last executing test programs: 8m33.953693971s ago: executing program 2 (id=6): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x6, @mcast1, 0x100}, {0xa, 0x4e22, 0x10006, @loopback, 0x1}, r1, 0x8}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m33.648717904s ago: executing program 2 (id=8): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8m33.431321614s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f000000cc00)='./file0/file1/file0\x00', 0x0) 8m32.16391071s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 8m31.045916193s ago: executing program 2 (id=19): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m28.817281735s ago: executing program 2 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 8m28.03703452s ago: executing program 32 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 8m8.367291155s ago: executing program 0 (id=120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4008881) sendmmsg$alg(r1, &(0x7f000000b5c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000012c0)="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", 0xe80}, {&(0x7f0000000280)="e73dc18052cd692ce3eb43845eaee019d00d9fe6903ccf81536647725574946c0eab708e66f872228590909868f43e27cc8d98e124cf7713596efbc37912a2ab34f4bb9e69e9267011686973cb0112b9544acd4aa660536a2d99c663bd583abcbb5ff96406bc4be960019220f8126ab2f3adf1d075bd115ba47c29bb85f10abe506e9b514fd6e77384dd3e66874c99459d39d018cf1c2dd1", 0x98}, {&(0x7f0000000340)="724398f47ed379f24638738c4f880c1c1e31649d76663c4b20f27328c6a32e09b87f2f91af4a5ad80445e95bb82fdfe7a03389173cad5f986680e20acf74d733b35c515452218422619d1a23969650f6d0a460a3b45254cd5626475e48ed31745189bae95787e838c38c36942a6047c6c86b8a39f482de346627d52c9258e72b0ecb7a467539d5662b3b8f388111eb484031cf6063b42af20ed8f1fd429ccbd3b20f54985f4b470646a3f5bb55ba6471dce587dff41f8f968a12c032b2c8eb", 0xbf}, {&(0x7f0000000400)="9ed7272afe7aca0374267e8dda4e7fc6dc7f268118230f18422935814e0a5f7f1a27ec398f34eb5cc6b7d6e980a461fa6e4b6c67f005618dadcb0f69010c520e5b4a85f517", 0x45}], 0x4, 0x0, 0x0, 0x4}], 0x1, 0x44800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8m8.104888851s ago: executing program 0 (id=122): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000370436a75be4c1a2f2b400000000", @ANYRES32=r3, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r2, @ANYBLOB="14000600fe800000000000000000000000000036140007"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 8m7.466350937s ago: executing program 0 (id=125): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x254}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000e3d000/0x2000)=nil, 0x2000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f000081f000/0x2000)=nil, 0x800000, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 8m7.16479916s ago: executing program 0 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 8m6.929937977s ago: executing program 0 (id=128): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 8m5.662547813s ago: executing program 0 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe0, &(0x7f0000000280)=ANY=[], 0x0) 8m4.78068773s ago: executing program 33 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe0, &(0x7f0000000280)=ANY=[], 0x0) 7m35.042421985s ago: executing program 6 (id=239): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 7m34.174256051s ago: executing program 6 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10000) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe", 0xfc83}], 0x1}}], 0x1, 0x40) 7m33.458254073s ago: executing program 6 (id=252): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) close(r2) r3 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xa) dup2(r1, r2) 7m32.877693473s ago: executing program 6 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 7m31.616173747s ago: executing program 6 (id=265): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000023c0)={0x2c, &(0x7f0000002240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 7m29.011876676s ago: executing program 6 (id=280): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/71, 0x47}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m28.253051438s ago: executing program 34 (id=280): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/71, 0x47}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m39.285957518s ago: executing program 7 (id=598): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) 5m31.946044043s ago: executing program 7 (id=608): socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x3, 0x196}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m30.616243274s ago: executing program 7 (id=611): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x49d7}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m30.230675943s ago: executing program 7 (id=615): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 5m29.910232692s ago: executing program 7 (id=618): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x9, 0x0, 0x4, @generic, 0x7f, 0x15}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r3 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) sendmsg$inet_sctp(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000084"], 0x18, 0x200008c0}, 0x6008045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5m24.656557254s ago: executing program 7 (id=626): r0 = socket$inet6(0xa, 0x80002, 0x0) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) gettid() r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1}, {r5, 0xd355}], 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 5m9.191456291s ago: executing program 35 (id=626): r0 = socket$inet6(0xa, 0x80002, 0x0) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) gettid() r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1}, {r5, 0xd355}], 0x2, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 3m50.613058136s ago: executing program 5 (id=758): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000aa2000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f01c4", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m49.947180052s ago: executing program 5 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r2], 0xffffffffffffffe6) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = creat(0x0, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(0x0, 0x8) dup3(r5, r4, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) 3m47.405957243s ago: executing program 5 (id=765): syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 3m44.131053745s ago: executing program 5 (id=768): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r4, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@default, @default, @default, @rose, @bcast, @netrom]}, &(0x7f0000000340)=0x40, 0x81800) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m37.712641592s ago: executing program 5 (id=775): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) socket$kcm(0x29, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a00)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_dump={0x40, 0x13, 0x200}}) close(r0) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200000000000000029000000360000003c0000000000000004018100000000001400000000000000290000000b00000000000009000000001400000000000000290000000b00000000000090000000001400000000000000290000003e000000f9ffffff0000000078000000000000002900000039000000330c0004000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000002fc010000000000000000000000000001780000000000000029000000390000003b0c00ab00000000fc02000000000000000000000000000100000000000000000000ffffe000000220010000000000000000000000000000fe88000000000000000000000000000120010000000000000000bc117603070ff6000000000001000000000000000000af12ad717fff88574161ee163bb10a08bc9a887fa05f03f97b3b93a1489adc2c6cfe36f9435603bb3dc473640fa3449f06cd6a10c7fca81fa58428d8cb5e"], 0x158}}], 0x2, 0x4840) 3m33.505594451s ago: executing program 5 (id=778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000019080)={{{@in6, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) 3m18.240821728s ago: executing program 36 (id=778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000019080)={{{@in6, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) 5.390383865s ago: executing program 9 (id=1949): io_uring_setup(0x899, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0x2a070400) 5.306429733s ago: executing program 1 (id=1950): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000"], 0x68}, 0x1, 0x7}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd02337761"], 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 5.03602352s ago: executing program 8 (id=1952): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000000)={0x20, r1, 0x1, 0x0, &(0x7f00000022c0)=[{}]}) 5.00433104s ago: executing program 9 (id=1953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.767298003s ago: executing program 8 (id=1955): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000000080)=[{&(0x7f00000016c0)="27031c00160014000000002f06afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a488a8", 0x3a}], 0x1}, 0x20000004) 4.484588652s ago: executing program 8 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.438853s ago: executing program 9 (id=1957): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.237468792s ago: executing program 3 (id=1958): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 4.087056998s ago: executing program 3 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.9978686s ago: executing program 9 (id=1960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x1, 0x4, 0x8, 0x10, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.755635239s ago: executing program 1 (id=1961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000040000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419890400050008000600"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.721833877s ago: executing program 9 (id=1962): r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r4, 0x89f1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000012c0)={'syz', 0x2}, &(0x7f00000002c0)="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", 0x43e, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000080)=""/80, 0x50}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000002bc0)=""/4113, 0xfea1}], 0x4}, 0x70003}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x1142, 0x0) 3.338117029s ago: executing program 1 (id=1963): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) close(r0) 2.251010151s ago: executing program 3 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x2000000000000216, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x1c2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/47) 2.080500742s ago: executing program 8 (id=1967): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) 1.863360953s ago: executing program 9 (id=1968): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 1.754118907s ago: executing program 3 (id=1969): r0 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, &(0x7f0000000180)) 1.70228814s ago: executing program 4 (id=1970): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pwritev(r0, 0x0, 0x0, 0x4, 0x6) 1.593279793s ago: executing program 4 (id=1971): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x100000000, 0x6) 1.45346954s ago: executing program 4 (id=1972): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r0, 0x409, 0x8) fallocate(r0, 0x3, 0x2009140, 0x3) 1.450178202s ago: executing program 1 (id=1973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12000) 705.732838ms ago: executing program 4 (id=1974): r0 = creat(&(0x7f0000000100)='./file1\x00', 0xca782f05a4b1af27) r1 = syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x226c, 0x13500, 0x2, 0x375, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000340)=r0, 0x1) 546.305892ms ago: executing program 3 (id=1975): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') 525.721184ms ago: executing program 1 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 493.789341ms ago: executing program 8 (id=1977): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 286.477321ms ago: executing program 4 (id=1978): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x84) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 285.600359ms ago: executing program 3 (id=1979): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 195.681002ms ago: executing program 1 (id=1980): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback, 0x2, 0x2}, 0x20) 187.869821ms ago: executing program 8 (id=1981): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x3f7, 0x1, 0x70bd26, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x200400c4) 0s ago: executing program 4 (id=1982): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f00000000c0), 0xb9) kernel console output (not intermixed with test programs): ted on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.789433][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.797981][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.797995][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.798018][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.380120][ T8458] hsr_slave_0: entered promiscuous mode [ 341.385869][ T8458] hsr_slave_1: entered promiscuous mode [ 341.386805][ T8458] debugfs: 'hsr0' already exists in 'hsr' [ 341.386827][ T8458] Cannot create hsr debugfs directory [ 350.652293][ T7191] bridge_slave_1: left allmulticast mode [ 350.652318][ T7191] bridge_slave_1: left promiscuous mode [ 350.699941][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.832348][ T7191] bridge_slave_0: left allmulticast mode [ 350.832375][ T7191] bridge_slave_0: left promiscuous mode [ 350.832582][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.740310][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.213048][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.380450][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.381639][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.383633][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.666731][ T5119] Bluetooth: hci2: command tx timeout [ 359.738593][ T7191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.723409][ T7191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.936892][ T7191] bond0 (unregistering): Released all slaves [ 361.008166][ T37] audit: type=1326 audit(1776447253.931:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008214][ T37] audit: type=1326 audit(1776447253.931:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008254][ T37] audit: type=1326 