last executing test programs: 10m35.407094681s ago: executing program 4 (id=1429): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)={0x20, 0x14, 0x6, "cff6162afaf7"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10m32.989457109s ago: executing program 4 (id=1445): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x30) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0xfc, r0, 0x20, {0xffffffffffffeff9, 0x10001}, 0x6}, 0x1) 10m32.700890191s ago: executing program 4 (id=1449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 10m32.296001044s ago: executing program 4 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 10m32.037920544s ago: executing program 4 (id=1460): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000b8d000/0x3000)=nil, 0x3000}}) 10m31.267166044s ago: executing program 4 (id=1469): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 10m30.833588768s ago: executing program 32 (id=1469): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) 8m46.358515425s ago: executing program 1 (id=2543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8m44.269143249s ago: executing program 1 (id=2556): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_io_uring_setup(0x7a6e, &(0x7f0000000200)={0x0, 0xda60, 0x40, 0x2}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket(0x1, 0x2, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) 8m43.998975333s ago: executing program 1 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xf, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) accept(r2, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000840), 0x0, 0x8008044, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8m42.478650396s ago: executing program 1 (id=2566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) 8m41.559483615s ago: executing program 1 (id=2571): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f00000001c0)={0x0, 0x300}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13000000000000000000170000000e0001006e657464657673696d000084adf4"], 0x34}}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x61) copy_file_range(r2, 0x0, r2, 0x0, 0x1000000001ff, 0x0) r3 = open(0x0, 0x64042, 0x0) pwritev2(r3, &(0x7f0000000240), 0x0, 0x1200, 0x0, 0x3) 8m40.008874848s ago: executing program 1 (id=2576): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xc6b2, 0x0, 0x800, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x28, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8m22.382822879s ago: executing program 33 (id=2576): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xc6b2, 0x0, 0x800, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x28, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8m18.252901348s ago: executing program 3 (id=2665): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a640, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 8m17.995445166s ago: executing program 3 (id=2668): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8m14.755042894s ago: executing program 3 (id=2684): r0 = syz_open_dev$midi(&(0x7f0000000000), 0xfffffffffffffff7, 0x240001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) 8m13.342017852s ago: executing program 3 (id=2686): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x1, 0x40040) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'rose0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@generic={0xe4, 0x5, "dcd709"}, @exp_fastopen={0xfe, 0x7, 0xf989, "33ed5b"}]}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 8m11.389508887s ago: executing program 3 (id=2691): semget$private(0x0, 0x7, 0x191) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x600000000000) 8m9.276183745s ago: executing program 3 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xff6e, 0x81, 0x9, 0x3d67, 0x1, 0x30}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m51.877009886s ago: executing program 34 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xff6e, 0x81, 0x9, 0x3d67, 0x1, 0x30}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m9.113835181s ago: executing program 7 (id=4916): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 3m8.902721067s ago: executing program 7 (id=4921): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0x0, 0xaf}, 0x8) 3m8.748766418s ago: executing program 7 (id=4923): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 3m8.57437548s ago: executing program 7 (id=4927): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m8.316964834s ago: executing program 7 (id=4931): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, &(0x7f0000001dc0)={0x4, 0xf5, 0x100000}, 0x20) 3m7.474659588s ago: executing program 7 (id=4944): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m6.990389344s ago: executing program 35 (id=4944): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m17.159013857s ago: executing program 8 (id=5505): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000080)={0x1, 0x0, [{0x103d}]}) 2m16.750700382s ago: executing program 8 (id=5511): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) 2m16.531122122s ago: executing program 8 (id=5515): sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x4004804, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x5}, 0x7}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 2m16.109145061s ago: executing program 8 (id=5523): r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m15.7563605s ago: executing program 8 (id=5528): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 2m15.472674473s ago: executing program 8 (id=5531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 1m59.342332373s ago: executing program 36 (id=5531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 6.537346555s ago: executing program 9 (id=7124): r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.397156314s ago: executing program 9 (id=7138): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x1000000000000, 0x100009, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.359081148s ago: executing program 0 (id=7139): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)=""/202, 0xca}], 0x1}, 0xef0f}], 0x1, 0x102, 0x0) 5.21094106s ago: executing program 9 (id=7142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 5.013723948s ago: executing program 9 (id=7146): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xd, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000005c0)="4891604a", 0x4}], 0x1) 4.306317665s ago: executing program 0 (id=7156): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) read$FUSE(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {0x18}}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 3.66020185s ago: executing program 0 (id=7168): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1004800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.516508572s ago: executing program 0 (id=7172): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 2.881839008s ago: executing program 5 (id=7186): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2.458252513s ago: executing program 0 (id=7192): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) openat$tun(0xffffffffffffff9c, 0x0, 0x381, 0x0) io_setup(0xbf, 0x0) io_submit(0x0, 0x0, 0x0) 1.831072036s ago: executing program 6 (id=7199): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x20, 0x20, 0x5, 0x80, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0xa, 0x29, 0x0, @remote, @remote}}}}) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250f0000001c0007800c0004002e5f0000000000000c00030040"], 0x30}, 0x1, 0x0, 0x0, 0x20008014}, 0x44000) 1.826445092s ago: executing program 5 (id=7200): r0 = io_uring_setup(0xf31, &(0x7f00000001c0)={0x0, 0x8dd3, 0x1, 0x3, 0x18a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1.732150608s ago: executing program 6 (id=7202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xfb8, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.5458511s ago: executing program 6 (id=7204): socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x40000279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.544922903s ago: executing program 9 (id=7205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.41522334s ago: executing program 2 (id=7206): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x18a2, 0x0) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x7a91, 0x0, 0x0, 0x0, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x44040001, 0x1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x4054) 1.409476796s ago: executing program 5 (id=7207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.280852468s ago: executing program 6 (id=7208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) 1.183411195s ago: executing program 2 (id=7209): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x3, &(0x7f0000000340)=[{0x9, 0x3, 0x9, 0x1000}, {0xfffe, 0x7, 0x80, 0x1cae}, {0x7, 0xd, 0xa8, 0x8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.129121278s ago: executing program 5 (id=7210): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.0896731s ago: executing program 9 (id=7211): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 1.039710653s ago: executing program 2 (id=7212): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = io_uring_setup(0x5867, &(0x7f0000001100)={0x0, 0x9a9d, 0x400, 0x1, 0x69}) io_uring_enter(r2, 0x3116, 0xfb9c, 0x30, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 566.424058ms ago: executing program 0 (id=7213): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {0xffffffffffffffff, 0xa8}], 0x3, 0x8000007) 444.660143ms ago: executing program 5 (id=7214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0xb, 0x3}, @flat, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 443.946589ms ago: executing program 6 (id=7215): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 443.062846ms ago: executing program 2 (id=7216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) 254.138018ms ago: executing program 2 (id=7217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="2c9c67ec391b02704dc19a0477e72d0c617f249d3b267136a8fd486b8247357a4e30412ba139d29dc9c805bc7ff30fc1dc13db1ee42d9aebcb99dca64ce4da4fd6b59f8aead47239f404a7a0bc889244f4f42f3493a16b2f2d50b856a3a75a76d2a5bfa123ffc11356438939168032cf90e659832d2cbafea035cac8e14c1987f8f53959ae0135e4b23733bdb8ebf6472b2cb49b958492dc1b2aa52017cf7d1795e661dc5bad6a72cd435225d084752ba5348dbc5ecdc9d7cd076e6ca40d48d9aaf6eb5495ff8ec3cfd760135404701785bbc7ca8f6c042bcafd0313c0008884be5ae03d94c25203cbb4fd10fc6f916dad39a5c22b7be8d4c96f4c1e94bc2efc920fae6c7af7e871db3683e003588a9598ed26609a44e9977fac051e97dd3a5daa61c830631b727ec7a9e06c0d82234da88bbecde543f604e4c310c14a8f61878d21aed979b896d1896bf15d1e16ef718721680e9d89157e1912006a25dd07cd81c943748ac9bf3d2ae9deb0e973a52bdff23aacb825185620169ab432fb8b3e5b0714e8076fcd87712e9cc416ea2b368860f73b22b5d5d2830c65b23feb426d95e10bfa91722f925b9c9f50570e252580c450bee8e64b807da1f04c6548a0df0011240ee2907132170446b7a0e34360086b108f23508f5e0853e5f0d1ad861eb24d762036ec3fc8786430f3aed05a1ec202c2d938e7e76673068a0c2c596a9ed9764da9c36e67cf66c708be0d4ba44c952930ad0fee60e19bce9ba71bbff33ddd65832bec673132ad461d1b028e0bd448b196371c14aa31f5665332e11a99fc44f8555495a15854192fa3a6537774b8780edb35d6788cbf0fdafddf3f6a511b0def0ea229a0f9623fb317775153e9684ca6677f9bfb00683b735560f71fedf45b211ddce58bc3e11e26d21aa841bc67523725f815a15a99214dd5e9a9f13902eb28ebe10f94efc9d72bad213ad12f3662c4169e9cfca15de214f242f8b185f7cb406574beaaf9a2c307db06cc971831c65995523b9c8e1168e1cd2804b96a3b5541c4be90583441963c109ddcc8f4b14a66e90ca4c9c95af31d8548c22be8ef0524de1d86a25ab4aac62c5a91a28510d26732ab768d4535d7d434accb56244e42807ec6ad9eb12fb8fce1efac8bd679f9a4301398f193fc30b15add1b8a13c92e28ef2af96f1776e6f3774fa172884736e9bb81cf7d7621c3654e3762817307c8267a552cbfe968f692ba0138caffe909344fa8e61337790e44d2af558bb194c914d6cb9a0d7ac7121be062e21b6c967f1aee031fdb90a7a52fe71da90ac84a8901109fb1ac73e40412aaf3009862c1245436886a251208dcd795d2fe429fb100a538a0685c3acc46c0c4dbb59edd64e905ec1e9ad7011ab85ebc0d0258d67438db419dc10824ff4005a6e41230eff39c4d7ce774652bb84dfbee4f891e36899356617a7ed45b24f6926edc56e75168b455e2c704d223d7569a1291a332828521f775153be8bf5d3a1e8cd48f0fb62db95210a1163cfcb9829eedb39c32aa89c770c56700d7b90b6061a409ae76a9d6cbf0012711e1d58b7d7000a4a80b1062bd83937ef0364ddce9cb245b8306ce0930f8d48a438ca08436913ad6c02c08dc4f8c603c0f1845e5c02b5fd43d605ff946604cf3df443e6f2e654dc17d7c17b18fd56e83a4772fa9d748d53b941ec340586537e7173e6c83be02f1ea5d51b470b132f66028648752bcf34fe725e8abeb576724d49b68c475409c21bbfaa392388607e2d1aa5db81f408b78654ebfc029ab5ed4573f1ca2454c16ee50d54c32db1c882f8c7c632f02e4fa1c2921b955984ea9f4fd7720313e38e8d4668ddbde1ca919c9a072fe74e7df31a1de29bb6348dfb74ab0b2cafa273f0846908efa4b0c6f7e11a1fa4b7e92f5933cc97b91e4f5f0b07c6930c932ad28e5a967349766aefaaa0e88ca6b957f51a9ca91462e1be3c9f02f090b366c25b11d78f0b1a8541089afbe8129f5bc59811781e76197a501817fa0f82da21476971a097b5f51298e22358a4662f6ba2463a5b5ee3406c44e9b4a573e011b99f30e258037bd08258b67d3bb63a700a6621679032ab45d3abda401dadd7360dd96968ea3a472d77d75002d32bee1152fd79020fe04d767391253740a01ad3a055e4e28a822701709492bbcfd8604b200a658f709eee8380e562f52109ab18f6b0cda7acd1b6bc06a563d874a5c5ab1ed77fffcc489046a40c8229538637873192d459c3ea33600309b2421540bb9d6c93a2ce5ed59c07eede759ec6585072504cb8ee4e2c6e7b11b784b512bfb3d8ced293f96c1ff4f85001a03dc71135aed43ec1a633b6ec4c8b33ddb3f056af2cb93a6433df207ff68d50e629950d5be26af3ff86ecb1e1a0b216d7146e6a0d0e7ad74d73c23b8f10827f57f245c9c2737813895634a5efa456882d22fc948754ef883bf3381033e8b1156843c5efff04785ddf4504fc456bc39894a053deaf5b9469dc1f663e004d2d1c3d54d21120320855e3ddee27c81ee19c9e8c2f7af78dce3dca624643d40335762af62a315c47036bea84ae1673f9ca8bf8926b339fe39e127002a61f30417acc1bd625be6c51f262d1321b8bf2d97a3c6cf0466e2c1319359b8be018d63f729dcfaf87993275b1c16511b35c2a5f3590a6f8979e1e83728e8c6aa0e047f3d4a69223f4fa21c6eca261214fd4fda2da2a934cd7de311cfd4231ebb42652a271192f525f0b734ecf2d2ae8acd80024a74458c743a4a213cb9a4d2343746b0ff00111eeeb017690294d65a80a3584f57b621a08eac2608bdb7d3e160f5918c162932720138d47ee174a9a0372332ac939b9b0643bd87f4aca106f57538b05cfcbebb09eafd6b8d092fdeb8cb72c2322e60f3f85f938309be45e804f2cc1682453db5134000f8cb12d0f202265b224666bebf366ac54b156bd24c38ac7496c57a5a4dc06404279adccf78b6a3ced4ca818cadeff0213cfbf5f6b64e12258f2766a9f73ada05141dc68fe28261e172a46c415498f87e7d462802740d5b091efbb34a885c80232b705443036394c57ac4ea9388f06c9ca95309e6ca23d69e02ba1bf6c43e6c31f5572afc1abf5d5f79655ac335b34931a98efe271fb89be38efeef32ce31f1f9417026084789b5fb1ff8cb774b6249e9eea4572cd46d1c80f2de4f71bafe11a107134ca9d1361dceb95a3f530471786c2b9f1187b8e6923f229a82a1fe3556187cada3eb9974c09453bc7d692f02f08ace533b7e071adc8463cb5924e01755fcbabb8af6da4c4e50c75cebc80fe4dd887547c3958f25842a9aad58bd43fb9469b6939b48c69c8771ca53ff04a453fe4ef9e0e17a916f1984d3a69b4461fa1002255d81533395308fa77e412f92b9318a7ef101a23506e79f22a5fccff0b63c0d43ed7ce6aabeefc249bba472d3af10ba2164517c442dc487c99171ab51ea4c5262c87937faebdc96cb995ee1c6c8a54ff227ea84b5d9c1eac2708e37be2e2cdd5805aa15783aed5e898157f9a257aad3e278990fcff197b97a5d4235998bb2eb055c6f7d3ee86a6c5b2080f8a5887cf5b2d6e86fc78d7982f8e16bd248296230a11792e43542b313416d0fc72e726fa13ab86648beceac074452bd8f871db208f4d1e812d987be35d3ba827bc46ec47b0478735ed83a41dfdddd851d3a111db10656bb6c36c748b6d72d49f4c386b91b5d6234a13d3cd538cec611ba0e8f506adc0310bf325de1dcb602078f3cc18d940be4a26a5726614712edbcf643d2b9295590c1f4a55c6209e68864bb055a7c8723aebfc91e57328688c415f23337b33755fd34c932e8fc98524b1d1e9b410c894e57bf30850d106cbd3143551ca0cdb96db8b6cd0716ba348f2fb1e3cfb6adaa2480071f23d3440c593ccbe056227bd54336bc9d7263b7117e64f0ca2506285b3e0f4339a015866d267617443612b9724dddd3032f24edf2e853a5a186925a0cbfa03fb29cd1254111319fdef9206cb11260c1aed273c9ccff0fc909f1d007a0ac4bfdbd7ff507b114232c3c7ad60fcb8f51214495f608fa3a1d31898fb37e485118de7352c8066b5159cf48291a9f35c8014ece16fed128f44c2f40bdfe191fbd188217d90fe145a81027e7a691bd484f96db7cb6a67729a3fdb5ccdb205b2e71182551192987fcb63f46a7b699c3321abef78665a6c9fdd987c8b9453186ac183677c5394c6dd03fed8f7e18ab4431e6cfabf2c5b69db8eafe61d50e4e2b4baa6e5bebd3eeb6dcd98bfea19a0cc3f097a167b2de12968dc7feaf9f8f67dd9c3a95b201ca36ea81a3ef1042b572588a24b8473e247cac51068458dd0cdb62ab99386188dcf10faf63778a63cfb370b3116ab5b8ec8a2fafc3692b4136a3f34e2aab6f909f692c442942456394a4bc0cfd1bc83ca5ea6163d1941bd2c4f6ccc2a278c0e9d20e7901dca5ef79b3f1e41f60e4fc14b606db48d86121febb99bbd9ee2f4a0c9dc205157ab2dbb75e6f070ef0a62a5b9f9844b4ff2a8bec566b0dc2c0c2f4b3b7f7865406281bf0ddf8d262852c845b1862e05e2a00330a2d6fb421954f5f35c33bde97c3ea41d648969b62b028f5aa231a2824d3467dcc3fa64050168839021927fdafa5a7f5a5a8c77780db6b62014835f79c653e4604fc1793e69f576a860a10991e51dcf0e2d6429e329a6e5ee5eac7cf3dccc00dab84c1fba6e1e3e9cc4c35e869834ad9747eda94cf644f05689e96259edf155a5a197d5d95341989d88b309689eb8f498264b1793685e748e1f3577baaa9190c6b69bcfffa1c415569512c5788d9e9d952e57e691a9f757bf00ebf0161558147760c0dfda3c09f9699e5dc47ed7977401a1e274bcd3aafdd1c80678e042544bbcd886510b359ed63a951a74958d82c6705c365379d13e20789aac0f2c07137b2aba35b41237a63a0d6241fce32b8f9485c24cda47d23e41e75339463d3e3f32bffd562b5597a323fcfb9045fd134fa2e245efcee8fe6f105efa99051a1ad5a73d0c603f6e99801bc7c2ad032aedbabe6fd9dc049aea496ddd02cd30e72a51a9636145defb6681134983157980e2b5c3f2657c8f3e1768cd5ae83e9edd368e520e7c2a9253f3dbf3bd8575572ff2adeb7f466dc6df4369bcb67eb22be5d889b2ed9e9424eb3cb38e91318ded91f99b95cc2ddc14723b3637f79e6fe7e5e0c32c6e62e472a025201fd57e21e6f65d8e0e417297dc00f0d75588223158b0b56a4b976bd12767579a9407d86acabb7476aa74f7144720dcf22290993b30a1bedf4fe2cfc8f28da15d3cbda9823c1ce6661b1659d887ba107777756dc0068a694d9f803f5e0a692ad6df1bb3838aade85bfab8a6edd70a500a58ede67feb95ffbc0e7848f6cbfae52dba4bce72fe457c9c94a50c998657b151c5dd5df0b2f5caf0eb5146c52e1dffd04cba10b0a6bd15de7f1deccafc0a0df5ebc57b25a7b6b54a8287ecc97180969b08feed68098927a5e8bc8ae3a2901aaa0c0840e4ff1d83d71e2b30bfac30c4ba122d6788541103a787e051c8874e8222a1dd3dbe71ba6dfa765e084d86828079c30cbafcf6702a9e6a644c0c3178e52576a9cee07bc4e7a333afd948712f528974ee4b3b99f779a9f271d283748fc5dc28b33d5025755d153d5100c703e8f4e248b7b36eb3be304c646e4aa65aac84f91c4d9999a85174fadd7be729b2c3c419e105c3324ede11ed4f3162b40aee0428b897122c73dd022408c33f07e91ca93644edf86b056918c63c6aaeac609d2905a654f7cd9f0568f7c74eeac", 