last executing test programs: 5m50.899236374s ago: executing program 0 (id=1232): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}], 0x1, 0x0) 5m50.64964331s ago: executing program 0 (id=1235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) shutdown(r1, 0x1) 5m49.734681932s ago: executing program 0 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(0x0, 0x1) read$char_usb(0xffffffffffffffff, 0x0, 0x0) fsmount(r2, 0x0, 0x6) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) 5m47.265594763s ago: executing program 0 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) 5m47.121877646s ago: executing program 0 (id=1253): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f0001000000000000010000000000", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5m45.946686635s ago: executing program 0 (id=1259): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b, 0xf, "5b1b0201d5ab8d39670dddf454a210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m44.998109589s ago: executing program 32 (id=1259): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b, 0xf, "5b1b0201d5ab8d39670dddf454a210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.881727825s ago: executing program 3 (id=2252): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 1m39.67064744s ago: executing program 3 (id=2254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="4e813cbf", 0x4, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) shutdown(r0, 0x1) 1m38.700581124s ago: executing program 3 (id=2256): write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m38.491322609s ago: executing program 3 (id=2258): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m37.941722013s ago: executing program 3 (id=2262): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 1m35.118806382s ago: executing program 3 (id=2276): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fanotify_init(0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m34.759288211s ago: executing program 33 (id=2276): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fanotify_init(0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8.294725556s ago: executing program 4 (id=2540): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 7.518654686s ago: executing program 1 (id=2545): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) 6.301352066s ago: executing program 1 (id=2546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x6}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5", 0xd2}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf333", 0xa9}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac69c528df4de7e7bf50f40936336f6ab62d3b3e3", 0x35}, {&(0x7f0000001300)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924", 0x2e}, {&(0x7f0000001380)="19a8e41759f18c32758fc71f3c2d66a728219818f0ffe3e8601b4deb0e905eacc062d86a8cb2790444792b482646bd43f7d5b62bad22a5e981f01fafa9d5d5dd164970fe66bd83ef7c79a8cc8a7a2761acf1985d9318f84e8deddc763e737033da7dd91e7afbb686a0e8c2828747f37cc0aeca57c26f787cdb0023b2267521a6663e6aa1b317d646c4eb7e2f254bf8c04e1d4314fda26cf01f52bc5cc77b3850478fae6e0aea2ede6b343681bfe61884d63326b190c6043280147c7928a79c77e892d4c11058", 0xc6}], 0x6}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.043153746s ago: executing program 5 (id=2554): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) 4.90674421s ago: executing program 4 (id=2555): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000000080004004400000008001b00000000006d103dc056dc240e3ca6fc404808c2968ce57b770ddf170000b509150922f9ef09cbb58ff01fe42049b9aeb942a253be9c0fbac27933898c8c5807b4e8fd179a5c7a2b6d082a21637ba7b3d44bd23ca0d04b446084cb1d5e5e5e1b9e620302ea66319215e481cc6f4d09ad5833d301458e4ab268ae9a4bd361538c373d239307000000a09325987f758e8c54"], 0x30}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) socket(0x840000000002, 0x3, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x5602, &(0x7f0000000000)={0x0, "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"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) 3.411577567s ago: executing program 5 (id=2556): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 3.220960011s ago: executing program 4 (id=2557): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000841}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x13, 0x0, 0x26}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840) unshare(0x22020600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.990664437s ago: executing program 2 (id=2558): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f00000005c0), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 2.835086181s ago: executing program 4 (id=2559): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 2.737992403s ago: executing program 2 (id=2560): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 2.635597076s ago: executing program 2 (id=2561): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 2.634196836s ago: executing program 4 (id=2562): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.511687629s ago: executing program 4 (id=2563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.47932253s ago: executing program 2 (id=2564): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x43}, 0x28) 1.291597088s ago: executing program 2 (id=2565): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000000080004004400000008001b00000000006d103dc056dc240e3ca6fc404808c2968ce57b770ddf170000b509150922f9ef09cbb58ff01fe42049b9aeb942a253be9c0fbac27933898c8c5807b4e8fd179a5c7a2b6d082a21637ba7b3d44bd23ca0d04b446084cb1d5e5e5e1b9e620302ea66319215e481cc6f4d09ad5833d301458e4ab268ae9a4bd361538c373d239307000000a09325987f758e8c54"], 0x30}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) socket(0x840000000002, 0x3, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x5602, &(0x7f0000000000)={0x0, "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"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x11) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) 1.150643182s ago: executing program 1 (id=2566): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000040000000000000000500000095000000010000007100f4ff100000000654010000feffffff0000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @mcast2, 0x1}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x9, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0x8000000, 0x284e97}) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='force', 0x5) 987.059466ms ago: executing program 5 (id=2567): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000841}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x13, 