audit(1776447253.931:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008293][ T37] audit: type=1326 audit(1776447253.931:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008333][ T37] audit: type=1326 audit(1776447253.931:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008372][ T37] audit: type=1326 audit(1776447253.931:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008411][ T37] audit: type=1326 audit(1776447253.931:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008449][ T37] audit: type=1326 audit(1776447253.931:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008489][ T37] audit: type=1326 audit(1776447253.931:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.008528][ T37] audit: type=1326 audit(1776447253.931:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86de33c819 code=0x7ffc0000 [ 361.156134][ T8786] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 361.156171][ T8786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 361.156188][ T8786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 361.708214][ T5119] Bluetooth: hci2: command tx timeout [ 364.252565][ T5119] Bluetooth: hci2: command tx timeout [ 366.272697][ T5119] Bluetooth: hci2: command tx timeout [ 369.147593][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 369.147608][ T37] audit: type=1804 audit(1776447262.061:47): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.752" name="/newroot/174/file1" dev="fuse" ino=1 res=1 errno=0 [ 369.676604][ T37] audit: type=1800 audit(1776447262.451:48): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.752" name="/" dev="fuse" ino=1 res=0 errno=0 [ 369.804730][ T5464] 8021q: adding VLAN 0 to HW filter on device eth13 [ 375.330292][ T7191] hsr_slave_0: left promiscuous mode [ 375.370646][ T7191] hsr_slave_1: left promiscuous mode [ 375.371664][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.371688][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.429324][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.429347][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.491023][ T7191] veth1_macvtap: left promiscuous mode [ 377.491123][ T7191] veth0_macvtap: left promiscuous mode [ 377.491441][ T7191] veth1_vlan: left promiscuous mode [ 377.494591][ T7191] veth0_vlan: left promiscuous mode [ 380.812646][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.265365][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 384.645433][ T8995] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 384.839314][ T7191] team0 (unregistering): Port device team_slave_1 removed [ 384.880211][ T7191] team0 (unregistering): Port device team_slave_0 removed [ 385.440634][ T5464] 8021q: adding VLAN 0 to HW filter on device eth14 [ 385.630025][ T9010] binder: 9004:9010 ioctl c0285840 200000000500 returned -22 [ 388.209024][ T9022] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 389.035435][ T9027] netlink: 56 bytes leftover after parsing attributes in process `syz.1.774'. [ 389.035652][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 389.117971][ T8811] chnl_net:caif_netlink_parms(): no params data found [ 389.285363][ T9033] program syz.1.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.552961][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.553094][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.559698][ T8811] bridge_slave_0: entered allmulticast mode [ 392.565550][ T8811] bridge_slave_0: entered promiscuous mode [ 392.581235][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.581340][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.581499][ T8811] bridge_slave_1: entered allmulticast mode [ 392.585329][ T8811] bridge_slave_1: entered promiscuous mode [ 392.689448][ T9060] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 392.915018][ T8811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.920345][ T8811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.159186][ T8811] team0: Port device team_slave_0 added [ 393.174365][ T8811] team0: Port device team_slave_1 added [ 396.024835][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.024855][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.024880][ T8811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.114218][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.114233][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.114258][ T8811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.288496][ T5464] 8021q: adding VLAN 0 to HW filter on device eth15 [ 399.467983][ T8811] hsr_slave_0: entered promiscuous mode [ 399.471156][ T8811] hsr_slave_1: entered promiscuous mode [ 399.472024][ T8811] debugfs: 'hsr0' already exists in 'hsr' [ 399.472046][ T8811] Cannot create hsr debugfs directory [ 400.748775][ T7189] bridge_slave_1: left allmulticast mode [ 400.748801][ T7189] bridge_slave_1: left promiscuous mode [ 400.749024][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.820766][ T7189] bridge_slave_0: left allmulticast mode [ 400.820781][ T7189] bridge_slave_0: left promiscuous mode [ 400.820929][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.067540][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.211196][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.327687][ T7189] bond0 (unregistering): Released all slaves [ 405.255681][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 405.393418][ T7189] hsr_slave_0: left promiscuous mode [ 405.468301][ T7189] hsr_slave_1: left promiscuous mode [ 405.469013][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.000332][ T9137] evm: overlay not supported [ 406.048198][ T5872] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 406.361540][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.445372][ T5872] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.445389][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.445398][ T5872] usb 4-1: Product: syz [ 406.445406][ T5872] usb 4-1: Manufacturer: syz [ 406.445413][ T5872] usb 4-1: SerialNumber: syz [ 406.768730][ T7189] team0 (unregistering): Port device team_slave_1 removed [ 406.820815][ T7189] team0 (unregistering): Port device team_slave_0 removed [ 406.942628][ T9134] binder: 9133:9134 ioctl c0046209 0 returned -22 [ 407.805187][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 407.805228][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.903223][ T5872] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.972025][ T5872] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 408.013212][ T5872] usb 4-1: USB disconnect, device number 11 [ 408.251976][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.294971][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.298509][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.300009][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.301072][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.578872][ T9143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.612400][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 408.681716][ T9] hid_parser_main: 109 callbacks suppressed [ 408.681735][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 408.737930][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.043532][ T9150] fido_id[9150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 410.710972][ T5813] Bluetooth: hci3: command tx timeout [ 412.831888][ T5813] Bluetooth: hci3: command tx timeout [ 414.343647][ T9194] comedi comedi1: mpc624: I/O port conflict (0x1,16) [ 414.712789][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.805'. [ 415.038581][ T5119] Bluetooth: hci3: command tx timeout [ 415.305391][ T7189] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.372774][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 415.374840][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 417.458436][ T5464] 8021q: adding VLAN 0 to HW filter on device eth16 [ 417.479231][ T5813] Bluetooth: hci3: command tx timeout [ 417.907170][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'. [ 418.232242][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'. [ 418.723051][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.742098][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.800211][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.801259][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.804591][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.136850][ T9216] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 420.211164][ T7189] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.778900][ T9144] chnl_net:caif_netlink_parms(): no params data found [ 420.988233][ T5813] Bluetooth: hci5: command tx timeout [ 421.077242][ T9232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'. [ 421.078390][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 421.078459][ T9232] netlink: 55 bytes leftover after parsing attributes in process `syz.1.810'. [ 423.175032][ T5813] Bluetooth: hci5: command tx timeout [ 423.266718][ T9247] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 423.305368][ T7189] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.649538][ T5813] Bluetooth: hci5: command tx timeout [ 426.548831][ T6095] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 426.889910][ T37] audit: type=1326 audit(1776447319.801:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.889959][ T37] audit: type=1326 audit(1776447319.801:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.889999][ T37] audit: type=1326 audit(1776447319.801:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890038][ T37] audit: type=1326 audit(1776447319.801:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890077][ T37] audit: type=1326 audit(1776447319.801:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890116][ T37] audit: type=1326 audit(1776447319.801:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890155][ T37] audit: type=1326 audit(1776447319.801:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890194][ T37] audit: type=1326 audit(1776447319.801:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890232][ T37] audit: type=1326 audit(1776447319.801:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.890271][ T37] audit: type=1326 audit(1776447319.801:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9272 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 426.958144][ T6095] usb 2-1: device not accepting address 5, error -71 [ 427.894974][ T5813] Bluetooth: hci5: command tx timeout [ 428.241358][ T7189] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.679735][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.681383][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.681881][ T9144] bridge_slave_0: entered allmulticast mode [ 428.689134][ T9144] bridge_slave_0: entered promiscuous mode [ 428.703601][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.706825][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.707328][ T9144] bridge_slave_1: entered allmulticast mode [ 428.722613][ T9144] bridge_slave_1: entered promiscuous mode [ 429.748995][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.753292][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.067905][ T9313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.823'. [ 432.067931][ T9313] netlink: 92 bytes leftover after parsing attributes in process `syz.3.823'. [ 432.067946][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 432.582399][ T9144] team0: Port device team_slave_0 added [ 432.667540][ T9144] team0: Port device team_slave_1 added [ 432.763648][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.763664][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.763689][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.825792][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.825806][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.825831][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.527127][ T9144] hsr_slave_0: entered promiscuous mode [ 434.535951][ T9144] hsr_slave_1: entered promiscuous mode [ 434.536834][ T9144] debugfs: 'hsr0' already exists in 'hsr' [ 434.536856][ T9144] Cannot create hsr debugfs directory [ 434.612544][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 437.088145][ T37] kauditd_printk_skb: 164 callbacks suppressed [ 437.088162][ T37] audit: type=1804 audit(1776447330.011:223): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.830" name="/newroot/201/file1/file0" dev="tmpfs" ino=1075 res=1 errno=0 [ 438.610304][ T7189] bridge_slave_1: left allmulticast mode [ 438.610321][ T7189] bridge_slave_1: left promiscuous mode [ 438.610478][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.662708][ T7189] bridge_slave_0: left allmulticast mode [ 438.662731][ T7189] bridge_slave_0: left promiscuous mode [ 438.662952][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.358761][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.438739][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.462450][ T7189] bond0 (unregistering): Released all slaves [ 439.994092][ T5813] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 440.316675][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 440.600813][ T1235] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 441.100976][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 442.318164][ T1235] usb 5-1: Using ep0 maxpacket: 8 [ 442.439809][ T1235] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 442.439837][ T1235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 442.439856][ T1235] usb 5-1: Product: syz [ 442.439869][ T1235] usb 5-1: Manufacturer: syz [ 442.439881][ T1235] usb 5-1: SerialNumber: syz [ 442.487731][ T1235] usb 5-1: config 0 descriptor?? [ 442.540149][ T1235] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 442.639147][ T1235] gspca_sn9c2028: read1 error -71 [ 442.639520][ T1235] gspca_sn9c2028: read1 error -71 [ 442.639871][ T1235] gspca_sn9c2028: read1 error -71 [ 442.639947][ T1235] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 442.682967][ T1235] usb 5-1: USB disconnect, device number 10 [ 443.948927][ T4495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.981484][ T4495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.981508][ T4495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.981519][ T4495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.982875][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.089375][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.089404][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.089424][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.097305][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.133619][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.458925][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.300956][ T7183] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.670113][ T5789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 447.630148][ T5789] usb 4-1: Using ep0 maxpacket: 32 [ 447.632725][ T5789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.692980][ T5789] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 447.693001][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.693011][ T5789] usb 4-1: Product: syz [ 447.693018][ T5789] usb 4-1: Manufacturer: syz [ 447.693025][ T5789] usb 4-1: SerialNumber: syz [ 447.712180][ T5789] usb 4-1: config 0 descriptor?? [ 447.714075][ T7183] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.733165][ T5789] cdc_ether 4-1:0.0: skipping garbage [ 447.733185][ T5789] cdc_ether 4-1:0.0: missing cdc header descriptor [ 447.739815][ T5789] usb 4-1: unsupported MDLM descriptors [ 447.853819][ T7190] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.910373][ T7190] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.024990][ T5789] usb 4-1: USB disconnect, device number 12 [ 448.152772][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.152933][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.153095][ T9207] bridge_slave_0: entered allmulticast mode [ 448.159003][ T9207] bridge_slave_0: entered promiscuous mode [ 449.366401][ T7189] hsr_slave_0: left promiscuous mode [ 449.417566][ T7189] hsr_slave_1: left promiscuous mode [ 449.431771][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.431795][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.456004][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.456027][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.629816][ T6089] net_ratelimit: 8 callbacks suppressed [ 449.629832][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.689112][ T7189] veth1_macvtap: left promiscuous mode [ 449.689210][ T7189] veth0_macvtap: left promiscuous mode [ 449.689447][ T7189] veth1_vlan: left promiscuous mode [ 449.689617][ T7189] veth0_vlan: left promiscuous mode [ 450.765184][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.022149][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.912240][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.988965][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.164557][ T7189] team0 (unregistering): Port device team_slave_1 removed [ 453.206838][ T7189] team0 (unregistering): Port device team_slave_0 removed [ 453.474485][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.474631][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.474804][ T9207] bridge_slave_1: entered allmulticast mode [ 453.482630][ T9207] bridge_slave_1: entered promiscuous mode [ 453.548302][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.656056][ T37] audit: type=1326 audit(1776447346.581:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.3.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337bf1c819 code=0x0 [ 453.738747][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 453.889900][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 453.891666][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.891693][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.891729][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.891749][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.945447][ T9] usb 5-1: config 0 descriptor?? [ 453.957978][ T9] hub 5-1:0.0: USB hub found [ 454.028466][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.041786][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.180220][ T9] hub 5-1:0.0: 1 port detected [ 454.196356][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.211532][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.326093][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.361666][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.540319][ T9207] team0: Port device team_slave_0 added [ 454.563895][ T9207] team0: Port device team_slave_1 added [ 454.836512][ T9] hub 5-1:0.0: activate --> -90 [ 454.886718][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.886800][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.886844][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.083099][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.290980][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.291935][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.611475][ T5882] usb 5-1: USB disconnect, device number 11 [ 455.665679][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.665693][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.665717][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.868187][ T1235] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 456.020656][ T1235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 456.021326][ T1235] usb 2-1: not running at top speed; connect to a high speed hub [ 456.023747][ T1235] usb 2-1: config 6 has an invalid interface number: 71 but max is 2 [ 456.023770][ T1235] usb 2-1: config 6 has an invalid interface number: 162 but max is 2 [ 456.023787][ T1235] usb 2-1: config 6 has an invalid interface number: 190 but max is 2 [ 456.023805][ T1235] usb 2-1: config 6 has no interface number 0 [ 456.023820][ T1235] usb 2-1: config 6 has no interface number 1 [ 456.023834][ T1235] usb 2-1: config 6 has no interface number 2 [ 456.023896][ T1235] usb 2-1: config 6 interface 71 altsetting 86 has a duplicate endpoint with address 0x4, skipping [ 456.023942][ T1235] usb 2-1: config 6 interface 190 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 456.023963][ T1235] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xE has an invalid bInterval 178, changing to 4 [ 456.023985][ T1235] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 456.024009][ T1235] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 456.024032][ T1235] usb 2-1: config 6 interface 190 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 456.024054][ T1235] usb 2-1: config 6 interface 71 has no altsetting 0 [ 456.024070][ T1235] usb 2-1: config 6 interface 162 has no altsetting 0 [ 456.024086][ T1235] usb 2-1: config 6 interface 190 has no altsetting 0 [ 456.027740][ T1235] usb 2-1: New USB device found, idVendor=0a5c, idProduct=bd1e, bcdDevice=df.15 [ 456.027764][ T1235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.027783][ T1235] usb 2-1: Product: syz [ 456.027796][ T1235] usb 2-1: Manufacturer: syz [ 456.027808][ T1235] usb 2-1: SerialNumber: syz [ 456.223646][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.256059][ T9522] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.496453][ T9207] hsr_slave_0: entered promiscuous mode [ 456.499362][ T9207] hsr_slave_1: entered promiscuous mode [ 456.504724][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 456.520150][ T9207] Cannot create hsr debugfs directory [ 456.520885][ T9521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.234343][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.235520][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.446412][ T9144] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 457.564151][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.709647][ T9144] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 457.900749][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.070127][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 458.276173][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.383325][ T1235] usbhid 2-1:6.190: couldn't find an input interrupt endpoint [ 458.422504][ T1235] usb 2-1: USB disconnect, device number 7 [ 458.754390][ T9144] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 458.926909][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.728251][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.782263][ T5464] 8021q: adding VLAN 0 to HW filter on device eth17 [ 459.811106][ T9144] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 459.910985][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.323423][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.748438][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.899208][ T5813] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 461.791163][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.234359][ T5813] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 462.235179][ T5813] Bluetooth: hci1: Injecting HCI hardware error event [ 462.245983][ T5119] Bluetooth: hci1: hardware error 0x00 [ 462.829440][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.975981][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.071141][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.114712][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.114896][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.438326][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.816512][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.847087][ T9625] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 463.875246][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.891225][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.891484][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.441318][ T5119] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 464.908338][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.948907][ T5464] 8021q: adding VLAN 0 to HW filter on device eth18 [ 465.048199][ T6089] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 465.061454][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 465.148229][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 465.198143][ T6089] usb 4-1: Using ep0 maxpacket: 8 [ 465.207097][ T6089] usb 4-1: config 7 has an invalid interface number: 151 but max is 0 [ 465.207120][ T6089] usb 4-1: config 7 has no interface number 0 [ 465.207147][ T6089] usb 4-1: config 7 interface 151 has no altsetting 0 [ 465.234113][ T6089] usb 4-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=90.5e [ 465.234139][ T6089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.234159][ T6089] usb 4-1: Product: syz [ 465.234172][ T6089] usb 4-1: Manufacturer: syz [ 465.234184][ T6089] usb 4-1: SerialNumber: syz [ 465.349332][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 465.349843][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 465.351508][ T9] usb 5-1: config 1 has an invalid interface number: 28 but max is 0 [ 465.351521][ T9] usb 5-1: config 1 has no interface number 0 [ 465.351554][ T9] usb 5-1: config 1 interface 28 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 465.351575][ T9] usb 5-1: config 1 interface 28 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 465.351600][ T9] usb 5-1: config 1 interface 28 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 465.351624][ T9] usb 5-1: config 1 interface 28 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 465.351649][ T9] usb 5-1: config 1 interface 28 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.351663][ T9] usb 5-1: config 1 interface 28 has no altsetting 0 [ 465.353646][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=1a.5e [ 465.353671][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.353689][ T9] usb 5-1: Product: syz [ 465.353697][ T9] usb 5-1: Manufacturer: syz [ 465.353704][ T9] usb 5-1: SerialNumber: syz [ 465.379687][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 465.451069][ T9646] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 465.451410][ T9646] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 465.605455][ T6089] usb 4-1: USB disconnect, device number 13 [ 465.693783][ T9] etas_es58x 5-1:1.28: Starting syz syz (Serial Number syz) [ 465.722049][ T5882] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 465.722076][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.722094][ T5882] usb 2-1: Product: syz [ 465.722107][ T5882] usb 2-1: Manufacturer: syz [ 465.722121][ T5882] usb 2-1: SerialNumber: syz [ 465.777829][ T9] usb 5-1: USB disconnect, device number 12 [ 465.948620][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.078351][ T4495] bridge_slave_1: left allmulticast mode [ 466.078367][ T4495] bridge_slave_1: left promiscuous mode [ 466.079583][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.160062][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 466.163507][ T4495] bridge_slave_0: left allmulticast mode [ 466.163528][ T4495] bridge_slave_0: left promiscuous mode [ 466.163713][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.202865][ T9650] binder: 9649:9650 ioctl c0046209 0 returned -22 [ 466.527854][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 466.527911][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 466.534164][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.563987][ T5882] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 467.385749][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.421917][ T5882] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 467.485418][ T5882] usb 2-1: USB disconnect, device number 8 [ 467.702415][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.922155][ T5789] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 468.070633][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.152501][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.366243][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.377073][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.428922][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.528149][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 468.530598][ T5789] usb 5-1: config 9 has an invalid interface number: 133 but max is 1 [ 468.530620][ T5789] usb 5-1: config 9 has an invalid interface number: 245 but max is 1 [ 468.530638][ T5789] usb 5-1: config 9 has no interface number 0 [ 468.530654][ T5789] usb 5-1: config 9 has no interface number 1 [ 468.530691][ T5789] usb 5-1: config 9 interface 133 has no altsetting 0 [ 468.530708][ T5789] usb 5-1: config 9 interface 245 has no altsetting 0 [ 468.548802][ T5789] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d [ 468.548827][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.548845][ T5789] usb 5-1: Product: syz [ 468.548858][ T5789] usb 5-1: Manufacturer: syz [ 468.548871][ T5789] usb 5-1: SerialNumber: syz [ 468.845975][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.089032][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.092680][ T5789] videodev: could not get a free minor [ 469.092687][ T5789] dsbr100 5-1:9.245: couldn't register video device [ 469.092821][ T5789] dsbr100 5-1:9.245: probe with driver dsbr100 failed with error -23 [ 469.095854][ T5789] usb 5-1: USB disconnect, device number 13 [ 469.808155][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.855770][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.893327][ T4495] bond0 (unregistering): Released all slaves [ 470.617699][ T9698] IPv6: NLM_F_REPLACE set, but no existing node found! [ 470.699354][ T4495] hsr_slave_0: left promiscuous mode [ 470.740359][ T4495] hsr_slave_1: left promiscuous mode [ 470.741254][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.748448][ T5813] Bluetooth: hci2: command tx timeout [ 470.791833][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.908529][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.954854][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.466317][ T9727] IPv6: NLM_F_REPLACE set, but no existing node found! [ 472.772548][ T5813] Bluetooth: hci4: Invalid handle: 0x2a2c > 0x0eff [ 472.828392][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.151836][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.195737][ T5119] Bluetooth: hci2: command tx timeout [ 473.281255][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 473.433206][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.490333][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 475.076364][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.156196][ T9747] bond2 (unregistering): Released all slaves [ 475.318856][ T5119] Bluetooth: hci2: command tx timeout [ 476.116663][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.148172][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.836473][ T5882] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 477.010485][ T5882] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 477.010511][ T5882] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 477.016725][ T5882] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 477.016752][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.016771][ T5882] usb 4-1: Product: syz [ 477.016784][ T5882] usb 4-1: Manufacturer: syz [ 477.016797][ T5882] usb 4-1: SerialNumber: syz [ 477.102348][ T5882] usb 4-1: config 0 descriptor?? [ 477.122942][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 477.149863][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.394442][ T5119] Bluetooth: hci2: command tx timeout [ 477.571258][ T5882] gspca_sunplus: reg_r err -71 [ 477.571350][ T5882] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 477.752738][ T5882] usb 4-1: USB disconnect, device number 14 [ 478.003048][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 478.233136][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.745709][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.797373][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.807069][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.885071][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.887751][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.031602][ T37] audit: type=1326 audit(1776447371.961:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 479.036804][ T37] audit: type=1326 audit(1776447371.961:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 479.099698][ T37] audit: type=1326 audit(1776447372.011:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 479.099746][ T37] audit: type=1326 audit(1776447372.011:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 479.099786][ T37] audit: type=1326 audit(1776447372.011:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9801 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 479.238679][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.309364][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.022438][ T5464] 8021q: adding VLAN 0 to HW filter on device eth19 [ 480.024208][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.024492][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.025998][ T9666] bridge_slave_0: entered allmulticast mode [ 480.033846][ T9666] bridge_slave_0: entered promiscuous mode [ 480.348504][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.908309][ T5119] Bluetooth: hci3: command tx timeout [ 480.921023][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.921153][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.921351][ T9666] bridge_slave_1: entered allmulticast mode [ 480.942162][ T9666] bridge_slave_1: entered promiscuous mode [ 481.388898][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.655589][ T9846] netlink: 76 bytes leftover after parsing attributes in process `syz.4.993'. [ 481.655611][ T9846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 481.655625][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 481.733562][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.803640][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.437096][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.441564][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.988260][ T5119] Bluetooth: hci3: command tx timeout [ 482.988481][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.468752][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.790689][ T9666] team0: Port device team_slave_0 added [ 483.825222][ T9666] team0: Port device team_slave_1 added [ 483.928718][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.928733][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.928757][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.933379][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.933392][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.933416][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.384556][ T9893] netlink: zone id is out of range [ 484.384568][ T9893] netlink: zone id is out of range [ 484.384576][ T9893] netlink: zone id is out of range [ 484.384582][ T9893] netlink: zone id is out of range [ 484.384592][ T9893] netlink: zone id is out of range [ 484.384616][ T9893] netlink: zone id is out of range [ 484.662273][ T9666] hsr_slave_0: entered promiscuous mode [ 484.665262][ T9666] hsr_slave_1: entered promiscuous mode [ 484.669705][ T9666] debugfs: 'hsr0' already exists in 'hsr' [ 484.670106][ T9666] Cannot create hsr debugfs directory [ 485.068299][ T5119] Bluetooth: hci3: command tx timeout [ 485.183344][ T9901] dummy0: entered promiscuous mode [ 485.183369][ T9901] dummy0: entered allmulticast mode [ 485.444723][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 487.148178][ T5119] Bluetooth: hci3: command tx timeout [ 487.186269][ T4495] bridge_slave_1: left allmulticast mode [ 487.186295][ T4495] bridge_slave_1: left promiscuous mode [ 487.186533][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.484808][ T4495] bridge_slave_0: left allmulticast mode [ 487.484827][ T4495] bridge_slave_0: left promiscuous mode [ 487.485007][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.347246][ T5789] net_ratelimit: 44 callbacks suppressed [ 488.347263][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.656017][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.458264][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.871881][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.928745][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.950876][ T4495] bond0 (unregistering): Released all slaves [ 490.508693][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.582874][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 490.834010][ T37] audit: type=1326 audit(1776447383.761:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 490.835798][ T37] audit: type=1326 audit(1776447383.761:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 490.836892][ T37] audit: type=1326 audit(1776447383.761:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 490.837160][ T37] audit: type=1326 audit(1776447383.761:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 490.837423][ T37] audit: type=1326 audit(1776447383.761:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10004 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 490.978161][ T5789] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 491.078322][ T4495] hsr_slave_0: left promiscuous mode [ 491.118567][ T4495] hsr_slave_1: left promiscuous mode [ 491.119565][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.144545][ T5789] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 491.144571][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.165311][ T5789] usb 2-1: config 0 descriptor?? [ 491.173526][ T5789] cp210x 2-1:0.0: cp210x converter detected [ 491.184883][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.385119][ T5789] usb 2-1: cp210x converter now attached to ttyUSB0 [ 491.548698][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.583523][ T5789] usb 2-1: USB disconnect, device number 9 [ 491.637753][ T5789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.649127][ T5789] cp210x 2-1:0.0: device disconnected [ 491.708783][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.799444][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 491.839021][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 492.208365][T10016] Illegal XDP return value 4294967274 on prog (id 95) dev N/A, expect packet loss! [ 492.603728][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.627896][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.937591][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.937681][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.937834][ T9792] bridge_slave_0: entered allmulticast mode [ 492.941844][ T9792] bridge_slave_0: entered promiscuous mode [ 493.117520][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.117795][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.118010][ T9792] bridge_slave_1: entered allmulticast mode [ 493.141920][ T9792] bridge_slave_1: entered promiscuous mode [ 494.135663][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.520305][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.851146][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.013104][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.098527][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.431609][ T9792] team0: Port device team_slave_0 added [ 497.480493][ T9792] team0: Port device team_slave_1 added [ 497.824435][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.824452][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.824478][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.831115][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.831129][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.831154][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.878574][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.932772][ T9792] hsr_slave_0: entered promiscuous mode [ 497.937176][ T9792] hsr_slave_1: entered promiscuous mode [ 497.940237][ T9792] debugfs: 'hsr0' already exists in 'hsr' [ 497.940261][ T9792] Cannot create hsr debugfs directory [ 498.032944][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.181095][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.352413][T10096] comedi comedi0: Minor 48 is invalid! [ 499.567941][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1094'. [ 499.567967][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 499.567981][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 499.756177][ T4495] bridge_slave_1: left allmulticast mode [ 499.756204][ T4495] bridge_slave_1: left promiscuous mode [ 499.766213][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.194213][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.610686][ T4495] bridge_slave_0: left allmulticast mode [ 500.787757][ T4495] bridge_slave_0: left promiscuous mode [ 500.788000][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.004928][T10128] ./bus: Can't lookup blockdev [ 501.028453][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.229218][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.890965][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.521610][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.538166][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.630195][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.690852][ T4495] bond0 (unregistering): Released all slaves [ 502.737590][T10127] warning: `syz.4.1101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 502.834927][ T5464] 8021q: adding VLAN 0 to HW filter on device eth20 [ 503.551122][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.573094][T10164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1112'. [ 503.573127][T10164] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1112'. [ 503.728313][ T4495] hsr_slave_0: left promiscuous mode [ 503.769683][ T4495] hsr_slave_1: left promiscuous mode [ 503.770535][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.807132][T10182] binder: 10181:10182 ioctl c018620c 200000000900 returned -1 [ 503.816707][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.108622][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.409501][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 504.588940][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.714736][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 506.167640][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.273459][ T9666] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 506.526995][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 506.534250][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.535056][ T9666] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 506.686612][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.717512][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.783023][ T9666] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 506.826328][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.831006][ T9666] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 506.921551][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.167886][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.228723][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.207922][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.549822][ T9792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 512.558183][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.558554][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.581601][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 