0x1000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0x2e0, 0x1b8, 0xd0, 0xd0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") keyctl$setperm(0x5, r1, 0x10042720) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) 252.923624ms ago: executing program 5 (id=7218): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000100)={0x0, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 95.547634ms ago: executing program 2 (id=7219): socket(0x400000000010, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$caif_stream(0x25, 0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=7220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x100000000, 0x0, 0x7f, 0x39aea8c8, 0x0, 0x2004c8, 0x8000000, 0x1, 0x0, 0x7, 0x400000000, 0x5, 0x0, 0x2, 0xfffffffffffffffc], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): blocking state [ 609.304252][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.818231][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 609.852252][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 609.855088][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 609.875509][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 609.877254][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.367849][T14501] lo speed is unknown, defaulting to 1000 [ 611.431659][T14528] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 612.130653][T14537] ipvlan0: entered promiscuous mode [ 612.130695][T14537] ipvlan0: entered allmulticast mode [ 612.130709][T14537] veth0_vlan: entered allmulticast mode [ 612.137983][ T5815] Bluetooth: hci2: command tx timeout [ 612.333021][ T37] audit: type=1326 audit(3919613935.304:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.333878][ T37] audit: type=1326 audit(3919613935.304:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.337215][ T37] audit: type=1326 audit(3919613935.304:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.337736][ T37] audit: type=1326 audit(3919613935.304:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.337785][ T37] audit: type=1326 audit(3919613935.304:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.338135][ T37] audit: type=1326 audit(3919613935.304:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.338739][ T37] audit: type=1326 audit(3919613935.304:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.338789][ T37] audit: type=1326 audit(3919613935.304:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.339166][ T37] audit: type=1326 audit(3919613935.304:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14559 comm="syz.0.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 612.808903][T13808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.908910][T14576] netlink: 'syz.0.3427': attribute type 21 has an invalid length. [ 612.908941][T14576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3427'. [ 613.138388][T14576] netlink: 'syz.0.3427': attribute type 5 has an invalid length. [ 613.138412][T14576] netlink: 'syz.0.3427': attribute type 6 has an invalid length. [ 613.138426][T14576] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3427'. [ 613.248217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 613.248256][ C1] lec:lec_tx_timeout: lec0 [ 613.249841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.321624][T14594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3433'. [ 613.735773][T14501] chnl_net:caif_netlink_parms(): no params data found [ 614.269764][T14501] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.269900][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.270146][T14501] bridge_slave_0: entered allmulticast mode [ 614.307414][T14501] bridge_slave_0: entered promiscuous mode [ 614.347192][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.357774][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.358031][T14501] bridge_slave_1: entered allmulticast mode [ 614.359934][ T5815] Bluetooth: hci2: command tx timeout [ 614.398278][T14501] bridge_slave_1: entered promiscuous mode [ 614.464966][T14501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.546620][T14501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.563267][T14633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 615.115501][T14501] team0: Port device team_slave_0 added [ 616.266939][T14501] team0: Port device team_slave_1 added [ 616.347383][T14675] netlink: 'syz.0.3460': attribute type 10 has an invalid length. [ 616.593188][T13808] veth0_vlan: entered promiscuous mode [ 616.646563][ T5815] Bluetooth: hci2: command tx timeout [ 616.687804][T14675] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 616.950006][T14685] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 617.737564][T14501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.737584][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.737614][T14501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.743480][T13808] veth1_vlan: entered promiscuous mode [ 617.761794][T14501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.761849][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.761881][T14501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.153397][ T57] bridge_slave_1: left allmulticast mode [ 618.153430][ T57] bridge_slave_1: left promiscuous mode [ 618.153708][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.272331][ T57] bridge_slave_0: left allmulticast mode [ 618.272367][ T57] bridge_slave_0: left promiscuous mode [ 618.279952][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.633985][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 618.634021][ C1] lec:lec_tx_timeout: lec0 [ 618.634245][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 618.805507][ T5815] Bluetooth: hci2: command tx timeout [ 619.630410][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.821083][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.821419][T14741] netlink: 'syz.5.3478': attribute type 1 has an invalid length. [ 619.872693][ T57] bond0 (unregistering): Released all slaves [ 620.058442][T14501] hsr_slave_0: entered promiscuous mode [ 620.059468][T14501] hsr_slave_1: entered promiscuous mode [ 620.060145][T14501] debugfs: 'hsr0' already exists in 'hsr' [ 620.060163][T14501] Cannot create hsr debugfs directory [ 620.504058][ T57] hsr_slave_0: left promiscuous mode [ 620.549019][ T57] hsr_slave_1: left promiscuous mode [ 620.552138][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.605523][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.872705][ T57] team0 (unregistering): Port device team_slave_1 removed [ 621.954475][ T57] team0 (unregistering): Port device team_slave_0 removed [ 623.604244][T13808] veth0_macvtap: entered promiscuous mode [ 623.634336][T13808] veth1_macvtap: entered promiscuous mode [ 623.798433][T13808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.915472][T13808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.012603][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 624.012640][ C1] lec:lec_tx_timeout: lec0 [ 624.013125][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 624.149392][ T1128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.181737][ T5815] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 624.234809][ T1128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.313368][ T1128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.420220][ T1128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.108040][ T1490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.108065][ T1490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.127078][T14884] netlink: 'syz.0.3540': attribute type 3 has an invalid length. [ 626.394663][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3549'. [ 626.419725][T14900] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3544'. [ 626.447078][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.447095][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.847605][T14501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 627.906505][T14501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 628.056288][T14501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 628.180628][T14501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.899587][T14501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.033280][T14501] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.090260][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.114453][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.158575][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.158780][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.188127][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3572'. [ 629.362767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 629.362806][ C1] lec:lec_tx_timeout: lec0 [ 629.362922][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 630.508568][T14501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.708294][T14501] veth0_vlan: entered promiscuous mode [ 631.775884][T14501] veth1_vlan: entered promiscuous mode [ 631.901597][T14501] veth0_macvtap: entered promiscuous mode [ 631.919032][T14501] veth1_macvtap: entered promiscuous mode [ 632.073363][T14501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.161668][T14501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.196360][ T3026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.196782][ T3026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.197143][ T3026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.197212][ T3026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.771723][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.771748][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.894981][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.895004][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.054581][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 633.240362][T15118] netlink: 'syz.0.3627': attribute type 21 has an invalid length. [ 633.240478][T15118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3627'. [ 633.796721][T15143] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 634.170223][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3642'. [ 634.170250][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3642'. [ 634.246384][ T1128] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.718315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.718357][ C1] lec:lec_tx_timeout: lec0 [ 634.718484][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 637.684149][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3697'. [ 637.709522][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3697'. [ 638.114729][ T6830] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 638.275017][ T6830] usb 8-1: Using ep0 maxpacket: 16 [ 638.278917][ T6830] usb 8-1: config 4 has an invalid interface number: 9 but max is 0 [ 638.278948][ T6830] usb 8-1: config 4 has no interface number 0 [ 638.278996][ T6830] usb 8-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 638.279024][ T6830] usb 8-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 638.279050][ T6830] usb 8-1: config 4 interface 9 has no altsetting 0 [ 638.286532][ T6830] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 638.286570][ T6830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.286593][ T6830] usb 8-1: Product: syz [ 638.286609][ T6830] usb 8-1: Manufacturer: syz [ 638.286623][ T6830] usb 8-1: SerialNumber: syz [ 638.375614][T15297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 638.375828][T15297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 638.506415][ T6830] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 638.649272][ T1128] usb 8-1: Failed to submit usb control message: -71 [ 638.649314][ T1128] usb 8-1: unable to send the bmi data to the device: -71 [ 638.649334][ T1128] usb 8-1: unable to get target info from device [ 638.649367][ T1128] usb 8-1: could not get target info (-71) [ 638.649738][ T1128] usb 8-1: could not probe fw (-71) [ 638.661973][ T31] usb 8-1: USB disconnect, device number 2 [ 639.181844][T15345] tipc: Enabling of bearer rejected, failed to enable media [ 640.070167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 640.070205][ C1] lec:lec_tx_timeout: lec0 [ 640.070319][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 640.173241][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3732'. [ 642.504615][T15435] tipc: Started in network mode [ 642.504636][T15435] tipc: Node identity , cluster identity 4711 [ 642.670788][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.670947][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 645.423904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 645.423945][ C1] lec:lec_tx_timeout: lec0 [ 645.424061][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 647.530643][T15627] tipc: Started in network mode [ 647.530680][T15627] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 647.530735][T15627] tipc: Enabling of bearer rejected, failed to enable media [ 649.401778][T15699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.777713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 650.778074][ C1] lec:lec_tx_timeout: lec0 [ 650.778502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 651.122558][T15729] xfrm1: entered allmulticast mode [ 653.107258][T15764] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 653.214131][ T5800] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 653.385153][ T5800] usb 8-1: Using ep0 maxpacket: 32 [ 653.402248][ T5800] usb 8-1: config 0 has an invalid interface number: 61 but max is 1 [ 653.402279][ T5800] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 653.402302][ T5800] usb 8-1: config 0 has no interface number 0 [ 653.405019][ T5800] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 653.405051][ T5800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.405073][ T5800] usb 8-1: Product: syz [ 653.405096][ T5800] usb 8-1: Manufacturer: syz [ 653.405111][ T5800] usb 8-1: SerialNumber: syz [ 653.483335][ T5800] usb 8-1: config 0 descriptor?? [ 653.630920][ T5800] viperboard 8-1:0.61: version 0.00 found at bus 008 address 003 [ 653.707054][ T5800] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 653.707090][ T5800] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 653.773881][T15784] tipc: Started in network mode [ 653.773902][T15784] tipc: Node identity , cluster identity 4711 [ 653.773920][T15784] tipc: Failed to set node id, please configure manually [ 653.773968][T15784] tipc: Enabling of bearer rejected, failed to enable media [ 654.994598][ T5872] usb 8-1: USB disconnect, device number 3 [ 655.233952][ T6830] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 655.400819][ T6830] usb 7-1: config 0 has no interfaces? [ 655.430598][ T6830] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.430655][ T6830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 655.430677][ T6830] usb 7-1: SerialNumber: syz [ 655.459989][ T6830] usb 7-1: config 0 descriptor?? [ 655.699736][ T809] usb 7-1: USB disconnect, device number 2 [ 656.131353][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 656.131392][ C1] lec:lec_tx_timeout: lec0 [ 656.131475][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 656.770193][ T37] audit: type=1326 audit(3919613976.882:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.796347][ T37] audit: type=1326 audit(3919613976.910:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.801178][ T37] audit: type=1326 audit(3919613976.919:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.801474][ T37] audit: type=1326 audit(3919613976.919:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.802456][ T37] audit: type=1326 audit(3919613976.919:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.802808][ T37] audit: type=1326 audit(3919613976.919:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 656.803099][ T37] audit: type=1326 audit(3919613976.919:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15861 comm="syz.0.