0x0, 0x26}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x840) unshare(0x22020600) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 733.239383ms ago: executing program 1 (id=2568): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) readv(r0, &(0x7f00000005c0), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 422.7567ms ago: executing program 5 (id=2569): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 367.768582ms ago: executing program 1 (id=2570): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020}, 0x2020) pread64(r0, 0x0, 0x0, 0x200) 237.590665ms ago: executing program 5 (id=2571): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x0, 0x0) 73.359739ms ago: executing program 1 (id=2572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r4, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 28.89337ms ago: executing program 2 (id=2573): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x43}, 0x28) 0s ago: executing program 5 (id=2574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x6}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5", 0xd2}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf333", 0xa9}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac69c528df4de7e7bf50f40936336f6ab62d3b3e3", 0x35}, {&(0x7f0000001300)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924", 0x2e}, {&(0x7f0000001380)="19a8e41759f18c32758fc71f3c2d66a728219818f0ffe3e8601b4deb0e905eacc062d86a8cb2790444792b482646bd43f7d5b62bad22a5e981f01fafa9d5d5dd164970fe66bd83ef7c79a8cc8a7a2761acf1985d9318f84e8deddc763e737033da7dd91e7afbb686a0e8c2828747f37cc0aeca57c26f787cdb0023b2267521a6663e6aa1b317d646c4eb7e2f254bf8c04e1d4314fda26cf01f52bc5cc77b3850478fae6e0aea2ede6b343681bfe61884d63326b190c6043280147c7928a79c77e892d4c11058", 0xc6}], 0x6}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.324539][T11302] binder: 11299:11302 ioctl c0306201 200000000080 returned -14 [ 541.346015][T11302] binder: 11299:11302 ioctl c0306201 2000000003c0 returned -14 [ 541.518246][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1692'. [ 542.783036][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.820716][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.057240][T11329] loop2: detected capacity change from 0 to 512 [ 543.142748][T11329] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.151944][T11329] EXT4-fs (loop2): DAX unsupported by block device. [ 544.716510][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.006670][T11346] netlink: 'syz.4.1704': attribute type 2 has an invalid length. [ 545.041843][T11350] binder: 11348:11350 ioctl c0306201 200000000080 returned -14 [ 545.091440][T11352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1705'. [ 545.298971][T11350] binder: 11348:11350 ioctl c0306201 2000000003c0 returned -14 [ 545.753173][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.073547][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.337491][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1709'. [ 546.369811][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.394729][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.428558][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.438899][T11369] loop2: detected capacity change from 0 to 512 [ 546.445372][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.537816][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.571203][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.594336][T11369] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.619454][T11369] EXT4-fs (loop2): DAX unsupported by block device. [ 546.636099][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.019120][T11389] binder: 11388:11389 ioctl c0306201 200000000080 returned -14 [ 548.060929][T11389] binder: 11388:11389 ioctl c0306201 2000000003c0 returned -14 [ 548.198263][T11394] netlink: 'syz.1.1717': attribute type 2 has an invalid length. [ 548.945285][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1718'. [ 549.848657][T11403] net_ratelimit: 4 callbacks suppressed [ 549.848674][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.868382][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.877482][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.897218][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.934661][T11410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1722'. [ 549.950402][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.977792][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.011050][T11403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.044660][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.061501][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.165087][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.682950][T11416] binder: 11415:11416 ioctl c0306201 200000000080 returned -14 [ 550.812912][T11416] binder: 11415:11416 ioctl c0306201 2000000003c0 returned -14 [ 550.886715][T11423] loop1: detected capacity change from 0 to 512 [ 550.971571][T11425] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 551.004059][T11425] loop4: detected capacity change from 0 to 256 [ 551.154458][T11423] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.276546][T11423] EXT4-fs (loop1): DAX unsupported by block device. [ 551.983008][T11428] netlink: 'syz.2.1729': attribute type 2 has an invalid length. [ 553.294759][T11442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 553.991124][T11453] binder: 11452:11453 ioctl c0306201 200000000080 returned -14 [ 554.318744][T11453] binder: 11452:11453 ioctl c0306201 2000000003c0 returned -14 [ 554.352233][T11459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1736'. [ 554.614047][T11464] loop2: detected capacity change from 0 to 512 [ 554.654308][T11466] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 554.685852][T11466] loop3: detected capacity change from 0 to 256 [ 554.758037][T11464] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 554.946438][T11464] EXT4-fs (loop2): DAX unsupported by block device. [ 555.192820][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 555.572154][ T6782] net_ratelimit: 10 callbacks suppressed [ 555.572171][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.871911][T11477] netlink: 'syz.1.1742': attribute type 2 has an invalid length. [ 556.792057][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.805399][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.915567][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 