512.664919][ T9792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.665042][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 512.686519][ T9792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 512.730542][ T31] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 512.732413][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.732464][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.732490][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.734584][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.734641][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.734666][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.737000][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.737048][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.737073][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.765653][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.765701][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.765727][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.819788][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.819839][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.819865][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.833653][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.833702][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.833727][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.844777][ T9792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.847160][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.847210][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.847235][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.865491][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.865540][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.865566][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 512.893668][ T9792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 512.966606][ T31] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 512.966632][ T31] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 512.966651][ T31] usb 2-1: Product: syz [ 512.966665][ T31] usb 2-1: Manufacturer: syz [ 512.966678][ T31] usb 2-1: SerialNumber: syz [ 513.011479][ T31] usb 2-1: config 0 descriptor?? [ 513.049279][ T9792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.066830][ T9792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 513.078605][ T31] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 513.136796][ T9792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.228876][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.307073][ T5889] usb 2-1: USB disconnect, device number 10 [ 513.331462][ T5889] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 513.457675][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 513.457703][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 513.457718][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1155'. [ 513.741943][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.921989][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.983056][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.983278][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.039002][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.039129][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.076800][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.272206][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.309996][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.412350][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.412424][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.459441][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.459573][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.926196][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'. [ 514.926223][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1166'. [ 515.308557][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.434445][ T37] audit: type=1326 audit(1776447408.361:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.434477][ T37] audit: type=1326 audit(1776447408.361:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.434499][ T37] audit: type=1326 audit(1776447408.361:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459467][ T37] audit: type=1326 audit(1776447408.391:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459513][ T37] audit: type=1326 audit(1776447408.391:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459552][ T37] audit: type=1326 audit(1776447408.391:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459590][ T37] audit: type=1326 audit(1776447408.391:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459627][ T37] audit: type=1326 audit(1776447408.391:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.459665][ T37] audit: type=1326 audit(1776447408.391:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.1.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 515.628900][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.014601][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.160647][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.349735][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.047378][T10408] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 517.398533][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.481813][ T9666] veth0_vlan: entered promiscuous mode [ 517.561859][T10416] vxfs: WRONG superblock magic 00000000 at 1 [ 517.562348][T10416] vxfs: WRONG superblock magic 00000000 at 8 [ 517.562367][T10416] vxfs: can't find superblock. [ 517.563404][ T9666] veth1_vlan: entered promiscuous mode [ 517.796589][ T9666] veth0_macvtap: entered promiscuous mode [ 517.821996][ T9666] veth1_macvtap: entered promiscuous mode [ 517.824166][ T9792] veth0_vlan: entered promiscuous mode [ 517.951263][ T9792] veth1_vlan: entered promiscuous mode [ 518.025071][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.094494][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.154640][ T1146] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.170622][ T1146] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.174594][ T1146] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.190654][ T1146] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.240615][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1191'. [ 518.240942][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 518.308952][ T9792] veth0_macvtap: entered promiscuous mode [ 518.429572][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.490649][ T9792] veth1_macvtap: entered promiscuous mode [ 518.605559][T10448] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 518.605709][T10448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 518.605763][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.605788][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.606225][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.606250][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.606636][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.606662][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.607068][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.607090][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1196'. [ 518.670788][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.893984][T10450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.004271][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.040582][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.445538][ T7190] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.469105][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.501624][ T7190] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.503075][ T7190] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.505779][ T7190] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.630067][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.630085][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.705335][T10467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.860021][T10471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.249341][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.249361][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.519458][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.920381][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.920401][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.038188][ T36] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 521.188215][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 521.191465][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.191501][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.191537][ T36] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 521.191561][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.237260][ T7190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.237277][ T7190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.246670][ T36] usb 4-1: config 0 descriptor?? [ 521.257195][ T36] hub 4-1:0.0: USB hub found [ 521.551773][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.624167][ T36] hub 4-1:0.0: 1 port detected [ 522.914491][ T31] net_ratelimit: 2 callbacks suppressed [ 522.914519][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.139465][ T5789] hub 4-1:0.0: activate --> -90 [ 523.593148][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.596171][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.436441][ T5789] usb 4-1-port1: cannot disable (err = -32) [ 524.729924][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.761432][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.784761][T10548] tmpfs: Bad value for 'mpol' [ 524.878454][T10273] usb 4-1: USB disconnect, device number 15 [ 524.924125][T10551] netlink: 'syz.8.1230': attribute type 1 has an invalid length. [ 524.924157][T10551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.217904][T10563] vivid-007: disconnect [ 525.226926][T10562] vivid-007: reconnect [ 525.549762][T10579] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.816668][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.116116][T10603] tmpfs: Bad value for 'mpol' [ 526.568511][T10589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 526.806984][T10633] openvswitch: netlink: Multiple metadata blocks provided [ 526.828481][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.803462][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 528.185672][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.268315][ T1235] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 528.278172][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.570482][ T1235] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 528.570510][ T1235] usb 10-1: config 0 has no interface number 0 [ 528.570553][ T1235] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 528.570578][ T1235] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.574978][ T1235] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 528.575005][ T1235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.575024][ T1235] usb 10-1: Product: syz [ 528.575038][ T1235] usb 10-1: Manufacturer: syz [ 528.575052][ T1235] usb 10-1: SerialNumber: syz [ 528.727225][ T1235] usb 10-1: config 0 descriptor?? [ 528.748489][T10645] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 528.787625][ T1235] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 528.876163][ T1235] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 528.888178][T10507] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 529.048274][T10507] usb 5-1: Using ep0 maxpacket: 16 [ 529.128605][T10507] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 529.128633][T10507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.128708][T10507] usb 5-1: Product: syz [ 529.128723][T10507] usb 5-1: Manufacturer: syz [ 529.128737][T10507] usb 5-1: SerialNumber: syz [ 529.774676][T10507] usb 5-1: config 0 descriptor?? [ 529.877692][T10507] gspca_main: spca508-2.14.0 probing 041e:4018 [ 529.923315][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.992023][T10659] usb 10-1: USB disconnect, device number 2 [ 529.996596][ T37] audit: type=1326 audit(1776447422.921:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 529.996984][ T37] audit: type=1326 audit(1776447422.921:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 529.998145][ T37] audit: type=1326 audit(1776447422.921:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 529.998198][ T37] audit: type=1326 audit(1776447422.921:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 529.998236][ T37] audit: type=1326 audit(1776447422.921:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e36cc819 code=0x7ffc0000 [ 530.034860][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.035018][T10507] gspca_spca508: reg_read err -32 [ 530.035289][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.042298][T10507] gspca_spca508: reg_read err -32 [ 530.042575][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.043845][T10507] gspca_spca508: reg_read err -32 [ 530.052320][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.053861][T10507] gspca_spca508: reg_read err -32 [ 530.054131][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.054888][T10507] gspca_spca508: reg_read err -32 [ 530.055169][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 530.055296][T10507] gspca_spca508: reg write: error -32 [ 530.055372][T10507] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 530.222551][T10688] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 530.222570][T10688] netlink: 'syz.1.1290': attribute type 17 has an invalid length. [ 530.292375][T10659] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 530.293189][T10659] cyberjack 10-1:0.69: device disconnected [ 530.295397][T10507] usb 5-1: USB disconnect, device number 14 [ 530.710353][T10688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.749964][T10701] __nla_validate_parse: 32 callbacks suppressed [ 530.749980][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 530.750028][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 530.874856][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 530.874911][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 530.989110][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.308662][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.347918][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 