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 657.090551][T15870] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3924'. [ 657.090611][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3924'. [ 657.670233][ T6830] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 657.844125][ T6830] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 657.844162][ T6830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.844184][ T6830] usb 7-1: Product: syz [ 657.844199][ T6830] usb 7-1: Manufacturer: syz [ 657.844213][ T6830] usb 7-1: SerialNumber: syz [ 657.918207][ T6830] usb 7-1: config 0 descriptor?? [ 657.967841][ T6830] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 658.590265][ T6830] gspca_sunplus: reg_r err -71 [ 658.590400][ T6830] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 658.634685][ T6830] usb 7-1: USB disconnect, device number 3 [ 659.348823][T15956] tipc: Started in network mode [ 659.348847][T15956] tipc: Node identity 5, cluster identity 3 [ 659.348860][T15956] tipc: Node number set to 5 [ 659.418908][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 660.226480][T15982] max out of range [ 661.431641][ T5872] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 661.495691][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 661.495731][ C1] lec:lec_tx_timeout: lec0 [ 661.495864][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 661.578156][T16017] mmap: syz.5.3988 (16017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 661.620067][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.620113][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.620155][ T5872] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 661.620179][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.666277][ T5872] usb 8-1: config 0 descriptor?? [ 662.201046][ T6830] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 662.299917][ T5872] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 662.299963][ T5872] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 662.299991][ T5872] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 662.300017][ T5872] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 662.300043][ T5872] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 662.320892][ T5872] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 663.260073][ T6830] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 663.260125][ T6830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.260147][ T6830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 663.260190][ T6830] usb 7-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 663.260212][ T6830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.375207][ T6830] usb 7-1: config 0 descriptor?? [ 663.418645][ T5872] usb 8-1: USB disconnect, device number 4 [ 663.527480][T16043] fido_id[16043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 663.840508][ T6830] elecom 0003:056E:010C.0016: unknown main item tag 0x1 [ 663.840547][ T6830] elecom 0003:056E:010C.0016: unknown main item tag 0x1 [ 663.880547][ T6830] elecom 0003:056E:010C.0016: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.6-1/input0 [ 664.071139][ T5872] usb 7-1: USB disconnect, device number 4 [ 664.302550][T16067] proc: Bad value for 'gid' [ 665.009812][T16088] IPVS: Scheduler module ip_vs_ not found [ 666.705595][T16121] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 0, id = 0 [ 666.849475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 666.849513][ C1] lec:lec_tx_timeout: lec0 [ 666.849597][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 668.903460][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4050'. [ 669.035329][T16161] veth0_macvtap: left promiscuous mode [ 672.203105][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 672.203142][ C1] lec:lec_tx_timeout: lec0 [ 672.203222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 674.842672][ T5800] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 675.002914][ T5800] usb 7-1: Using ep0 maxpacket: 16 [ 675.011825][ T5800] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 675.011856][ T5800] usb 7-1: config 0 has no interface number 0 [ 675.011903][ T5800] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 675.011929][ T5800] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 675.085074][ T5800] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 675.085108][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.085130][ T5800] usb 7-1: Product: syz [ 675.085145][ T5800] usb 7-1: Manufacturer: syz [ 675.085160][ T5800] usb 7-1: SerialNumber: syz [ 675.122650][ T5800] usb 7-1: config 0 descriptor?? [ 675.127999][T16351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.128133][T16351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.300398][T16376] vlan2: entered promiscuous mode [ 675.300423][T16376] bond0: entered promiscuous mode [ 675.300437][T16376] bond_slave_0: entered promiscuous mode [ 675.300686][T16376] bond_slave_1: entered promiscuous mode [ 675.371453][T16351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.371588][T16351] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 675.392640][T16381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4143'. [ 675.392682][T16381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4143'. [ 675.425045][T16381] gretap0: entered promiscuous mode [ 675.493739][T16381] gretap0: left promiscuous mode [ 676.044684][ T5800] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 676.044721][ T5800] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 676.045040][ T5800] asix 7-1:0.251: probe with driver asix failed with error -71 [ 676.102688][ T5800] usb 7-1: USB disconnect, device number 5 [ 676.342340][T16407] netlink: 'syz.5.4154': attribute type 7 has an invalid length. [ 676.611379][T16426] delete_channel: no stack [ 677.556844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.556880][ C1] lec:lec_tx_timeout: lec0 [ 677.556957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 678.069826][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 678.243774][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 678.248150][ T5885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.248239][ T5885] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 678.248272][ T5885] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 678.248310][ T5885] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 678.314539][ T5885] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.314574][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.314596][ T5885] usb 7-1: Product: syz [ 678.314611][ T5885] usb 7-1: Manufacturer: syz [ 678.314627][ T5885] usb 7-1: SerialNumber: syz [ 678.818108][ T5885] usb 7-1: USB disconnect, device number 6 [ 680.217799][ T5885] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 680.392727][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 680.395359][ T5885] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 680.395431][ T5885] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.395457][ T5885] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 680.395484][ T5885] usb 7-1: config 7 interface 0 has no altsetting 0 [ 680.395529][ T5885] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 680.395552][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.488944][ T5885] usbhid 7-1:7.0: couldn't find an input interrupt endpoint [ 680.726092][ T809] usb 7-1: USB disconnect, device number 7 [ 681.518020][T16604] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4231'. [ 682.275987][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4245'. [ 682.276014][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4245'. [ 682.400821][T16642] netlink: 'syz.0.4248': attribute type 33 has an invalid length. [ 682.400849][T16642] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4248'. [ 682.454883][T16642] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4248'. [ 682.749487][ T5872] kernel write not supported for file bpf-map (pid: 5872 comm: kworker/1:5) [ 682.910520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 682.910556][ C1] lec:lec_tx_timeout: lec0 [ 682.910650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 683.242708][T16674] netlink: 'syz.6.4262': attribute type 8 has an invalid length. [ 683.955883][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 684.386255][ T5872] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 684.545852][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 684.550691][ T5872] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 684.550724][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.592905][ T5872] usb 8-1: config 0 descriptor?? [ 684.623552][ T5872] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 684.875128][T16737] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 685.257355][ T5872] gspca_sonixj: reg_w1 err -71 [ 685.257468][ T5872] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 685.287602][ T5872] usb 8-1: USB disconnect, device number 5 [ 686.927743][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4321'. [ 687.491261][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4334'. [ 688.348233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 688.348352][ C1] lec:lec_tx_timeout: lec0 [ 690.326719][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 690.408079][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 690.516459][ T37] audit: type=1326 audit(3919614264.469:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.516738][ T37] audit: type=1326 audit(3919614264.469:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.517108][ T37] audit: type=1326 audit(3919614264.469:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.595230][ T37] audit: type=1326 audit(3919614264.544:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.595783][ T37] audit: type=1326 audit(3919614264.544:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.595837][ T37] audit: type=1326 audit(3919614264.544:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.596825][ T37] audit: type=1326 audit(3919614264.544:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.596878][ T37] audit: type=1326 audit(3919614264.544:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.601769][ T37] audit: type=1326 audit(3919614264.544:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 690.601820][ T37] audit: type=1326 audit(3919614264.544:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4200c799 code=0x7ffc0000 [ 691.791556][T16948] netlink: 'syz.5.4389': attribute type 9 has an invalid length. [ 692.159873][T16960] netlink: 'syz.5.4399': attribute type 1 has an invalid length. [ 692.159919][T16960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.957652][T16997] netlink: 5204 bytes leftover after parsing attributes in process `syz.0.4414'. [ 693.115094][T17002] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.4416'. [ 693.395585][T17013] MTD: Attempt to mount non-MTD device "./file0" [ 693.400165][T17013] ./file0: Can't open blockdev [ 693.542098][T17018] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4425'. [ 693.542127][T17018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4425'. [ 694.697928][T17059] loop2: detected capacity change from 0 to 7 [ 694.705143][T17059] Dev loop2: unable to read RDB block 7 [ 694.705205][T17059] loop2: unable to read partition table [ 694.705450][T17059] loop2: partition table beyond EOD, truncated [ 694.707955][T17059] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 695.231917][ T6830] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 695.409252][ T6830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.409295][ T6830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.409341][ T6830] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 695.409365][ T6830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.465964][ T6830] usb 7-1: config 0 descriptor?? [ 695.947255][ T6830] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 696.351073][ T6830] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 696.351150][ T6830] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 696.379101][ T6830] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -71 [ 696.421129][ T6830] usb 7-1: USB disconnect, device number 8 [ 696.466176][T17107] fido_id[17107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1E7D:2D50.0017/report_descriptor': No such device [ 697.315100][T17135] netlink: 5204 bytes leftover after parsing attributes in process `syz.6.4480'. [ 697.315173][T17135] nbd: socks must be embedded in a SOCK_ITEM attr [ 697.740721][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4485'. [ 698.019792][T15333] udevd[15333]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 698.204589][ T6830] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 698.385171][ T6830] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 698.385297][ T6830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.385321][ T6830] usb 8-1: Product: syz [ 698.385336][ T6830] usb 8-1: Manufacturer: syz [ 698.385351][ T6830] usb 8-1: SerialNumber: syz [ 698.505104][T17173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4498'. [ 699.045571][ T6830] rtl8150 8-1:1.0: couldn't reset the device [ 699.045992][ T6830] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 699.100205][ T6830] usb 8-1: USB disconnect, device number 6 [ 700.354956][T17230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.853081][T14689] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 701.023584][T14689] usb 8-1: Using ep0 maxpacket: 8 [ 701.026292][T14689] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 701.026322][T14689] usb 8-1: config 0 has no interface number 0 [ 701.026354][T14689] usb 8-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 701.026396][T14689] usb 