557.460640][T11491] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 557.472714][T11491] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 557.809492][T11495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1746'. [ 558.255417][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.653227][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.682919][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.711007][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.725281][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.734989][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.744021][T11503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.977294][T11518] overlayfs: missing 'lowerdir' [ 559.173704][T11526] loop4: detected capacity change from 0 to 512 [ 559.193825][T11527] netlink: 'syz.1.1754': attribute type 2 has an invalid length. [ 559.224565][T11526] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 559.266645][T11526] EXT4-fs (loop4): DAX unsupported by block device. [ 560.582822][T11542] net_ratelimit: 17 callbacks suppressed [ 560.582840][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.583127][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.643212][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.643545][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.643759][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.643928][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.644060][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.644209][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.644377][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.644523][T11542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.271377][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1758'. [ 562.064913][T11575] netlink: 'syz.2.1765': attribute type 2 has an invalid length. [ 562.957969][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.967356][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.037367][T11599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'. [ 563.184118][T11604] loop1: detected capacity change from 0 to 512 [ 563.207070][T11604] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 563.228232][T11604] EXT4-fs (loop1): DAX unsupported by block device. [ 565.658238][T11627] netlink: 'syz.4.1779': attribute type 2 has an invalid length. [ 565.711280][T11630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1780'. [ 565.753887][ T42] net_ratelimit: 33 callbacks suppressed [ 565.753903][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.793119][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.842726][ T5830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 566.931742][T11647] loop1: detected capacity change from 0 to 512 [ 566.968629][T11647] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.991125][T11647] EXT4-fs (loop1): DAX unsupported by block device. [ 567.035889][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.062625][ T5830] usb 5-1: config 0 has no interfaces? [ 567.091346][ T5830] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 567.291350][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.302499][ T5830] usb 5-1: config 0 descriptor?? [ 567.360358][T11650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.371274][T11650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.394446][T11650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.473882][T11650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.616292][T11650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.491988][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.511341][T11654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.531769][T11654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.186817][T11660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1789'. [ 569.681771][ T42] usb 5-1: USB disconnect, device number 8 [ 569.830939][T11672] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 570.799690][ T5830] net_ratelimit: 9 callbacks suppressed [ 570.799708][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.915850][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 570.987280][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 571.827185][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.838670][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.055348][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 572.515619][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.526113][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.535177][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 572.544320][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.554666][ T42] usb 3-1: config 0 descriptor?? [ 572.566800][ T5830] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 572.818515][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.853034][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 572.866354][ T5830] usb 5-1: config 0 has no interfaces? [ 572.873318][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.894366][ T5830] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 572.903670][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.911720][ T5830] usb 5-1: Product: syz [ 572.916572][ T5830] usb 5-1: Manufacturer: syz [ 572.922125][ T5830] usb 5-1: SerialNumber: syz [ 572.934146][ T5830] r8152-cfgselector 5-1: config 0 descriptor?? [ 572.974724][T11714] netlink: 'syz.1.1808': attribute type 2 has an invalid length. [ 573.162265][ T5830] r8152-cfgselector 5-1: Unknown version 0x0000 [ 573.171861][ T5830] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 574.093167][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.121043][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 574.127022][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.130519][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 574.140583][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.169025][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.264126][T11727] ptrace attach of ""[11728] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11727] [ 574.928738][ T5830] usb 3-1: USB disconnect, device number 24 [ 575.919128][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.594093][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.786569][ T27] audit: type=1800 audit(1785322036.493:282): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1817" name="UDC" dev="configfs" ino=28631 res=0 errno=0 [ 576.792028][T11746] netlink: 'syz.1.1819': attribute type 2 has an invalid length. [ 