531.347972][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1293'. [ 532.040622][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.552699][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.068444][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.293393][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1312'. [ 533.473976][T10773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.109361][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.358726][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.148557][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.685762][T10834] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 536.288331][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.568368][T10507] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 536.905454][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 536.954182][T10507] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.954213][T10507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.954239][T10507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 537.371311][T10507] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 537.371340][T10507] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.371358][T10507] usb 9-1: Product: syz [ 537.371372][T10507] usb 9-1: Manufacturer: syz [ 537.371386][T10507] usb 9-1: SerialNumber: syz [ 537.473950][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.505187][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.505704][T10507] usb 9-1: config 0 descriptor?? [ 537.762631][T10507] powermate: unknown product id 0240 [ 537.762646][T10507] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 537.762884][T10507] powermate 9-1:0.0: probe with driver powermate failed with error -5 [ 537.833761][T10507] usb 9-1: USB disconnect, device number 2 [ 538.655863][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.002499][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1359'. [ 539.002529][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1359'. [ 539.648198][ T6089] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 540.175446][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.331527][ T6089] usb 9-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 540.331580][ T6089] usb 9-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.331607][ T6089] usb 9-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 540.333823][ T6089] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.333849][ T6089] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 540.333867][ T6089] usb 9-1: SerialNumber: syz [ 540.709728][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.186564][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 541.389009][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.531421][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.554408][ T6089] rndis_host 9-1:253.0: RNDIS init failed, -71 [ 541.554686][ T6089] rndis_host 9-1:253.0: probe with driver rndis_host failed with error -71 [ 541.601638][ T6089] usb 9-1: USB disconnect, device number 3 [ 541.715128][ T5882] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 541.715156][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.715174][ T5882] usb 2-1: Product: syz [ 541.715188][ T5882] usb 2-1: Manufacturer: syz [ 541.715201][ T5882] usb 2-1: SerialNumber: syz [ 541.732300][ T5882] usb 2-1: config 0 descriptor?? [ 541.766098][ T5882] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 011 [ 542.200264][ T5882] (null): failure reading functionality [ 542.244338][ T5882] i2c i2c-1: failure reading functionality [ 542.333541][ T5882] i2c i2c-1: connected i2c-tiny-usb device [ 542.358551][ T5882] usb 2-1: USB disconnect, device number 11 [ 543.191175][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.789587][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.391031][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.596440][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.835779][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.849614][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1391'. [ 547.926677][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.992889][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.922622][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.028407][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.737717][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.738910][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.857116][T11070] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 551.869072][T11070] overlayfs: overlapping lowerdir path [ 552.311781][T11084] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 552.749737][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.998455][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.035733][T11108] binder: BC_ATTEMPT_ACQUIRE not supported [ 553.035746][T11108] binder: 11107:11108 ioctl c0306201 200000000480 returned -22 [ 554.251743][T11119] xfrm1: entered allmulticast mode [ 554.425873][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.586421][T11125] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 554.586440][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 554.586634][T11125] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 554.794183][T11130] netdevsim netdevsim9: Firmware load for './file0/../file0' refused, path contains '..' component [ 555.063581][T11140] ipip0: entered promiscuous mode [ 555.063606][T11140] ipip0: entered allmulticast mode [ 556.038469][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.241092][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.368314][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.439413][T11164] netlink: 'syz.8.1455': attribute type 11 has an invalid length. [ 557.628608][T10659] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 558.428976][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.573420][T10659] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.592008][T10659] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 558.592036][T10659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 558.592055][T10659] usb 4-1: Product: syz [ 558.592069][T10659] usb 4-1: Manufacturer: syz [ 558.592083][T10659] usb 4-1: SerialNumber: syz [ 558.917994][T11189] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 558.918035][T11189] CIFS mount error: No usable UNC path provided in device string! [ 558.918035][T11189] [ 558.918890][T11189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 559.008609][T10659] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 559.028633][T11191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1467'. [ 559.068401][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.119810][T10659] usb 4-1: USB disconnect, device number 16 [ 559.263796][T10659] usblp0: removed [ 560.012647][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.069625][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.376987][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.483309][T11227] Smack: duplicate mount options [ 561.789980][T11240] [U]  [ 561.790003][T11240] [U] + [ 561.790021][T11240] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 561.790069][T11240] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 561.790095][T11240] [U] Zph5Laӝ8H [ 561.790152][T11240] [U] V)*Gr [ 561.790171][T11240] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 561.790189][T11240] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 561.790200][T11240] [U] UXBH,~nmIM/a [ 561.790212][T11240] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 561.790221][T11240] [U] [ 561.790252][T11240] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 561.790279][T11240] [U] p~ [ 561.790300][T11240] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 561.790422][T11240] [U] _mֱ9KU""^s6rP [ 561.790489][T11240] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 561.790683][T11240] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 561.790705][T11240] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 561.790746][T11240] [U] I\xezW80ܚPfzqi^@O [ 561.790762][T11240] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 561.791036][T11240] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 561.791066][T11240] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 561.791077][T11240] [U] ;JO6P [ 561.807878][T11239] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 562.129738][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.164572][T11249] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1488'. [ 562.329384][T11256] netlink: 'syz.4.1492': attribute type 13 has an invalid length. [ 562.439956][T11256] gretap0: refused to change device tx_queue_len [ 562.440326][T11256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 562.518821][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.623457][T11263] dlm: non-version read from control device 36 [ 563.027570][T11282] trusted_key: encrypted_key: insufficient parameters specified [ 563.097551][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1504'. [ 563.224318][T11290] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 563.285919][T11292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.532522][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1510'. [ 563.548536][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.780363][T11313] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.1513'. [ 563.780393][T11313] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 564.447521][T11331] FAT-fs (nbd3): unable to read boot sector [ 565.148383][T10507] net_ratelimit: 1 callbacks suppressed [ 565.148400][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.154534][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.182831][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.206604][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.633158][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.734640][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.303708][T11406] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 567.997966][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.374964][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.432592][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.751992][T11427] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 568.751992][T11427] Please contact the netfilter-devel mailing list or update your nftables rules. [ 568.787972][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1566'. [ 568.787997][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1566'. [ 569.068479][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.077790][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 569.244498][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1577'. [ 569.799371][T11477] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 570.491247][T11510] ALSA: seq fatal error: cannot create timer (-22) [ 570.579049][T10273] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 570.708486][T10507] net_ratelimit: 2 callbacks suppressed [ 570.708503][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.778166][T10273] usb 10-1: Using ep0 maxpacket: 32 [ 570.780470][T10273] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.780492][T10273] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.783690][T10273] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 570.783715][T10273] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.783734][T10273] usb 10-1: Product: syz [ 570.783748][T10273] usb 10-1: Manufacturer: syz [ 570.783761][T10273] usb 10-1: SerialNumber: syz [ 570.808500][T10273] usb 10-1: config 0 descriptor?? [ 571.001820][ T37] audit: type=1326 audit(1776447463.931:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.006752][ T37] audit: type=1326 audit(1776447463.931:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.009614][ T37] audit: type=1326 audit(1776447463.941:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.012262][ T37] audit: type=1326 audit(1776447463.941:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.012533][ T37] audit: type=1326 audit(1776447463.941:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.015080][ T37] audit: type=1326 audit(1776447463.941:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.020511][ T37] audit: type=1326 audit(1776447463.941:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11530 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 571.190576][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.221585][T10659] usb 10-1: USB disconnect, device number 3 [ 572.198906][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.268353][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.367721][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1625'. [ 572.385655][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 572.448209][T10659] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 572.600686][T10659] usb 10-1: config index 0 descriptor too short (expected 45, got 27) [ 572.600739][T10659] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 572.606353][T10659] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 572.606378][T10659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.606397][T10659] usb 10-1: Product: syz [ 572.606411][T10659] usb 10-1: Manufacturer: syz [ 572.606424][T10659] usb 10-1: SerialNumber: syz [ 572.645372][T10659] rtl8150 10-1:1.0: couldn't find required endpoints [ 572.645623][T10659] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 572.758194][T10273] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 572.944824][T10273] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 572.944850][T10273] usb 2-1: config 0 has no interface number 0 [ 572.944894][T10273] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 572.944916][T10273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.065681][T10659] usb 10-1: USB disconnect, device number 4 [ 573.093379][T10273] usb 2-1: config 0 descriptor?? [ 573.132889][T10273] usb 2-1: selecting invalid altsetting 1 [ 573.156902][T10273] dvb_ttusb_budget: ttusb_init_controller: error [ 573.156918][T10273] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 573.324878][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.436811][T10273] DVB: Unable to find symbol cx22700_attach() [ 573.605134][T10273] DVB: Unable to find symbol tda10046_attach() [ 573.605147][T10273] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 573.642888][T10273] usb 2-1: USB