8-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 701.026425][T14689] usb 8-1: config 0 interface 32 has no altsetting 0 [ 701.029915][T14689] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 701.029948][T14689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.029969][T14689] usb 8-1: Product: syz [ 701.029984][T14689] usb 8-1: Manufacturer: syz [ 701.030000][T14689] usb 8-1: SerialNumber: syz [ 701.099756][T14689] usb 8-1: config 0 descriptor?? [ 701.361419][T14689] usb_ehset_test 8-1:0.32: probe with driver usb_ehset_test failed with error -32 [ 701.387188][T14689] usb 8-1: USB disconnect, device number 7 [ 701.996474][T17286] netlink: 'syz.5.4552': attribute type 14 has an invalid length. [ 705.012230][T17329] netlink: 'syz.5.4571': attribute type 1 has an invalid length. [ 705.012255][T17329] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4571'. [ 706.178068][T17354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4584'. [ 708.319877][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 708.349723][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 709.305143][ T809] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 709.465390][ T809] usb 8-1: Using ep0 maxpacket: 8 [ 709.474105][ T809] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.474161][ T809] usb 8-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 709.474215][ T809] usb 8-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.474243][ T809] usb 8-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.474265][ T809] usb 8-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 709.474292][ T809] usb 8-1: config 0 interface 0 has no altsetting 0 [ 709.481071][ T809] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 709.481104][ T809] usb 8-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 709.481125][ T809] usb 8-1: Manufacturer: syz [ 709.573563][ T809] usb 8-1: config 0 descriptor?? [ 710.078313][ T809] itetech 0003:06CB:73F5.0018: hidraw0: USB HID v0.09 Device [syz] on usb-dummy_hcd.7-1/input0 [ 710.297805][ T6830] usb 8-1: USB disconnect, device number 8 [ 710.534096][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 710.687500][T17496] fido_id[17496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 711.375575][T17526] 9p: Bad value for 'rfdno' [ 712.781556][T17571] vlan3: entered promiscuous mode [ 713.271580][T17589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.707732][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 713.707798][ C1] lec:lec_tx_timeout: lec0 [ 714.606291][T17629] batadv0: entered promiscuous mode [ 714.613483][T17629] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 714.755254][T17629] batadv0: left promiscuous mode [ 715.111266][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 715.111290][ T37] audit: type=1800 audit(3919614287.490:371): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.4724" name="file0" dev="tmpfs" ino=3742 res=0 errno=0 [ 716.770556][T17711] overlayfs: failed to clone upperpath [ 717.023796][T17719] 9p: Bad value for 'rfdno' [ 718.803863][T17776] futex_wake_op: syz.7.4785 tries to shift op by -1; fix this program [ 719.598641][T17798] 9p: Bad value for 'rfdno' [ 720.760519][ T5886] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 720.932828][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 720.935306][ T5886] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 720.935363][ T5886] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 720.935390][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 720.935416][ T5886] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 720.935440][ T5886] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.935484][ T5886] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.935506][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.264421][ T5886] usb 7-1: GET_CAPABILITIES returned 0 [ 721.264473][ T5886] usbtmc 7-1:16.0: can't read capabilities [ 721.510766][ T6830] usb 7-1: USB disconnect, device number 9 [ 722.681694][T17896] IPv6: addrconf: prefix option has invalid lifetime [ 723.015406][ T5886] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 723.182251][ T5886] usb 7-1: config 0 has no interfaces? [ 723.182293][ T5886] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.182318][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.241059][ T5886] usb 7-1: config 0 descriptor?? [ 723.464581][ T5886] usb 7-1: USB disconnect, device number 10 [ 724.736183][ T5904] kernel write not supported for file bpf-map (pid: 5904 comm: kworker/0:4) [ 727.535994][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4928'. [ 727.536025][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4928'. [ 727.540225][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4928'. [ 727.540254][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4928'. [ 727.685131][ T5904] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 727.845360][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 727.850259][ T5904] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 727.850292][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.850313][ T5904] usb 7-1: Product: syz [ 727.850328][ T5904] usb 7-1: Manufacturer: syz [ 727.850343][ T5904] usb 7-1: SerialNumber: syz [ 727.896433][ T5904] usb 7-1: config 0 descriptor?? [ 728.198113][ T5904] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 728.605358][ T5904] usb write operation failed. (-71) [ 728.611319][ T5904] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 728.613276][ T5904] dvbdev: DVB: registering new adapter (Terratec H7) [ 728.613345][ T5904] usb 7-1: media controller created [ 728.624132][ T5904] usb read operation failed. (-71) [ 728.631669][ T5904] usb write operation failed. (-71) [ 728.676819][ T5904] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 728.718640][ T5904] usb 7-1: USB disconnect, device number 11 [ 729.447662][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.477886][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.489630][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.501264][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.523264][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.719083][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4959'. [ 729.781456][ T7126] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.865161][T18155] netlink: 'syz.5.4963': attribute type 11 has an invalid length. [ 730.006265][T18137] lo speed is unknown, defaulting to 1000 [ 730.513925][ T7126] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.228048][ T7126] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.307956][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4978'. [ 731.744480][ T5111] Bluetooth: hci0: command tx timeout [ 731.924721][T18197] batadv_slave_0: entered promiscuous mode [ 731.957327][T18196] batadv_slave_0: left promiscuous mode [ 733.388864][T18137] chnl_net:caif_netlink_parms(): no params data found [ 733.775337][T18258] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5009'. [ 733.894212][ T7126] bridge_slave_1: left allmulticast mode [ 733.894243][ T7126] bridge_slave_1: left promiscuous mode [ 733.894510][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.957769][ T5111] Bluetooth: hci0: command tx timeout [ 733.995336][ T7126] bridge_slave_0: left allmulticast mode [ 733.995369][ T7126] bridge_slave_0: left promiscuous mode [ 734.022646][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.825870][T18330] overlayfs: failed to clone upperpath [ 735.836873][ T7126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.873530][ T7126] bond_slave_0: left promiscuous mode [ 735.914845][ T7126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.957349][ T7126] bond_slave_1: left promiscuous mode [ 735.972394][ T7126] bond0 (unregistering): Released all slaves [ 736.180759][ T5111] Bluetooth: hci0: command tx timeout [ 736.387421][ T7126] tipc: Left network mode [ 736.513539][T18137] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.513669][T18137] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.513924][T18137] bridge_slave_0: entered allmulticast mode [ 736.522576][T18137] bridge_slave_0: entered promiscuous mode [ 736.529202][T18137] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.529405][T18137] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.529617][T18137] bridge_slave_1: entered allmulticast mode [ 736.613820][T18137] bridge_slave_1: entered promiscuous mode [ 737.327725][T18137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.421030][T18137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.752869][T18137] team0: Port device team_slave_0 added [ 738.116230][T18137] team0: Port device team_slave_1 added [ 738.405836][ T5111] Bluetooth: hci0: command tx timeout [ 738.519196][T18137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.519221][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.519253][T18137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.542387][T18137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.542438][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.542521][T18137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.750011][ T37] audit: type=1326 audit(3919614309.603:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18423 comm="syz.6.5079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6b71cc799 code=0x0 [ 738.833205][ T7126] hsr_slave_0: left promiscuous mode [ 738.883400][ T7126] hsr_slave_1: left promiscuous mode [ 738.895543][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.895571][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.993087][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.993119][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.142249][ T7126] veth1_macvtap: left promiscuous mode [ 739.142357][ T7126] veth0_macvtap: left promiscuous mode [ 739.142609][ T7126] veth1_vlan: left promiscuous mode [ 739.142790][ T7126] veth0_vlan: left promiscuous mode [ 740.448091][T18477] loop8: detected capacity change from 0 to 8 [ 740.477966][T18477] Dev loop8: unable to read RDB block 8 [ 740.478015][T18477] loop8: unable to read partition table [ 740.478248][T18477] loop8: partition table beyond EOD, truncated [ 740.478292][T18477] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 742.489257][T18550] netlink: 41 bytes leftover after parsing attributes in process `syz.0.5136'. [ 742.489282][T18550] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5136'. [ 742.529304][ T7126] team0 (unregistering): Port device team_slave_1 removed [ 742.593673][ T7126] team0 (unregistering): Port device team_slave_0 removed [ 743.156901][T18550] netlink: 41 bytes leftover after parsing attributes in process `syz.0.5136'. [ 743.465242][T18137] hsr_slave_0: entered promiscuous mode [ 743.471388][T18137] hsr_slave_1: entered promiscuous mode [ 745.009125][ T6830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.023083][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.581090][T18137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 745.694168][T18137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 745.809394][T18137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 745.911453][T18137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 746.097536][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.409441][T18137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.509175][T18137] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.559991][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.561809][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.621813][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.621954][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.209177][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.298980][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.556927][ T6830] kernel read not supported for file [fscontext] (pid: 6830 comm: kworker/0:6) [ 747.711693][T18137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.234683][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.320719][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.716493][T12510] lec:lec_start_xmit: lec0:No lecd attached [ 749.213723][T18137] veth0_vlan: entered promiscuous mode [ 749.252826][T18137] veth1_vlan: entered promiscuous mode [ 749.405051][T18137] veth0_macvtap: entered promiscuous mode [ 749.431452][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.459643][T18137] veth1_macvtap: entered promiscuous mode [ 749.549396][T14689] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 749.572156][T18137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.667875][T18137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.698673][ T1439] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.700588][ T65] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.700815][ T1439] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.701042][ T1439] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.751436][T14689] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 749.751469][T14689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.751491][T14689] usb 7-1: Product: syz [ 749.751506][T14689] usb 7-1: Manufacturer: syz [ 749.751521][T14689] usb 7-1: SerialNumber: syz [ 749.794068][T14689] usb 7-1: config 0 descriptor?? [ 750.247850][T14689] usb 7-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115) [ 750.494262][T14689] usb 7-1: failed to fetch extended address, random address set [ 750.494305][T14689] usb 7-1: atusb_probe: initialization failed, error = -524 [ 750.495067][T14689] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 750.555358][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.599079][T14689] usb 7-1: USB disconnect, device number 12 [ 750.856241][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.856266][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.207074][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.207098][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.142566][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.184259][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.477639][T18820] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 753.579073][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.104807][T18841] bond1: option ad_user_port_key: invalid value (48421) [ 754.104850][T18841] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 754.210579][T18841] bond1 (unregistering): Released all slaves [ 754.252791][T18850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5244'. [ 754.304124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 754.304159][ C1] lec:lec_tx_timeout: lec0 [ 754.732145][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.290402][T18884] loop2: detected capacity change from 0 to 2431 [ 755.338919][T18885] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.5258'. [ 755.427141][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.843496][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.954711][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.296302][T14689] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 757.456421][T14689] usb 9-1: Using ep0 maxpacket: 32 [ 757.460095][T14689] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 757.460125][T14689] usb 9-1: config 0 has no interface number 0 [ 757.460172][T14689] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 757.463065][T14689] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 757.463095][T14689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.463116][T14689] usb 9-1: Product: syz [ 757.463131][T14689] usb 9-1: Manufacturer: syz [ 757.463145][T14689] usb 9-1: SerialNumber: syz [ 757.544251][T14689] usb 9-1: config 0 descriptor?? [ 757.554030][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.596395][T14689] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 757.596435][T14689] em28xx 9-1:0.132: Video interface 132 found: [ 757.774676][T18947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5286'. [ 