577.637254][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 577.677878][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 578.923832][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.002982][ T5830] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 579.431624][T11789] netlink: 'syz.3.1830': attribute type 2 has an invalid length. [ 579.601865][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.662866][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.675777][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.676015][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.695878][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.695906][ T5830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.695946][ T5830] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 579.695972][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.711713][ T5830] usb 5-1: config 0 descriptor?? [ 580.713016][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.268872][ T6782] usb 5-1: USB disconnect, device number 10 [ 581.423679][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.558393][T11809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.596725][T11809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.620840][T11809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.649209][T11809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.682505][T11809] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 581.707252][T11809] file system registered [ 581.916734][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.949354][T11825] netlink: 'syz.3.1843': attribute type 2 has an invalid length. [ 582.055054][T11827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 582.072651][T11827] loop4: detected capacity change from 0 to 256 [ 582.914296][ T7253] blk_print_req_error: 104 callbacks suppressed [ 582.914313][ T7253] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.928793][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.954590][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.176282][T11834] binder: 11833:11834 ioctl 4018620d 0 returned -22 [ 583.188903][T11834] binder: 11833:11834 ioctl c0306201 200000000080 returned -14 [ 583.212178][T11834] binder: 11833:11834 ioctl c0306201 2000000003c0 returned -14 [ 583.282737][ T5804] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 584.170392][T11841] overlayfs: failed to clone lowerpath [ 584.220261][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.910013][T11856] netlink: 'syz.2.1855': attribute type 2 has an invalid length. [ 585.060883][T11859] overlayfs: failed to clone lowerpath [ 585.821874][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.903382][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.914064][ T5804] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 585.923286][ T5804] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 585.933286][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.948663][ T5804] usb 2-1: config 0 descriptor?? [ 585.993037][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.021260][ T42] usb 2-1: USB disconnect, device number 22 [ 586.151414][T11871] overlayfs: failed to clone lowerpath [ 586.538289][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 586.922765][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.424098][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.823791][T11440] Bluetooth: hci1: Malformed Event: 0x02 [ 589.003701][ T42] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 589.033277][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.194794][T11904] loop4: detected capacity change from 0 to 256 [ 589.235306][T11904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 589.398620][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.435296][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.483162][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.621390][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 589.721411][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.872283][ T42] usb 3-1: config 0 descriptor?? [ 590.210274][T11910] Driver unsupported XDP return value 0 on prog (id 169) dev N/A, expect packet loss! [ 590.373831][T11916] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 590.390694][T11916] loop1: detected capacity change from 0 to 256 [ 591.232835][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.241023][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.481441][T11931] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 591.518237][T11931] loop1: detected capacity change from 0 to 256 [ 592.262856][ T42] usb 3-1: USB disconnect, device number 25 [ 592.268162][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.314399][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.895650][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.914646][T11937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 594.162044][T11950] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 594.180191][T11950] loop4: detected capacity change from 0 to 256 [ 595.969037][ T7253] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.973550][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.002498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.089986][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1889'. [ 597.342661][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 597.357905][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.545934][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.570306][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.579864][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.599126][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.625628][ T9] usb 2-1: config 0 descriptor?? [ 598.371431][T11987] overlayfs: failed to clone lowerpath [ 598.403041][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.217441][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.316694][T11992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 599.433416][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.447710][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1901'. [ 599.484418][T11995] can0: slcan on ttyS3. [ 600.427264][ T42] usb 2-1: USB disconnect, device number 23 [ 600.511974][T11999] overlayfs: failed to clone lowerpath [ 600.518502][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.285953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.395392][T11995] can0 (unregistered): slcan off ttyS3. [ 601.593775][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.792370][T12017] overlayfs: failed to clone lowerpath [ 602.610032][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 602.633064][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.666212][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.739907][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1910'. [ 602.852822][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 602.866068][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.885818][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.900373][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 602.909997][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.922431][ T9] usb 5-1: config 0 descriptor?? [ 602.999296][T12034] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 603.031089][T12034] loop1: detected capacity change from 0 to 256 [ 603.764922][ T5977] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 604.086217][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 604.146270][T12048] can0: slcan on ttyS3. [ 604.342817][T12048] can0 (unregistered): slcan off ttyS3. [ 604.793145][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.408917][ T5804] usb 5-1: USB disconnect, device number 11 [ 606.312184][T12065] overlayfs: failed to clone lowerpath [ 606.349734][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.894918][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.903287][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 607.092719][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 607.208920][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 607.366931][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.566857][ T9] usb 3-1: Product: syz [ 607.628946][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.672955][ T9] usb 3-1: Manufacturer: syz [ 607.677854][ T9] usb 3-1: SerialNumber: syz [ 607.688004][ T9] usb 3-1: config 0 descriptor?? [ 607.774367][T12090] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 607.804772][T12090] loop1: detected capacity change from 0 to 256 [ 607.967518][T12083] xt_CT: No such helper "netbios-ns" [ 608.593073][ T9] usb 3-1: can't set config #0, error -71 [ 608.619155][ T9] usb 3-1: USB disconnect, device number 26 [ 608.633135][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.684063][T12092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1925'. [ 608.972790][ T7292] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 609.033020][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.052704][ T5804] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 609.164331][ T7292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.175499][ T7292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 609.184590][ T7292] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 609.194206][ T7292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.251105][T12117] overlayfs: failed to clone lowerpath [ 609.324205][ T7292] usb 5-1: config 0 descriptor?? [ 609.674732][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.015620][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 610.027378][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.037676][ T5804] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.046801][ T5804] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 610.056114][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.067194][ T5804] usb 2-1: config 0 descriptor?? [ 610.308671][T12132] fuse: Bad value for 'fd' [ 610.314583][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.411387][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.420341][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.428921][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.441589][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.450541][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.461526][T12136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.631393][T12141] overlayfs: failed to clone lowerpath [ 612.060118][ T7292] usb 2-1: USB disconnect, device number 24 [ 612.092394][ T5830] usb 5-1: USB disconnect, device number 12 [ 612.265185][T12167] overlayfs: missing 'workdir' [ 612.632129][T12176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 612.664897][T12176] loop2: detected capacity change from 0 to 256 [ 613.865077][ T42] net_ratelimit: 2 callbacks suppressed [ 613.865094][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.154589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.262815][ T42] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 614.312686][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 614.445106][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.455524][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.465748][ T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 614.475089][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.489958][ T42] usb 2-1: config 0 descriptor?? [ 614.492623][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 614.510264][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.519450][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 614.528607][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.539101][ T8] usb 3-1: config 0 descriptor?? [ 614.873641][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.960655][T11440] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 615.112946][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.919922][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.090564][T12215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 616.122051][T12215] loop4: detected capacity change from 0 to 256 [ 616.963835][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.026369][ T5830] usb 2-1: USB disconnect, device number 25 [ 617.028392][T12226] fuse: Bad value for 'fd' [ 617.117957][ T42] usb 3-1: USB disconnect, device number 27 [ 618.064663][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.259944][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.036044][T11440] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 619.052082][T11440] Bluetooth: hci2: Injecting HCI hardware error event [ 619.063669][ T5778] Bluetooth: hci2: hardware error 0x00 [ 619.139716][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.364678][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.568564][T12255] fuse: Bad value for 'fd' [ 619.743045][ T173] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 619.932847][ T5830] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 619.946262][ T173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.972685][ T173] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.981732][ T173] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 620.012700][ T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.027516][ T173] usb 5-1: config 0 descriptor?? [ 620.122802][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 620.144233][ T5830] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.172773][ T5830] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 620.202205][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.211448][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.239501][ T5830] usb 2-1: config 0 descriptor?? [ 621.192838][ T5778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 621.282990][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.410943][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.470003][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.500991][ T173] usb 5-1: USB disconnect, device number 13 [ 622.741827][ T7292] usb 2-1: USB disconnect, device number 26 [ 623.441106][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.753233][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.973218][T12305] binder: 12304:12305 ioctl c0306201 200000000080 returned -14 [ 623.999965][T12305] binder: 12304:12305 ioctl c0306201 2000000003c0 returned -14 [ 624.196955][ T5778] Bluetooth: Unexpected start frame (len 10) [ 624.396219][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.426189][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.483747][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.433033][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 625.512840][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.521012][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.582920][ T5830] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 625.625542][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 625.653278][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.678356][ T8] usb 5-1: config 0 descriptor?? [ 625.691448][ T8] cp210x 5-1:0.0: cp210x converter detected [ 625.812627][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 625.821040][ T5830] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 625.833190][ T5830] usb 2-1: config 0 has no interface number 0 [ 625.839497][ T5830] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.853222][ T5830] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 625.864457][ T5830] usb 2-1: config 0 interface 12 has no altsetting 0 [ 625.875087][ T5830] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 625.884210][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.892418][ T5830] usb 2-1: Product: syz [ 625.897415][ T5830] usb 2-1: Manufacturer: syz [ 625.902100][ T5830] usb 2-1: SerialNumber: syz [ 625.910940][ T5830] usb 2-1: config 0 descriptor?? [ 625.921421][ T5830] f81534 2-1:0.12: unsupported endpoint max packet size [ 626.100888][ T8] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 626.137818][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 626.148726][T12314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2002'. [ 626.319062][ T42] usb 5-1: USB disconnect, device number 14 [ 626.332360][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 626.357853][ T42] cp210x 5-1:0.0: device disconnected [ 626.553909][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.603164][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.120984][ T5778] Bluetooth: Unexpected start frame (len 10) [ 628.296145][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'. [ 628.632821][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.755285][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.158916][ T5830] usb 2-1: USB disconnect, device number 27 [ 629.939223][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.980649][T12383] binder: 12381:12383 ioctl c0306201 200000000080 returned -14 [ 629.991108][T12383] binder: 12381:12383 ioctl 4018620d 0 returned -22 [ 629.999260][T12383] binder: 12381:12383 ioctl c0306201 2000000003c0 returned -14 [ 630.233226][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 630.424952][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 630.434555][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.447906][ T8] usb 3-1: config 0 descriptor?? [ 630.465918][ T8] cp210x 3-1:0.0: cp210x converter detected [ 630.884972][ T8] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 630.922953][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 630.953035][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.081291][ T5778] Bluetooth: Unexpected start frame (len 10) [ 631.114561][ T8] usb 3-1: USB disconnect, device number 28 [ 631.155292][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 631.199136][ T8] cp210x 3-1:0.0: device disconnected [ 631.840095][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.170345][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.443225][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 633.195813][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.363472][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 633.372331][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.726602][T12434] binder: 12433:12434 ioctl c0306201 200000000080 returned -14 [ 633.748479][T12434] binder: 12433:12434 ioctl c0306201 0 returned -14 [ 634.233025][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.894956][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.201314][T12458] binder: 12457:12458 ioctl c0306201 200000000080 returned -14 [ 635.239930][T12458] binder: 12457:12458 ioctl c0306201 0 returned -14 [ 635.273271][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.832699][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 636.014926][ T5812] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 636.040380][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.059783][ T5812] usb 5-1: config 0 descriptor?? [ 636.071469][ T5812] cp210x 5-1:0.0: cp210x converter detected [ 636.087613][T12485] binder: 12483:12485 ioctl c0306201 200000000080 returned -14 [ 636.098348][T12485] binder: 12483:12485 ioctl c0306201 0 returned -14 [ 636.262624][ T7292] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 636.313000][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.332017][T12489] loop9: detected capacity change from 0 to 7 [ 636.346491][T12489] Dev loop9: unable to read RDB block 7 [ 636.357056][T12489] loop9: unable to read partition table [ 636.363507][T12489] loop9: partition table beyond EOD, truncated [ 