disconnect, device number 12 [ 574.045010][T11607] overlayfs: failed to clone upperpath [ 574.179035][T11611] ip6gre1: entered promiscuous mode [ 574.179059][T11611] ip6gre1: entered allmulticast mode [ 574.348575][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.488218][T10273] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 574.660647][T10273] usb 5-1: Using ep0 maxpacket: 32 [ 574.663305][T10273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.664605][T10273] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.664655][T10273] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 574.667567][T10273] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 574.667595][T10273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.667614][T10273] usb 5-1: Product: syz [ 574.667628][T10273] usb 5-1: Manufacturer: syz [ 574.667641][T10273] usb 5-1: SerialNumber: syz [ 574.993941][T10273] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.994108][T10273] usb 5-1: MIDIStreaming interface descriptor not found [ 575.228905][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.295882][T11652] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 575.295901][T11652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1673'. [ 575.295927][T11652] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1673'. [ 575.295940][T11652] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 575.295953][T11652] netlink: 634 bytes leftover after parsing attributes in process `syz.1.1673'. [ 575.486382][T11630] orangefs_mount: mount request failed with -4 [ 575.592330][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.578171][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 576.636847][T10273] usb 5-1: USB disconnect, device number 15 [ 576.685574][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.728175][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 576.737631][ T31] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 576.737657][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.737675][ T31] usb 2-1: Product: syz [ 576.737688][ T31] usb 2-1: Manufacturer: syz [ 576.737702][ T31] usb 2-1: SerialNumber: syz [ 576.817558][ T31] usb 2-1: config 0 descriptor?? [ 576.875511][ T5119] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 576.875551][ T5119] Bluetooth: hci3: Malformed LE Event: 0x02 [ 576.902854][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 576.921987][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 576.956265][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.957021][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 576.957065][ T31] usb 2-1: media controller created [ 577.007062][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.035622][T11659] cxusb: i2c rd: len=160 is too big! [ 577.035622][T11659] [ 577.998021][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.262623][ T31] usb 2-1: selecting invalid altsetting 7 [ 578.262644][ T31] cxusb: set interface failed [ 578.262656][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 578.278514][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.501290][T11710] trusted_key: encrypted_key: insufficient parameters specified [ 578.560383][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 578.560397][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 578.667345][T11713] netlink: 'syz.1.1700': attribute type 27 has an invalid length. [ 578.896203][ T8378] udevd[8378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.972025][ T31] rc_core: IR keymap rc-dvico-portable not found [ 578.972042][ T31] Registered IR keymap rc-empty [ 579.030456][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 579.036188][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 579.090047][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.143269][T10659] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 579.272214][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 579.272234][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 579.323123][T10659] usb 10-1: Using ep0 maxpacket: 32 [ 579.324788][T10659] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 579.324812][T10659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.399580][ T6089] dvb-usb: bulk message failed: -22 (1/0) [ 579.428987][ T31] usb 2-1: USB disconnect, device number 13 [ 579.444299][T11734] netlink: 'syz.8.1708': attribute type 1 has an invalid length. [ 579.444316][T11734] netlink: 'syz.8.1708': attribute type 2 has an invalid length. [ 579.574615][T10659] usb 10-1: config 0 descriptor?? [ 579.761528][T10659] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 580.081957][T10659] gspca_vc032x: reg_w err -71 [ 580.081975][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.081985][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.081993][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082001][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082010][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082018][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082026][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082034][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082043][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082051][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082060][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082067][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082075][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082083][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082091][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082099][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082106][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082114][T10659] gspca_vc032x: I2c Bus Busy Wait 00 [ 580.082129][T10659] gspca_vc032x: Unknown sensor... [ 580.082207][T10659] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 580.180609][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.271919][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.272883][T10659] usb 10-1: USB disconnect, device number 5 [ 580.686405][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 580.704741][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1713'. [ 580.789308][T11752] netem: change failed [ 580.911031][T10273] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 581.068275][T10273] usb 4-1: Using ep0 maxpacket: 8 [ 581.075286][T10273] usb 4-1: config 2 has an invalid interface number: 207 but max is 0 [ 581.075310][T10273] usb 4-1: config 2 has no interface number 0 [ 581.075340][T10273] usb 4-1: config 2 interface 207 has no altsetting 0 [ 581.114545][T10273] usb 4-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=92.c9 [ 581.114570][T10273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.114588][T10273] usb 4-1: Product: syz [ 581.114602][T10273] usb 4-1: Manufacturer: syz [ 581.114615][T10273] usb 4-1: SerialNumber: syz [ 581.228359][T10659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.308706][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.436929][T10273] ums-datafab 4-1:2.207: USB Mass Storage device detected [ 581.684297][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'. [ 581.728323][T10273] usb 4-1: USB disconnect, device number 17 [ 581.828154][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 581.982701][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.982728][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.984473][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.984499][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.984519][ T31] usb 5-1: SerialNumber: syz [ 582.732119][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.798991][ T31] usb 5-1: 0:2 : does not exist [ 582.861593][ T31] usb 5-1: USB disconnect, device number 16 [ 583.217354][T10492] udevd[10492]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.789856][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.979343][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1740'. [ 584.349618][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.533266][T11830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.830774][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.193057][T11843] netlink: 'syz.3.1754': attribute type 2 has an invalid length. [ 585.316237][T11845] netlink: 'syz.3.1755': attribute type 2 has an invalid length. [ 585.316256][T11845] netlink: 'syz.3.1755': attribute type 8 has an invalid length. [ 585.316269][T11845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1755'. [ 585.343581][T11847] program syz.9.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.378515][ T5789] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 585.528427][ T5789] usb 2-1: Using ep0 maxpacket: 32 [ 585.531219][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 585.531249][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58548, setting to 1024 [ 585.531290][ T5789] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.531312][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.572298][ T37] audit: type=1326 audit(1776447478.501:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.575564][ T37] audit: type=1326 audit(1776447478.501:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.577685][ T37] audit: type=1326 audit(1776447478.501:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.577964][ T37] audit: type=1326 audit(1776447478.501:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.583808][ T37] audit: type=1326 audit(1776447478.511:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.585462][ T37] audit: type=1326 audit(1776447478.511:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.585779][ T37] audit: type=1326 audit(1776447478.511:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.587933][ T37] audit: type=1326 audit(1776447478.511:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.590070][ T37] audit: type=1326 audit(1776447478.521:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.590115][ T37] audit: type=1326 audit(1776447478.521:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11852 comm="syz.4.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c227c819 code=0x7ffc0000 [ 585.845528][ T5789] usb 2-1: config 0 descriptor?? [ 585.846995][T11841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 585.864981][ T5789] hub 2-1:0.0: USB hub found [ 585.887380][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.958241][ T6089] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 586.065754][ T5789] hub 2-1:0.0: 1 port detected [ 586.113100][ T6089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 586.113130][ T6089] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.113226][ T6089] usb 4-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.00 [ 586.113248][ T6089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.196179][ T6089] usb 4-1: config 0 descriptor?? [ 586.270005][ T5789] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 586.270027][ T5789] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 586.312236][ T5789] usbhid 2-1:0.0: can't add hid device: -71 [ 586.312411][ T5789] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.361040][ T5789] usb 2-1: USB disconnect, device number 14 [ 586.556834][T11872] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1768'. [ 586.631600][ T6089] hid (null): invalid report_size -1611607528 [ 586.631651][ T6089] hid (null): invalid report_size 2034501046 [ 586.675990][ T6089] hid-generic 0003:1477:1007.0004: invalid report_size -1611607528 [ 586.676012][ T6089] hid-generic 0003:1477:1007.0004: item 0 4 1 7 parsing failed [ 586.695732][ T6089] hid-generic 0003:1477:1007.0004: probe with driver hid-generic failed with error -22 [ 586.851346][ T5882] usb 4-1: USB disconnect, device number 18 [ 586.931123][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.142445][T11894] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1778'. [ 587.142621][T11894] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1778'. [ 587.390923][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.413041][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 587.459698][T11906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1782'. [ 587.572429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.950522][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.355631][T11949] macsec1: entered promiscuous mode [ 588.355657][T11949] macsec1: entered allmulticast mode [ 588.419493][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 588.419515][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 588.601845][T11958] overlayfs: failed to clone upperpath [ 588.949039][T11975] tipc: Started in network mode [ 588.950063][T11975] tipc: Node identity ac14140f, cluster identity 4711 [ 588.992474][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.258207][ T5789] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 589.306637][T11975] tipc: Enabled bearer , priority 10 [ 589.426533][ T5789] usb 9-1: Using ep0 maxpacket: 32 [ 589.432180][ T5789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.432208][ T5789] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.432243][ T5789] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 589.432264][ T5789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.470945][ T5789] usb 9-1: config 0 descriptor?? [ 589.943108][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.101266][ T6095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.103222][T12009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.122584][ T5789] kone 0003:1E7D:2CED.0005: item fetching failed at offset 4/5 [ 590.123284][ T5789] kone 0003:1E7D:2CED.0005: parse failed [ 590.123350][ T5789] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22 [ 590.176368][ T31] tipc: Node number set to 2886997007 [ 590.203727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.282476][ T5789] usb 9-1: USB disconnect, device number 4 [ 590.396469][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 590.396504][T12015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.438547][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.243058][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.268840][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.421240][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.503862][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.487527][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.752443][T12130] ptrace attach of ""[12132] was attempted by "./syz-executor exec"[12130] [ 595.033688][T12143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1893'. [ 595.592610][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.789108][T12101] Bluetooth: hci2: command 0x0406 tx timeout [ 595.888867][T12175] 9p: Invalid gid '0x00000000ffffffff' [ 596.005637][T12173] mkiss: ax0: crc mode is auto. [ 596.429643][T12191] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 596.508275][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.669836][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.712386][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.937770][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.594115][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.948740][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.955951][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.139198][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 600.139216][ T37] audit: type=1326 audit(1776447493.051:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.139276][ T37] audit: type=1326 audit(1776447493.071:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.140817][ T37] audit: type=1326 audit(1776447493.071:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.140862][ T37] audit: type=1326 audit(1776447493.071:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.153694][ T37] audit: type=1326 audit(1776447493.081:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.153740][ T37] audit: type=1326 audit(1776447493.081:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.153779][ T37] audit: type=1326 audit(1776447493.081:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.153816][ T37] audit: type=1326 audit(1776447493.081:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.153854][ T37] audit: type=1326 audit(1776447493.081:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12272 comm="syz.9.