758.042991][T14689] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 758.066825][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.508113][T14689] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 758.508152][T14689] em28xx 9-1:0.132: board has no eeprom [ 758.570265][T14689] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 758.570409][T14689] em28xx 9-1:0.132: analog set to bulk mode. [ 758.570891][ T5904] em28xx 9-1:0.132: Registering V4L2 extension [ 758.605919][T14689] usb 9-1: USB disconnect, device number 2 [ 758.608636][T14689] em28xx 9-1:0.132: Disconnecting em28xx [ 758.666244][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.827018][T18969] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 758.827047][T18969] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 759.172887][ T5904] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 759.172920][ T5904] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 759.172936][ T5904] em28xx 9-1:0.132: No AC97 audio processor [ 759.259858][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.151134][ T5904] usb 9-1: Decoder not found [ 760.151160][ T5904] em28xx 9-1:0.132: failed to create media graph [ 760.151224][ T5904] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 760.210437][ T5904] em28xx 9-1:0.132: Remote control support is not available for this card. [ 760.238833][T14689] em28xx 9-1:0.132: Closing input extension [ 760.283504][T14689] em28xx 9-1:0.132: Freeing device [ 760.374470][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.488523][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.920113][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.933574][ T1128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.975460][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.596762][T14689] net_ratelimit: 1 callbacks suppressed [ 762.596787][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.494086][ T5886] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 763.656181][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 763.664029][ T5886] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.664065][ T5886] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.664090][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 763.664125][ T5886] usb 9-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 763.664148][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.709833][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.747600][ T5886] usb 9-1: config 0 descriptor?? [ 764.001650][ T5886] usb 9-1: string descriptor 0 read error: -71 [ 764.036183][ T5886] usbhid 9-1:0.0: can't add hid device: -71 [ 764.036317][ T5886] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 764.067409][ T5886] usb 9-1: USB disconnect, device number 3 [ 764.819836][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.059977][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5352'. [ 765.249243][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.276848][T19102] process '/newroot/860/file0' started with executable stack [ 765.873796][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5367'. [ 765.931111][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.396724][T19149] netlink: 'syz.6.5374': attribute type 22 has an invalid length. [ 767.042368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.042796][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.811758][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.817280][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.818167][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.871925][T19193] input: syz1 as /devices/virtual/input/input18 [ 768.153472][ T5904] net_ratelimit: 1 callbacks suppressed [ 768.153494][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.895989][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.927840][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.355578][ T37] audit: type=1326 audit(3919614339.183:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.8.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab59ac799 code=0x7ffc0000 [ 770.355637][ T37] audit: type=1326 audit(3919614339.183:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.8.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab59ac799 code=0x7ffc0000 [ 770.356408][ T37] audit: type=1326 audit(3919614339.183:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.8.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0ab59ac799 code=0x7ffc0000 [ 770.356688][ T37] audit: type=1326 audit(3919614339.183:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.8.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab59ac799 code=0x7ffc0000 [ 770.356863][ T37] audit: type=1326 audit(3919614339.183:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19230 comm="syz.8.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab59ac799 code=0x7ffc0000 [ 770.975077][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.619228][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5420'. [ 771.619257][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5420'. [ 771.836894][T12881] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.837475][T12881] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.837523][T12881] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.837571][T12881] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.837820][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5420'. [ 771.837842][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5420'. [ 772.086575][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.197522][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.202449][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.421514][T19314] batadv_slave_1: entered promiscuous mode [ 773.426581][T19311] batadv_slave_1: left promiscuous mode [ 773.983851][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.991966][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 774.309270][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.420144][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.445854][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.534800][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.680928][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.082200][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.134513][T19468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.755050][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.192008][ T5886] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 779.354336][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 779.360220][ T5886] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 779.360252][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.360272][ T5886] usb 7-1: Product: syz [ 779.360287][ T5886] usb 7-1: Manufacturer: syz [ 779.360302][ T5886] usb 7-1: SerialNumber: syz [ 779.418067][ T5886] usb 7-1: config 0 descriptor?? [ 779.463681][ T5886] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 779.550530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.551066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.694452][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.866790][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.950558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 779.950595][ C1] lec:lec_tx_timeout: lec0 [ 780.784044][ T5886] gspca_vc032x: reg_w err -71 [ 780.784145][ T5886] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 780.794374][ T5886] usb 7-1: USB disconnect, device number 13 [ 780.926665][T19561] overlayfs: failed to clone upperpath [ 780.977562][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.937238][T19583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.088369][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.152199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.590030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.943215][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.199844][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.455567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.112123][T19644] netlink: 'syz.5.5572': attribute type 10 has an invalid length. [ 785.250824][ C0] net_ratelimit: 7 callbacks suppressed [ 785.250846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.422752][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.218638][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.533506][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.133562][T19676] Bluetooth: hci2: command 0x0406 tx timeout [ 787.313263][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5619'. [ 787.650946][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.344532][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.374537][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5638'. [ 788.374564][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5638'. [ 788.755981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.756464][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.444538][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.864958][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5658'. [ 789.879619][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.180950][T19841] gretap0: entered promiscuous mode [ 790.209227][T19841] vlan0: entered promiscuous mode [ 790.327017][ T5872] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 790.488917][ T5872] usb 7-1: Using ep0 maxpacket: 32 [ 790.504623][ T5872] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 790.504654][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.559270][ T5872] usb 7-1: config 0 descriptor?? [ 790.571814][ T5872] gspca_main: sunplus-2.14.0 probing 041e:400b [ 790.978782][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.865836][ T5872] gspca_sunplus: reg_w_riv err -71 [ 791.865936][ T5872] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 791.871629][ T5872] usb 7-1: USB disconnect, device number 14 [ 792.090894][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.688634][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.193644][T19922] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5700'. [ 793.193826][T19922] team_slave_0: entered promiscuous mode [ 793.193892][T19922] team_slave_1: entered promiscuous mode [ 793.202027][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.083023][T19952] netlink: 'syz.0.5714': attribute type 4 has an invalid length. [ 794.282602][T19961] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5718'. [ 794.282639][T19961] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5718'. [ 794.317590][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.407970][ T37] audit: type=1326 audit(3919614361.689:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19962 comm="syz.0.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 794.408271][ T37] audit: type=1326 audit(3919614361.689:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19962 comm="syz.0.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 794.459474][ T37] audit: type=1326 audit(3919614361.736:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19962 comm="syz.0.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 794.459534][ T37] audit: type=1326 audit(3919614361.736:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19962 comm="syz.0.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 794.459580][ T37] audit: type=1326 audit(3919614361.736:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19962 comm="syz.0.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x7ffc0000 [ 795.360352][ T7126] Bluetooth: (null): Invalid header checksum [ 795.424479][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.851937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.937043][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.201878][T20017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5746'. [ 796.238219][T20018] overlayfs: failed to clone lowerpath [ 796.536653][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.759762][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 796.862809][T19676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 796.888257][T19676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 796.893184][T19676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 796.917664][T19676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.920065][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 796.930934][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.931070][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 796.931146][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.952782][T19676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 797.038834][ T9] usb 7-1: config 0 descriptor?? [ 797.082764][T20038] lo speed is unknown, defaulting to 1000 [ 797.260140][T20046] netlink: 'syz.0.5758': attribute type 22 has an invalid length. [ 797.362276][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 797.632399][ T9] usb 7-1: USB disconnect, device number 15 [ 797.673236][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.804502][T20058] overlayfs: failed to clone upperpath [ 798.284901][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5770'. [ 798.587244][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.714459][T20097] netlink: 'syz.6.5778': attribute type 1 has an invalid length. [ 798.757587][T20038] chnl_net:caif_netlink_parms(): no params data found [ 798.772751][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.902071][T20097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.186073][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.186359][ T5111] Bluetooth: hci5: command tx timeout [ 799.414687][ T7126] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.414741][ T7126] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.748473][T20142] netlink: 'syz.5.5799': attribute type 1 has an invalid length. [ 799.871562][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.877205][ T7126] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.877245][ T7126] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.068256][T20142] bond1: entered promiscuous mode [ 800.071191][T20142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.119379][T20145] bond1: (slave bridge0): making interface the new active one [ 800.120186][T20145] bridge0: entered promiscuous mode [ 800.123505][T20145] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 800.613411][ T7126] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.613451][ T7126] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.881758][ T1128] ODEBUG: Out of memory. ODEBUG disabled [ 800.981946][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.131789][T20038] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.131881][T20038] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.132068][T20038] bridge_slave_0: entered allmulticast mode [ 801.134130][T20038] bridge_slave_0: entered promiscuous mode [ 801.136365][T20038] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.136452][T20038] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.136622][T20038] bridge_slave_1: entered allmulticast mode [ 801.138613][T20038] bridge_slave_1: entered promiscuous mode [ 801.408192][ T5111] Bluetooth: hci5: command tx timeout [ 801.831641][ T7126] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.840220][ T7126] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.054109][T20038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.092495][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.100457][T20038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.300613][T20038] team0: Port device team_slave_0 added [ 802.304257][T20038] team0: Port device team_slave_1 added [ 