636.369788][T12489] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 636.369788][T12489] ) failed (rc=-5) [ 636.460704][ T7292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 636.477668][ T7292] usb 2-1: config 13 has an invalid interface number: 248 but max is 2 [ 636.480845][ T5812] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 636.507911][ T7292] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 636.531972][ T5812] usb 5-1: cp210x converter now attached to ttyUSB0 [ 636.539018][ T7292] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 3 [ 636.565259][ T7292] usb 2-1: config 13 has no interface number 0 [ 636.571510][ T7292] usb 2-1: config 13 interface 248 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 636.598775][ T7292] usb 2-1: config 13 interface 248 altsetting 4 endpoint 0xD has invalid wMaxPacketSize 0 [ 636.609002][ T7292] usb 2-1: config 13 interface 248 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 636.627186][ T7292] usb 2-1: config 13 interface 248 has no altsetting 0 [ 636.636770][ T7292] usb 2-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=49.c7 [ 636.646134][ T7292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.654530][ T7292] usb 2-1: Product: syz [ 636.658717][ T7292] usb 2-1: Manufacturer: syz [ 636.663809][ T7292] usb 2-1: SerialNumber: syz [ 636.730336][ T5830] usb 5-1: USB disconnect, device number 15 [ 636.749115][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 636.764960][ T5830] cp210x 5-1:0.0: device disconnected [ 637.043157][ T7292] kaweth 2-1:13.248: couldn't find required endpoints [ 637.050296][ T7292] pegasus 2-1:13.248: Missing or invalid endpoints [ 637.062094][ T7292] usb 2-1: USB disconnect, device number 28 [ 637.353907][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.635268][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 637.759243][T12508] binder: 12507:12508 ioctl c0306201 200000000080 returned -14 [ 637.913121][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.407110][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.178598][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 639.442994][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.753411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.405103][T12562] binder: 12561:12562 ioctl c0306201 200000000080 returned -14 [ 640.473928][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.953703][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.523348][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.581718][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.644806][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.708676][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.930204][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.949739][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.988502][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.012797][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.186895][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 642.940755][T12593] binder: 12592:12593 ioctl c0306201 200000000080 returned -14 [ 644.196219][T12612] binder: 12611:12612 ioctl c0306201 200000000080 returned -14 [ 644.329352][T12618] binder_alloc: 12594: binder_alloc_buf, no vma [ 645.698477][ T5778] Bluetooth: Unexpected start frame (len 10) [ 646.027055][T12641] binder: 12640:12641 ioctl c0306201 200000000080 returned -14 [ 646.072972][ T5830] net_ratelimit: 6 callbacks suppressed [ 646.072987][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.104789][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.140679][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.180698][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.217662][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.253055][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.314688][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.342770][T12643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.352212][T12642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.405637][T12629] loop2: detected capacity change from 0 to 40427 [ 646.417163][T12629] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 646.462417][T12629] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 646.489665][T12629] F2FS-fs (loop2): Image doesn't support compression [ 646.514553][T12629] F2FS-fs (loop2): Image doesn't support compression [ 646.554544][T12629] F2FS-fs (loop2): invalid crc value [ 646.772137][T12629] F2FS-fs (loop2): Start checkpoint disabled! [ 646.791578][T12629] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 646.800343][T12629] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 647.033238][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.378631][T12667] binder: 12666:12667 ioctl c0306201 200000000080 returned -14 [ 647.394469][T12667] binder: 12666:12667 ioctl c0306201 2000000003c0 returned -14 [ 647.411511][T12667] binder: 12666:12667 ioctl c0306201 0 returned -14 [ 647.652785][ T5830] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 648.002661][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 648.013741][ T5830] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 648.040064][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.065372][ T5830] usb 5-1: config 0 descriptor?? [ 648.102651][ T5830] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 648.503602][ T5830] gspca_nw80x: reg_r err -32 [ 648.511489][ T5830] nw80x: probe of 5-1:0.0 failed with error -32 [ 649.150799][T12704] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 649.184591][T12704] loop1: detected capacity change from 0 to 256 [ 650.448406][ T7292] usb 5-1: USB disconnect, device number 16 [ 650.611254][T12707] loop2: detected capacity change from 0 to 40427 [ 650.652657][T12707] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 650.670122][T12707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 650.690759][T12707] F2FS-fs (loop2): Image doesn't support compression [ 650.710904][T12707] F2FS-fs (loop2): Image doesn't support compression [ 650.817789][T12707] F2FS-fs (loop2): invalid crc value [ 651.273969][ T5777] net_ratelimit: 5 callbacks suppressed [ 651.273986][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.113178][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.273859][T12707] F2FS-fs (loop2): Start checkpoint disabled! [ 653.473555][T12707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 653.546444][T12707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 