ? io_ring_exit_work+0x4a3/0x960 [ 1989.448746][ T57] ? __pfx___report_bug+0x10/0x10 [ 1989.448781][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1989.448823][ T57] ? io_ring_exit_work+0x4a3/0x960 [ 1989.448864][ T57] report_bug+0x16a/0x220 [ 1989.448891][ T57] ? io_ring_exit_work+0x4a3/0x960 [ 1989.448921][ T57] ? io_ring_exit_work+0x4a5/0x960 [ 1989.448951][ T57] handle_bug+0x98/0x200 [ 1989.448988][ T57] exc_invalid_op+0x1a/0x50 [ 1989.449022][ T57] asm_exc_invalid_op+0x1a/0x20 [ 1989.449044][ T57] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 1989.449076][ T57] Code: c6 05 61 63 07 0e 01 48 c7 c7 e0 ad 84 8b be 25 00 00 00 48 c7 c2 20 a9 84 8b e8 18 8c 74 00 e9 88 fe ff ff e8 ae 96 98 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 1989.449095][ T57] RSP: 0000:ffffc9000123f8e0 EFLAGS: 00010293 [ 1989.449113][ T57] RAX: ffffffff812a9dc2 RBX: 000000010002931f RCX: ffff8880206bdac0 [ 1989.449131][ T57] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1989.449144][ T57] RBP: ffffc9000123fa70 R08: 0000000000000000 R09: 0000000000000000 [ 1989.449159][ T57] R10: dffffc0000000000 R11: fffffbfff1e8fbef R12: dffffc0000000000 [ 1989.449176][ T57] R13: 000000010002930a R14: 0000000000002000 R15: ffff88802f8b4000 [ 1989.449201][ T57] ? io_ring_exit_work+0x4a2/0x960 [ 1989.449257][ T57] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1989.449310][ T57] ? process_scheduled_works+0xa0f/0x17a0 [ 1989.449345][ T57] ? process_scheduled_works+0xa0f/0x17a0 [ 1989.449385][ T57] process_scheduled_works+0xaec/0x17a0 [ 1989.449451][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1989.449484][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1989.449522][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1989.449554][ T57] ? schedule+0x90/0x360 [ 1989.449590][ T57] worker_thread+0xda6/0x1360 [ 1989.449641][ T57] kthread+0x726/0x8b0 [ 1989.449671][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1989.449693][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.449717][ T57] ? rt_spin_unlock+0x14f/0x200 [ 1989.449746][ T57] ? rt_spin_unlock+0x160/0x200 [ 1989.449768][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.449797][ T57] ret_from_fork+0x51b/0xa40 [ 1989.449824][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1989.449846][ T57] ? __switch_to+0xc82/0x1410 [ 1989.449892][ T57] ? __pfx_kthread+0x10/0x10 [ 1989.449922][ T57] ret_from_fork_asm+0x1a/0x30 [ 1989.449973][ T57] [ 1989.450571][ T57] Kernel Offset: disabled