802.445999][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.561029][T20038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.561049][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.561088][T20038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.775494][T20038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.775513][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.775541][T20038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.048043][T20228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.048320][T20228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.048948][T20228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.054066][T20228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.054264][T20228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.057258][T20225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.204839][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.213786][T20038] hsr_slave_0: entered promiscuous mode [ 803.229292][T20038] hsr_slave_1: entered promiscuous mode [ 803.230322][T20038] debugfs: 'hsr0' already exists in 'hsr' [ 803.230348][T20038] Cannot create hsr debugfs directory [ 803.329157][ T7126] bridge_slave_1: left allmulticast mode [ 803.329187][ T7126] bridge_slave_1: left promiscuous mode [ 803.329430][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.482660][ T7126] bridge_slave_0: left allmulticast mode [ 803.482691][ T7126] bridge_slave_0: left promiscuous mode [ 803.482938][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.631487][ T5111] Bluetooth: hci5: command tx timeout [ 804.314878][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.706417][ T7126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.775748][ T7126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.817447][ T7126] bond0 (unregistering): Released all slaves [ 805.871060][ T5111] Bluetooth: hci5: command tx timeout [ 806.182084][T14689] lo speed is unknown, defaulting to 1000 [ 806.585118][ T5111] Bluetooth: hci4: connection err: -111 [ 807.154706][ T37] audit: type=1326 audit(3919614373.611:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20367 comm="syz.5.5902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032de9c799 code=0x0 [ 807.649515][T14689] net_ratelimit: 96 callbacks suppressed [ 807.649537][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.723588][ T7126] hsr_slave_0: left promiscuous mode [ 807.766355][ T7126] hsr_slave_1: left promiscuous mode [ 807.767460][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.767490][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.831874][ T7126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.831929][ T7126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.938296][ T7126] veth1_macvtap: left promiscuous mode [ 807.938570][ T7126] veth0_macvtap: left promiscuous mode [ 807.938827][ T7126] veth1_vlan: left promiscuous mode [ 807.939003][ T7126] veth0_vlan: left promiscuous mode [ 808.190680][T20405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.191500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.792525][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.855674][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.931814][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.525869][ T7126] team0 (unregistering): Port device team_slave_1 removed [ 809.589857][ T7126] team0 (unregistering): Port device team_slave_0 removed [ 809.872136][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.213773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.305146][T20469] Smack: duplicate mount options [ 810.700264][T20038] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 810.736095][T20038] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 810.811984][T20038] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 810.957177][T20038] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 810.983509][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.639973][T20038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.738673][T20038] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.806825][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.806965][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.814089][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.814210][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.101874][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.695416][T20544] netlink: 'syz.5.5966': attribute type 9 has an invalid length. [ 812.695437][T20544] netlink: 'syz.5.5966': attribute type 11 has an invalid length. [ 812.695451][T20544] netlink: 'syz.5.5966': attribute type 12 has an invalid length. [ 812.695466][T20544] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.5966'. [ 812.695585][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5966'. [ 813.076172][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5971'. [ 813.076200][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5971'. [ 813.136164][T20038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.206036][T14689] net_ratelimit: 2 callbacks suppressed [ 813.206065][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.473972][ T930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 813.640103][ T930] usb 7-1: Using ep0 maxpacket: 8 [ 813.654608][ T930] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 813.654670][ T930] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.654694][ T930] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.654720][ T930] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.654760][ T930] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.654804][ T930] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 813.654827][ T930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.048081][ T930] usb 7-1: usb_control_msg returned -32 [ 814.048133][ T930] usbtmc 7-1:16.0: can't read capabilities [ 814.308979][T20038] veth0_vlan: entered promiscuous mode [ 814.330806][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.356596][T20038] veth1_vlan: entered promiscuous mode [ 814.539588][T20038] veth0_macvtap: entered promiscuous mode [ 814.567115][T20038] veth1_macvtap: entered promiscuous mode [ 814.655568][T20038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.682202][T20038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.715831][T20605] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 814.865958][T20605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 814.874276][T20610] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 814.989015][T20609] bond2: (slave ip6erspan0): making interface the new active one [ 815.024506][T20609] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 815.024627][ T1490] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.051633][ T1490] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.052489][ T1490] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.052710][ T1490] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.202788][ T9] usb 7-1: USB disconnect, device number 16 [ 815.431253][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.440736][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.469125][T20629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.469369][T20629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.482306][T20629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.488192][T20628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.488786][T20628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.692345][T20635] veth0: entered promiscuous mode [ 815.693241][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5997'. [ 816.241094][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.241119][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.502917][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.502948][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.542125][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.246364][T14689] kernel read not supported for file /rfkill (pid: 14689 comm: kworker/0:1) [ 817.705372][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6030'. [ 818.107918][T12510] lec:lec_start_xmit: lec0:No lecd attached [ 818.677041][ T5800] net_ratelimit: 8 callbacks suppressed [ 818.677062][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.763190][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.571579][T20795] overlayfs: failed to clone upperpath [ 819.884671][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.359914][T20829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.362607][T20829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.389964][T20829] IPv4: Oversized IP packet from 172.20.20.24 [ 820.394132][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 820.411304][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 820.986617][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.926647][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.387442][T20891] netlink: 7 bytes leftover after parsing attributes in process `syz.9.6097'. [ 822.462736][T20893] overlayfs: failed to clone upperpath [ 823.375219][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6115'. [ 823.407828][T20933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6116'. [ 823.805973][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 823.806008][ C1] lec:lec_tx_timeout: lec0 [ 824.041206][ T5872] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 824.139585][T20960] netlink: 'syz.5.6128': attribute type 9 has an invalid length. [ 824.139603][T20960] netlink: 'syz.5.6128': attribute type 11 has an invalid length. [ 824.139614][T20960] netlink: 'syz.5.6128': attribute type 12 has an invalid length. [ 824.139626][T20960] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6128'. [ 824.139712][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6128'. [ 824.222872][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 824.225260][ T5872] usb 10-1: config 0 has no interfaces? [ 824.228552][ T5872] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 824.228585][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.228607][ T5872] usb 10-1: Product: syz [ 824.228622][ T5872] usb 10-1: Manufacturer: syz [ 824.228638][ T5872] usb 10-1: SerialNumber: syz [ 824.277649][ T5872] usb 10-1: config 0 descriptor?? [ 824.319437][T14689] net_ratelimit: 10 callbacks suppressed [ 824.319453][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.520655][T20974] overlayfs: failed to clone upperpath [ 824.556762][T14689] usb 10-1: USB disconnect, device number 2 [ 824.807527][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6138'. [ 824.808741][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6138'. [ 825.174527][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.431370][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.603112][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6152'. [ 825.603148][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6152'. [ 826.542270][T14689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.698772][T21055] fuse: root generation should be zero [ 827.656807][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.465265][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.685051][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.775150][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.877058][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.370308][T21194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.371029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.655812][ T5872] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 830.824739][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.824778][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.824803][ T5872] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.824847][ T5872] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.824871][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.910582][ T5872] usb 10-1: config 0 descriptor?? [ 830.987688][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.235068][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6234'. [ 831.381672][T21229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.483481][ T5872] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 831.767631][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.013116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.045096][ T5886] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 832.107730][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.216071][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 832.234221][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.234248][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.260880][ T5886] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 832.260914][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.260936][ T5886] usb 7-1: Product: syz [ 832.260951][ T5886] usb 7-1: Manufacturer: syz [ 832.260966][ T5886] usb 7-1: SerialNumber: syz [ 832.659043][ T5886] usb 7-1: 0:2 : does not exist [ 832.664242][ T5886] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 832.787964][ C0] plantronics 0003:047F:FFFF.0019: usb_submit_urb(ctrl) failed: -1 [ 832.992120][ T5886] usb 7-1: USB disconnect, device number 17 [ 833.127296][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6249'. [ 833.208174][T15333] udevd[15333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.210099][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.490819][T21273] team0 (unregistering): left allmulticast mode [ 833.490843][T21273] team_slave_1: left allmulticast mode [ 833.490869][T21273] team0 (unregistering): left promiscuous mode [ 833.490882][T21273] team_slave_1: left promiscuous mode [ 833.746455][ T36] usb 10-1: USB disconnect, device number 3 [ 833.862273][T21273] team0 (unregistering): Port device team_slave_1 removed [ 834.175563][T21310] sctp: [Deprecated]: syz.0.6261 (pid 21310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 834.175563][T21310] Use struct sctp_sack_info instead [ 834.325817][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.748196][T21334] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6269'. [ 834.814028][T21334] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6269'. [ 834.914594][T21338] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 834.914627][T21338] overlayfs: failed to set xattr on upper [ 834.914637][T21338] overlayfs: ...falling back to redirect_dir=nofollow. [ 834.914647][T21338] overlayfs: ...falling back to index=off. [ 834.914655][T21338] overlayfs: ...falling back to uuid=null. [ 834.914674][T21338] overlayfs: maximum fs stacking depth exceeded [ 835.432722][ T5885] net_ratelimit: 1 callbacks suppressed [ 835.432744][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.440352][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.458088][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.487782][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.679687][T21348] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.727058][T21348] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.583737][T21348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.605172][T21348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.630459][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.740905][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.834252][T21347] netlink: 'syz.0.6276': attribute type 3 has an invalid length. [ 837.896041][T12881] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.088018][T12881] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.088140][T12881] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.088181][T12881] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.254209][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.264278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.756230][T21472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.873554][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.647481][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.652020][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 841.090942][ T5885] net_ratelimit: 3 callbacks suppressed [ 841.090962][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.195465][T21555] netlink: 