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe726f6c819 code=0x7ffc0000 [ 600.478204][ T5882] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 600.644573][ T5882] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 600.644600][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.644619][ T5882] usb 2-1: config 0 has no interface number 0 [ 600.644660][ T5882] usb 2-1: config 0 interface 11 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.644687][ T5882] usb 2-1: config 0 interface 11 has no altsetting 0 [ 600.644719][ T5882] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 600.644741][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.658180][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 600.705683][ T5882] usb 2-1: config 0 descriptor?? [ 600.721166][ T5882] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 600.727604][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 600.727674][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 7 [ 600.759277][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 600.759327][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 600.759388][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 600.800564][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 600.800654][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 600.800739][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 600.816389][ T5882] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 600.829422][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 600.840036][ T5889] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.840065][ T5889] usb 5-1: config 0 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 600.840091][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 600.840120][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 600.840140][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.877797][ T5889] usb 5-1: config 0 descriptor?? [ 600.982357][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 600.982449][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 600.982584][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 600.982886][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 600.983383][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 600.983567][ T5882] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 601.034076][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.225907][ T5882] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 601.333274][ T5882] usb 2-1: USB disconnect, device number 15 [ 601.448208][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448245][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448272][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448298][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448323][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448349][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.448374][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.449577][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.449607][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.449633][ T5889] apple 0003:05AC:0254.0006: unknown main item tag 0x0 [ 601.644885][ T5882] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 601.772167][ T5889] apple 0003:05AC:0254.0006: hidraw0: USB HID v0.81 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 601.836399][ T5882] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 601.919165][ T5882] keyspan 2-1:0.11: device disconnected [ 602.108562][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.135205][ T5889] usb 5-1: USB disconnect, device number 17 [ 603.012797][T10273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.153818][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.364441][T12318] fido_id[12318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 604.787394][ T6089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.799499][T12333] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 604.799523][T12333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 604.849814][ T31] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 604.969703][T12333] vhci_hcd vhci_hcd.0: Device attached [ 605.053062][ T31] usb 10-1: config 0 has no interfaces? [ 605.053096][ T31] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 605.053117][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.078598][ T31] usb 10-1: config 0 descriptor?? [ 605.238244][T10659] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 605.355193][ T31] usb 10-1: USB disconnect, device number 6 [ 605.420768][T12345] ================================================================== [ 605.420782][T12345] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c50 [ 605.420817][T12345] Read of s[ 605.420817][T12345] Read of size 8 at addr ffff8880402b9920 by task vhci_tx/12345 [ 605.420832][T12345] [ 605.420851][T12345] CPU: 1 UID: 0 PID: 12345 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 605.420877][T12345] Tainted: [L]=SOFTLOCKUP [ 605.420884][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 605.420902][T12345] Call Trace: [ 605.420913][T12345] [ 605.420920][T12345] dump_stack_lvl+0xe8/0x150 [ 605.420950][T12345] print_address_description+0x55/0x1e0 [ 605.420976][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.421000][T12345] print_report+0x58/0x70 [ 605.421024][T12345] kasan_report+0x117/0x150 [ 605.421051][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.421081][T12345] vhci_tx_loop+0x3e9/0x1c50 [ 605.421114][T12345] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 605.421140][T12345] ? __set_cpus_allowed_ptr_locked+0x7bb/0x19c0 [ 605.421169][T12345] ? __pfx_vhci_tx_loop+0x10/0x10 [ 605.421197][T12345] ? __lock_acquire+0x6b5/0x2cf0 [ 605.421228][T12345] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.421253][T12345] ? lock_acquire+0x106/0x350 [ 605.421275][T12345] ? __pfx_autoremove_wake_function+0x10/0x10 [ 605.421295][T12345] ? __kthread_parkme+0x7a/0x1f0 [ 605.421318][T12345] kthread+0x388/0x470 [ 605.421336][T12345] ? __pfx_vhci_tx_loop+0x10/0x10 [ 605.421361][T12345] ? __pfx_kthread+0x10/0x10 [ 605.421382][T12345] ret_from_fork+0x514/0xb70 [ 605.421410][T12345] ? __pfx_ret_from_fork+0x10/0x10 [ 605.421438][T12345] ? __switch_to+0xc79/0x1410 [ 605.421464][T12345] ? __pfx_kthread+0x10/0x10 [ 605.421483][T12345] ret_from_fork_asm+0x1a/0x30 [ 605.421510][T12345] [ 605.421517][T12345] [ 605.421527][T12345] Allocated by task 10659: [ 605.421541][T12345] kasan_save_track+0x3e/0x80 [ 605.421562][T12345] __kasan_kmalloc+0x93/0xb0 [ 605.421584][T12345] __kmalloc_cache_noprof+0x3a6/0x690 [ 605.421608][T12345] vhci_urb_enqueue+0x5c9/0xe10 [ 605.421624][T12345] usb_hcd_submit_urb+0x323/0x1b50 [ 605.421649][T12345] usb_start_wait_urb+0x13f/0x5b0 [ 605.421668][T12345] usb_control_msg+0x234/0x3e0 [ 605.421684][T12345] hub_port_init+0xb1e/0x28c0 [ 605.421703][T12345] hub_event+0x25d3/0x4f60 [ 605.421721][T12345] process_scheduled_works+0xb5d/0x1860 [ 605.421745][T12345] worker_thread+0xa53/0xfc0 [ 605.421768][T12345] kthread+0x388/0x470 [ 605.421783][T12345] ret_from_fork+0x514/0xb70 [ 605.421807][T12345] ret_from_fork_asm+0x1a/0x30 [ 605.421824][T12345] [ 605.421828][T12345] Freed by task 12338: [ 605.421837][T12345] kasan_save_track+0x3e/0x80 [ 605.421855][T12345] kasan_save_free_info+0x46/0x50 [ 605.421873][T12345] __kasan_slab_free+0x5c/0x80 [ 605.421894][T12345] kfree+0x1c5/0x6c0 [ 605.421912][T12345] pickup_urb_and_free_priv+0x225/0x3f0 [ 605.421937][T12345] vhci_rx_loop+0x3c5/0xa00 [ 605.421961][T12345] kthread+0x388/0x470 [ 605.421977][T12345] ret_from_fork+0x514/0xb70 [ 605.422000][T12345] ret_from_fork_asm+0x1a/0x30 [ 605.422017][T12345] [ 605.422022][T12345] The buggy address belongs to the object at ffff8880402b9900 [ 605.422022][T12345] which belongs to the cache kmalloc-64 of size 64 [ 605.422038][T12345] The buggy address is located 32 bytes inside of [ 605.422038][T12345] freed 64-byte region [ffff8880402b9900, ffff8880402b9940) [ 605.422057][T12345] [ 605.422061][T12345] The buggy address belongs to the physical page: [ 605.422079][T12345] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x402b9 [ 605.422107][T12345] flags: 0x80000000000000(node=0|zone=1) [ 605.422125][T12345] page_type: f5(slab) [ 605.422142][T12345] raw: 0080000000000000 ffff88801a01e8c0 dead000000000100 dead000000000122 [ 605.422158][T12345] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 605.422168][T12345] page dumped because: kasan: bad access detected [ 605.422178][T12345] page_owner tracks the page as allocated [ 605.422185][T12345] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5464, tgid 5464 (dhcpcd), ts 51114036279, free_ts 49690652007 [ 605.422221][T12345] post_alloc_hook+0x231/0x280 [ 605.422245][T12345] get_page_from_freelist+0x27c8/0x2840 [ 605.422262][T12345] __alloc_frozen_pages_noprof+0x18d/0x380 [ 605.422282][T12345] allocate_slab+0x77/0x660 [ 605.422298][T12345] refill_objects+0x33c/0x3d0 [ 605.422314][T12345] __pcs_replace_empty_main+0x373/0x720 [ 605.422332][T12345] __kmalloc_noprof+0x530/0x7b0 [ 605.422354][T12345] tomoyo_commit_ok+0x29/0x1d0 [ 605.422378][T12345] tomoyo_update_domain+0x54a/0x880 [ 605.422398][T12345] tomoyo_write_file+0x3d1/0xc50 [ 605.422419][T12345] tomoyo_supervisor+0x1208/0x1570 [ 605.422434][T12345] tomoyo_path_permission+0x25a/0x380 [ 605.422455][T12345] tomoyo_check_open_permission+0x2b2/0x470 [ 605.422476][T12345] security_file_open+0xa9/0x240 [ 605.422499][T12345] do_dentry_open+0x4c0/0x13e0 [ 605.422516][T12345] vfs_open+0x3b/0x350 [ 605.422531][T12345] page last free pid 28 tgid 28 stack trace: [ 605.422542][T12345] __free_frozen_pages+0xfa6/0x10f0 [ 605.422565][T12345] rcu_cpu_kthread+0x99e/0x1470 [ 605.422583][T12345] smpboot_thread_fn+0x541/0xa50 [ 605.422600][T12345] kthread+0x388/0x470 [ 605.422616][T12345] ret_from_fork+0x514/0xb70 [ 605.422639][T12345] ret_from_fork_asm+0x1a/0x30 [ 605.422656][T12345] [ 605.422661][T12345] Memory state around the buggy address: [ 605.422670][T12345] ffff8880402b9800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 605.422683][T12345] ffff8880402b9880: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 605.422695][T12345] >ffff8880402b9900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 605.422704][T12345] ^ [ 605.422714][T12345] ffff8880402b9980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 605.422726][T12345] ffff8880402b9a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 605.422735][T12345] ================================================================== [ 605.446580][T12345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.446602][T12345] CPU: 1 UID: 0 PID: 12345 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 605.446629][T12345] Tainted: [L]=SOFTLOCKUP [ 605.446635][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 605.446647][T12345] Call Trace: [ 605.446654][T12345] [ 605.446661][T12345] vpanic+0x56c/0xa60 [ 605.446686][T12345] ? __pfx_vpanic+0x10/0x10 [ 605.446708][T12345] panic+0xc5/0xd0 [ 605.446724][T12345] ? __pfx_panic+0x10/0x10 [ 605.446746][T12345] ? preempt_schedule_thunk+0x16/0x30 [ 605.446771][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.446797][T12345] ? preempt_schedule_thunk+0x16/0x30 [ 605.446820][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.446845][T12345] check_panic_on_warn+0x89/0xb0 [ 605.446866][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.446890][T12345] end_report+0x73/0x170 [ 605.446916][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.446940][T12345] kasan_report+0x128/0x150 [ 605.446966][T12345] ? vhci_tx_loop+0x3e9/0x1c50 [ 605.446995][T12345] vhci_tx_loop+0x3e9/0x1c50 [ 605.447020][T12345] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 605.447048][T12345] ? __set_cpus_allowed_ptr_locked+0x7bb/0x19c0 [ 605.447083][T12345] ? __pfx_vhci_tx_loop+0x10/0x10 [ 605.447115][T12345] ? __lock_acquire+0x6b5/0x2cf0 [ 605.447146][T12345] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.447171][T12345] ? lock_acquire+0x106/0x350 [ 605.447194][T12345] ? __pfx_autoremove_wake_function+0x10/0x10 [ 605.447214][T12345] ? __kthread_parkme+0x7a/0x1f0 [ 605.447236][T12345] kthread+0x388/0x470 [ 605.447255][T12345] ? __pfx_vhci_tx_loop+0x10/0x10 [ 605.447279][T12345] ? __pfx_kthread+0x10/0x10 [ 605.447298][T12345] ret_from_fork+0x514/0xb70 [ 605.447325][T12345] ? __pfx_ret_from_fork+0x10/0x10 [ 605.447352][T12345] ? __switch_to+0xc79/0x1410 [ 605.447376][T12345] ? __pfx_kthread+0x10/0x10 [ 605.447396][T12345] ret_from_fork_asm+0x1a/0x30 [ 605.447421][T12345] [ 605.447756][T12345] Kernel Offset: disabled