'syz.9.6364': attribute type 39 has an invalid length. [ 841.513451][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.202617][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.308477][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.645691][T21637] 9p: Bad value for 'wfdno' [ 843.734439][T21643] binder: 21640:21643 ioctl c0306201 200000000540 returned -14 [ 844.021447][T21654] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6408'. [ 844.021473][T21654] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 844.374875][T21671] overlayfs: failed to clone upperpath [ 844.505027][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.793399][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.114088][ T37] audit: type=1326 audit(3919614409.125:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21691 comm="syz.0.6424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x0 [ 845.179751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 845.179794][ C1] lec:lec_tx_timeout: lec0 [ 845.611624][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.549545][T21749] netlink: 'syz.6.6448': attribute type 39 has an invalid length. [ 846.717008][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.761124][ T5872] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 846.927201][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.927260][ T5872] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 846.927286][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.034861][ T5872] usb 10-1: config 0 descriptor?? [ 847.061163][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 847.420892][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.421148][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.421423][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.450520][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.450809][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.492292][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 847.493508][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 847.496188][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 847.503174][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 847.506322][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 847.540100][T21781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.540343][T21781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.540499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.540897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.732113][ T5872] pwc: recv_control_msg error -71 req 02 val 2000 [ 847.732639][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 847.733250][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 847.733723][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 847.734200][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 847.734715][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 847.735192][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 847.736364][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 847.736965][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 847.737332][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 847.813284][ T5872] pwc: Registered as video103. [ 847.833663][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input19 [ 847.935509][ T5872] usb 10-1: USB disconnect, device number 4 [ 848.288788][ T5885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 848.462179][ T5885] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 848.462229][ T5885] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 848.462365][ T5885] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 848.462471][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.642605][T21787] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 848.679825][ T5885] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.102916][ T5872] usb 7-1: USB disconnect, device number 18 [ 852.279447][ T930] net_ratelimit: 8 callbacks suppressed [ 852.279471][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.385197][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.501833][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.592558][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.957415][T21969] lo speed is unknown, defaulting to 1000 [ 855.245855][T21980] netlink: 'syz.9.6545': attribute type 1 has an invalid length. [ 855.442009][T21980] bond1: entered promiscuous mode [ 855.442474][T21980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.601837][T21988] bond1: (slave bridge1): making interface the new active one [ 855.601869][T21988] bridge1: entered promiscuous mode [ 855.603132][T21988] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 855.630411][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.035580][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.047449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.741098][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.830553][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.956044][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.284398][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.115184][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.142738][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.582098][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 861.250815][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.366913][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.549459][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.472699][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.595764][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.968705][ T5885] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 865.136047][ T5885] usb 10-1: Using ep0 maxpacket: 16 [ 865.146630][ T5885] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 865.146662][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.171466][ T5885] usb 10-1: config 0 descriptor?? [ 865.190780][ T5885] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 865.695555][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.781352][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.437769][T22291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 866.476116][T22287] block device autoloading is deprecated and will be removed. [ 866.482182][T22287] EXT4-fs (loop0): unable to read superblock [ 866.735189][ T5885] gspca_sonixj: i2c_w8 err -71 [ 866.753791][ T5885] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 866.776511][ T5885] usb 10-1: USB disconnect, device number 5 [ 866.826202][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.984504][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.473321][T22324] netlink: 'syz.9.6695': attribute type 12 has an invalid length. [ 867.918175][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.248331][T22342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.248588][T22342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.752571][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6711'. [ 869.049458][ T5885] net_ratelimit: 8 callbacks suppressed [ 869.049474][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.061725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.189654][T20839] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 869.363390][T20839] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 869.363424][T20839] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 869.363456][T20839] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 869.363509][T20839] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.363538][T20839] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 869.363567][T20839] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.365905][T20839] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.365937][T20839] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.365959][T20839] usb 10-1: Product: syz [ 869.365974][T20839] usb 10-1: Manufacturer: syz [ 869.382238][T22362] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 869.477214][T20839] cdc_wdm 10-1:1.0: skipping garbage [ 869.477236][T20839] cdc_wdm 10-1:1.0: skipping garbage [ 869.516236][T20839] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 869.516261][T20839] cdc_wdm 10-1:1.0: Unknown control protocol [ 869.613818][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.613914][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.614129][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.614144][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.614376][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.614390][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.614592][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.614608][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.614811][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.614825][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.615028][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.615042][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.615243][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.615257][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.615467][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.615481][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.615682][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.615696][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.615898][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 869.615912][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 869.969901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.141147][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.226347][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.397445][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.468543][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 870.468612][ T930] usb 10-1: USB disconnect, device number 6 [ 871.252372][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.850661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.300947][T22413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.324448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.586330][ T5885] net_ratelimit: 3 callbacks suppressed [ 874.586351][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.614147][T22477] netlink: 'syz.0.6758': attribute type 10 has an invalid length. [ 874.658183][T22477] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.526638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.704452][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.725058][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.813534][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.973725][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.779612][T22594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6795'. [ 878.975725][T22598] bridge_slave_0: left allmulticast mode [ 878.975754][T22598] bridge_slave_0: left promiscuous mode [ 878.976012][T22598] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.103201][T22598] bridge_slave_1: left allmulticast mode [ 879.103231][T22598] bridge_slave_1: left promiscuous mode [ 879.103484][T22598] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.125145][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.235625][T22598] bond0: (slave bond_slave_0): Releasing backup interface [ 879.354525][T22598] bond0: (slave bond_slave_1): Releasing backup interface [ 879.438278][T22598] team_slave_0: left promiscuous mode [ 879.459780][T22598] team0: Port device team_slave_0 removed [ 879.481641][T22598] team_slave_1: left promiscuous mode [ 879.551080][T22598] team0: Port device team_slave_1 removed [ 879.553780][T22598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.553838][T22598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.621186][T22598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.621218][T22598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.672428][T22598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 879.724626][T22621] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.6804'. [ 879.724651][T22621] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6804'. [ 879.972345][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.228816][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.656146][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.701962][ T5111] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 881.242140][ T5111] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 881.242194][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.242225][ T5111] Tainted: [L]=SOFTLOCKUP [ 881.242234][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.242248][ T5111] Workqueue: hci5 hci_rx_work [ 881.242286][ T5111] Call Trace: [ 881.242298][ T5111] [ 881.242308][ T5111] dump_stack_lvl+0xe8/0x150 [ 881.242348][ T5111] sysfs_create_dir_ns+0x271/0x2a0 [ 881.242374][ T5111] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 881.242401][ T5111] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 881.242429][ T5111] ? rt_spin_unlock+0x160/0x200 [ 881.242455][ T5111] kobject_add_internal+0x631/0xd10 [ 881.242508][ T5111] kobject_add+0x163/0x240 [ 881.242547][ T5111] ? __pfx_kobject_add+0x10/0x10 [ 881.242587][ T5111] ? get_device_parent+0x370/0x3a0 [ 881.242626][ T5111] device_add+0x408/0xb80 [ 881.242667][ T5111] hci_conn_add_sysfs+0xd5/0x210 [ 881.242698][ T5111] le_conn_complete_evt+0xf1d/0x1430 [ 881.242745][ T5111] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 881.242781][ T5111] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 881.242812][ T5111] ? lockdep_hardirqs_on+0x7a/0x110 [ 881.242844][ T5111] ? skb_pull_data+0xfb/0x200 [ 881.242883][ T5111] hci_le_conn_complete_evt+0x187/0x470 [ 881.242925][ T5111] hci_event_packet+0x7af/0x12c0 [ 881.242959][ T5111] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 881.242991][ T5111] ? __pfx_hci_event_packet+0x10/0x10 [ 881.243018][ T5111] ? rt_spin_unlock+0x14f/0x200 [ 881.243052][ T5111] ? hci_send_to_monitor+0xe2/0x590 [ 881.243091][ T5111] hci_rx_work+0x3ee/0x1030 [ 881.243129][ T5111] ? process_scheduled_works+0xa25/0x1830 [ 881.243162][ T5111] process_scheduled_works+0xb02/0x1830 [ 881.243225][ T5111] ? __pfx_process_scheduled_works+0x10/0x10 [ 881.243266][ T5111] ? assign_work+0x3d5/0x5e0 [ 881.243304][ T5111] worker_thread+0xa50/0xfc0 [ 881.243363][ T5111] kthread+0x388/0x470 [ 881.243387][ T5111] ? __pfx_worker_thread+0x10/0x10 [ 881.243416][ T5111] ? __pfx_kthread+0x10/0x10 [ 881.243441][ T5111] ret_from_fork+0x51e/0xb90 [ 881.243484][ T5111] ? __pfx_ret_from_fork+0x10/0x10 [ 881.243514][ T5111] ? __switch_to+0xc7d/0x1450 [ 881.243546][ T5111] ? __pfx_kthread+0x10/0x10 [ 881.243572][ T5111] ret_from_fork_asm+0x1a/0x30 [ 881.243614][ T5111] [ 881.248248][ T5111] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 881.248369][ T5111] Bluetooth: hci5: failed to register connection device [ 881.340302][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.630736][T22672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6828'. [ 881.630771][T22672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6828'. [ 882.295574][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6839'. [ 882.451708][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.231306][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.393482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.562781][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.011268][ T930] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 884.214217][ T930] usb 7-1: Using ep0 maxpacket: 16 [ 884.225995][ T930] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.226081][ T930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 884.260770][ T930] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.260805][ T930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.260826][ T930] usb 7-1: Product: syz [ 884.260841][ T930] usb 7-1: Manufacturer: syz [ 884.260855][ T930] usb 7-1: SerialNumber: syz [ 884.647159][ T930] usb 7-1: 0:2 : does not exist [ 884.674187][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.685687][ T930] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 884.865154][T22794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.009354][ T930] usb 7-1: USB disconnect, device number 19 [ 885.225328][T15333] udevd[15333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.582315][T22794] net_ratelimit: 5 callbacks suppressed [ 885.582338][T22794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.587473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.785507][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.785884][ T930] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 885.896831][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6878'. [ 885.896861][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6878'. [ 885.945306][ T930] usb 7-1: Using ep0 maxpacket: 16 [ 885.947941][ T930] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.947970][ T930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.954831][ T930] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.954863][ T930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.954886][ T930] usb 7-1: Product: syz [ 885.954902][ T930] usb 7-1: Manufacturer: syz [ 885.954918][ T930] usb 7-1: SerialNumber: syz [ 885.977458][T22794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.977741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.308286][ T930] usb 7-1: 0:2 : does not exist [ 886.339835][ T930] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 886.340933][T22794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.341257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.451318][T12510] lec:lec_start_xmit: lec0:No lecd attached [ 886.469483][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.636615][ T930] usb 7-1: USB disconnect, device number 20 [ 886.704371][T22794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.704687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.761683][T15333] udevd[15333]: setting owner of /dev/bus/usb/007/020 to uid=0, gid=0 failed: No such file or directory [ 886.827518][T15333] udevd[15333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.847927][T19676] Bluetooth: hci5: command 0x0406 tx timeout [ 887.995563][T22876] bridge0: entered allmulticast mode [ 888.323425][T22890] overlayfs: failed to clone upperpath [ 888.569448][T22902] overlayfs: failed to clone upperpath [ 888.889142][T22913] delete_channel: no stack [ 890.257782][T22968] gfs2: path_lookup on À returned error -2 [ 891.063094][T22995] net_ratelimit: 54 callbacks suppressed [ 891.063117][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.063370][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.063640][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.076288][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.080984][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.084056][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.085071][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.093757][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.098946][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.099651][T22995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.196645][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 892.196679][ C1] lec:lec_tx_timeout: lec0 [ 897.412104][ T5885] net_ratelimit: 49 callbacks suppressed [ 897.412124][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.654093][T23114] kvm: pic: non byte read [ 897.654525][T23114] kvm: pic: non byte read [ 897.654878][T23114] kvm: pic: non byte read [ 897.655393][T23114] kvm: pic: level sensitive irq not supported [ 897.655471][T23114] kvm: pic: non byte read [ 897.655823][T23114] kvm: pic: non byte read [ 897.656176][T23114] kvm: pic: non byte read [ 897.656662][T23114] kvm: pic: single mode not supported [ 897.656673][T23114] kvm: pic: level sensitive irq not supported [ 897.656748][T23114] kvm: pic: non byte read [ 897.704170][T23114] kvm: pic: non byte read [ 897.705239][T23114] kvm: pic: non byte read [ 898.437704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.526007][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.969491][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7022'. [ 898.969511][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7022'. [ 898.970227][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7022'. [ 898.970245][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7022'. [ 899.635547][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.653424][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.293340][T23200] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 900.293371][T23200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 900.383239][T23200] vhci_hcd vhci_hcd.0: Device attached [ 900.494298][T23207] netlink: 'syz.9.7037': attribute type 10 has an invalid length. [ 900.511876][T23201] vhci_hcd: connection closed [ 900.551858][T23208] netlink: 'syz.9.7037': attribute type 10 has an invalid length. [ 900.567169][T23207] team0: Port device dummy0 added [ 900.581216][T23208] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 900.596597][ T5885] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 900.644480][T12881] vhci_hcd vhci_hcd.6: stop threads [ 900.644521][T12881] vhci_hcd vhci_hcd.6: release socket [ 900.675295][T12881] vhci_hcd vhci_hcd.6: disconnect device [ 900.692162][ T5885] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 900.692381][ T5885] usb 45-1: enqueue for inactive port 0 [ 900.694016][T23208] team0: Failed to send options change via netlink (err -105) [ 900.694183][T23208] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 900.694581][T23208] team0: Port device dummy0 removed [ 900.700875][T23208] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 900.747956][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.766987][ T5885] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 901.201776][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.332834][T23218] 9p: Bad value for 'wfdno' [ 901.867336][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.903142][T23247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7051'. [ 902.252211][T20839] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 903.337351][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.366894][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.449274][T20839] usb 7-1: Using ep0 maxpacket: 16 [ 903.451304][T20839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.451330][T20839] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.453887][T20839] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.453921][T20839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.453936][T20839] usb 7-1: Product: syz [ 903.453946][T20839] usb 7-1: Manufacturer: syz [ 903.453957][T20839] usb 7-1: SerialNumber: syz [ 903.778314][T20839] usb 7-1: 0:2 : does not exist [ 903.796000][T20839] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 903.920235][T20839] usb 7-1: USB disconnect, device number 21 [ 904.081234][T15333] udevd[15333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.233782][ T37] audit: type=1326 audit(3919614464.468:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23290 comm="syz.0.7069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1132f6c799 code=0x0 [ 904.432750][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.287581][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.291040][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 905.535135][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.644359][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.644861][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.764953][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.867288][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.901717][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.979149][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.101144][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.405175][T23484] syz_tun: entered allmulticast mode [ 911.433925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 911.433962][ C1] lec:lec_tx_timeout: lec0 [ 911.434446][T20636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.646171][T23487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.647050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.647330][T23487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.669125][T23486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.700864][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.160678][T23584] tipc: Cannot configure node identity twice [ 914.424459][ T5885] net_ratelimit: 9 callbacks suppressed [ 914.424479][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.535594][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.695405][ T5886] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 915.919103][ T5886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.919142][ T5886] usb 10-1: config 0 interface 0 has no altsetting 0 [ 916.006011][ T5886] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 916.006046][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.006068][ T5886] usb 10-1: Product: syz [ 916.006082][ T5886] usb 10-1: Manufacturer: syz [ 916.006098][ T5886] usb 10-1: SerialNumber: syz [ 916.012325][ T5886] usb 10-1: config 0 descriptor?? [ 916.062958][ T5886] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 916.085576][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 916.086731][ T5886] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 916.086812][ T5886] usb 10-1: media controller created [ 916.145256][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 916.230509][ C0] ------------[ cut here ]------------ [ 916.230521][ C0] 1 [ 916.230532][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 916.230564][ C0] Modules linked in: [ 916.230580][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.230603][ C0] Tainted: [L]=SOFTLOCKUP [ 916.230609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.230619][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 916.230641][ C0] Code: 0f 94 c0 5b 41 5e c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 e9 fe fc 74 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 916.230657][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 916.230671][ C0] RAX: ffffffff81b09619 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 916.230683][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 916.230693][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 916.230704][ C0] R10: dffffc0000000000 R11: ffffffff81b09610 R12: 0000000000000000 [ 916.230716][ C0] R13: 000000010000e200 R14: 1ffff9200002af4c R15: ffff888061b61f38 [ 916.230733][ C0] FS: 0000000000000000(0000) GS:ffff888126343000(0000) knlGS:0000000000000000 [ 916.230747][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.230758][ C0] CR2: 00002000000e2030 CR3: 0000000068296000 CR4: 00000000003526f0 [ 916.230772][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 916.230783][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 916.230794][ C0] Call Trace: [ 916.230801][ C0] [ 916.230837][ C0] call_timer_fn+0x192/0x640 [ 916.230863][ C0] ? __pfx_stub_timer+0x10/0x10 [ 916.230902][ C0] ? call_timer_fn+0xd4/0x640 [ 916.230924][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 916.230944][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 916.230990][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.231026][ C0] ? __pfx_stub_timer+0x10/0x10 [ 916.231043][ C0] __run_timer_base+0x6a3/0x9f0 [ 916.231091][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 916.231114][ C0] ? rt_spin_lock+0x1e0/0x400 [ 916.231144][ C0] run_timer_softirq+0xb7/0x170 [ 916.231169][ C0] handle_softirqs+0x1de/0x6f0 [ 916.231209][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 916.231235][ C0] run_ktimerd+0x69/0x100 [ 916.231260][ C0] smpboot_thread_fn+0x541/0xa50 [ 916.231287][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 916.231319][ C0] kthread+0x388/0x470 [ 916.231337][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 916.231361][ C0] ? __pfx_kthread+0x10/0x10 [ 916.231381][ C0] ret_from_fork+0x51e/0xb90 [ 916.231408][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 916.231430][ C0] ? __switch_to+0xc7d/0x1450 [ 916.231454][ C0] ? __pfx_kthread+0x10/0x10 [ 916.231472][ C0] ret_from_fork_asm+0x1a/0x30 [ 916.231502][ C0] [ 916.231517][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 916.231532][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 916.231553][ C0] Tainted: [L]=SOFTLOCKUP [ 916.231559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.231569][ C0] Call Trace: [ 916.231575][ C0] [ 916.231581][ C0] vpanic+0x56c/0xa60 [ 916.231606][ C0] ? __pfx__printk+0x10/0x10 [ 916.231624][ C0] ? __pfx_vpanic+0x10/0x10 [ 916.231654][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 916.231681][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 916.231710][ C0] panic+0xc5/0xd0 [ 916.231734][ C0] ? __pfx_panic+0x10/0x10 [ 916.231766][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 916.231786][ C0] __warn+0x315/0x4f0 [ 916.231809][ C0] ? stub_timer+0xa/0x20 [ 916.231824][ C0] ? stub_timer+0xa/0x20 [ 916.231844][ C0] __report_bug+0x29a/0x540 [ 916.231871][ C0] ? stub_timer+0xa/0x20 [ 916.231886][ C0] ? __pfx___report_bug+0x10/0x10 [ 916.231905][ C0] ? add_lock_to_list+0xc7/0x100 [ 916.231925][ C0] ? lockdep_unlock+0x5d/0xd0 [ 916.231948][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 916.231971][ C0] ? stub_timer+0xa/0x20 [ 916.231985][ C0] report_bug+0x16a/0x220 [ 916.232006][ C0] ? stub_timer+0xa/0x20 [ 916.232018][ C0] ? stub_timer+0xc/0x20 [ 916.232051][ C0] handle_bug+0x98/0x200 [ 916.232089][ C0] exc_invalid_op+0x1a/0x50 [ 916.232135][ C0] asm_exc_invalid_op+0x1a/0x20 [ 916.232158][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 916.232179][ C0] Code: 0f 94 c0 5b 41 5e c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 e9 fe fc 74 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 916.232200][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 916.232224][ C0] RAX: ffffffff81b09619 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 916.232237][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 916.232247][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 916.232258][ C0] R10: dffffc0000000000 R11: ffffffff81b09610 R12: 0000000000000000 [ 916.232270][ C0] R13: 000000010000e200 R14: 1ffff9200002af4c R15: ffff888061b61f38 [ 916.232287][ C0] ? __pfx_stub_timer+0x10/0x10 [ 916.232303][ C0] ? stub_timer+0x9/0x20 [ 916.232322][ C0] ? stub_timer+0x9/0x20 [ 916.232335][ C0] call_timer_fn+0x192/0x640 [ 916.232351][ C0] ? __pfx_stub_timer+0x10/0x10 [ 916.232364][ C0] ? call_timer_fn+0xd4/0x640 [ 916.232380][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 916.232395][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 916.232426][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.232447][ C0] ? __pfx_stub_timer+0x10/0x10 [ 916.232464][ C0] __run_timer_base+0x6a3/0x9f0 [ 916.232501][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 916.232523][ C0] ? rt_spin_lock+0x1e0/0x400 [ 916.232553][ C0] run_timer_softirq+0xb7/0x170 [ 916.232579][ C0] handle_softirqs+0x1de/0x6f0 [ 916.232609][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 916.232641][ C0] run_ktimerd+0x69/0x100 [ 916.232666][ C0] smpboot_thread_fn+0x541/0xa50 [ 916.232693][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 916.232725][ C0] kthread+0x388/0x470 [ 916.232743][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 916.232767][ C0] ? __pfx_kthread+0x10/0x10 [ 916.232785][ C0] ret_from_fork+0x51e/0xb90 [ 916.232811][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 916.232834][ C0] ? __switch_to+0xc7d/0x1450 [ 916.232857][ C0] ? __pfx_kthread+0x10/0x10 [ 916.232875][ C0] ret_from_fork_asm+0x1a/0x30 [ 916.232904][ C0] [ 916.233509][ C0] Kernel Offset: disabled