653.750998][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.764204][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.153437][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.580531][T12742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 654.597244][T12742] loop2: detected capacity change from 0 to 256 [ 655.194864][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.232975][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.391817][T12754] loop4: detected capacity change from 0 to 40427 [ 656.410407][T12769] IPVS: Scheduler module ip_vs_sip not found [ 656.421302][T12754] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 656.435506][T12754] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 656.445168][T12754] F2FS-fs (loop4): Image doesn't support compression [ 656.452030][T12754] F2FS-fs (loop4): Image doesn't support compression [ 656.465147][T12754] F2FS-fs (loop4): invalid crc value [ 656.724778][T12754] F2FS-fs (loop4): Start checkpoint disabled! [ 656.761180][T12754] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 656.775632][T12754] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 656.783962][T12775] loop2: detected capacity change from 0 to 7 [ 656.793202][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.812356][T12775] Dev loop2: unable to read RDB block 7 [ 656.822048][T12775] loop2: unable to read partition table [ 656.842904][T12775] loop2: partition table beyond EOD, truncated [ 656.851730][T12775] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 656.942790][ T5830] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 657.142879][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 657.150306][ T5830] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 657.163278][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.202717][ T5830] usb 2-1: config 0 descriptor?? [ 657.224366][ T5830] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 657.281196][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.628184][ T5830] gspca_nw80x: reg_r err -32 [ 657.633587][ T5830] nw80x: probe of 2-1:0.0 failed with error -32 [ 657.797473][T12790] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 657.838518][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.863009][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.881640][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.003063][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.031523][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.041923][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.055309][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.727680][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.734491][ T7292] usb 2-1: USB disconnect, device number 29 [ 660.046769][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 660.889499][T12817] loop1: detected capacity change from 0 to 40427 [ 660.924703][T12817] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 660.943885][T12817] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 661.142918][T12817] F2FS-fs (loop1): Image doesn't support compression [ 661.159959][T12817] F2FS-fs (loop1): Image doesn't support compression [ 661.211942][T12817] F2FS-fs (loop1): invalid crc value [ 661.368521][T12817] F2FS-fs (loop1): Start checkpoint disabled! [ 661.406589][T12817] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 661.419175][T12817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 661.597514][T12844] netlink: 'syz.4.2196': attribute type 10 has an invalid length. [ 661.634774][T12844] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 661.912956][ T7292] net_ratelimit: 28 callbacks suppressed [ 661.912971][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.676788][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'. [ 662.820281][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.872902][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.953094][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.030012][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.570541][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2209'. [ 665.033107][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.578223][T11440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 665.588254][T11440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 665.599139][T11440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 665.608272][T11440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 665.616262][T11440] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 665.624028][T11440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.004092][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.076507][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.446595][T12894] chnl_net:caif_netlink_parms(): no params data found [ 666.512458][T12889] loop1: detected capacity change from 0 to 40427 [ 666.564180][T12889] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 666.594642][T12889] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 666.650711][T12889] F2FS-fs (loop1): Image doesn't support compression [ 666.658313][T12889] F2FS-fs (loop1): Image doesn't support compression [ 666.676373][T12889] F2FS-fs (loop1): invalid crc value [ 666.705697][T12894] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.743974][T12914] loop2: detected capacity change from 0 to 7 [ 666.773074][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.790326][T12894] bridge_slave_0: entered allmulticast mode [ 666.823143][T12894] bridge_slave_0: entered promiscuous mode [ 666.844146][T12914] Dev loop2: unable to read RDB block 7 [ 666.849780][T12914] loop2: unable to read partition table [ 666.868228][T12894] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.889880][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.902366][T12914] loop2: partition table beyond EOD, truncated [ 666.932192][T12894] bridge_slave_1: entered allmulticast mode [ 666.938612][T12914] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.003235][T12889] F2FS-fs (loop1): Start checkpoint disabled! [ 667.023916][T12894] bridge_slave_1: entered promiscuous mode [ 667.056404][T12917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2219'. [ 667.112984][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.172016][T12889] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 667.229893][T12889] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 667.373643][T12894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.402000][T12894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.523726][T12894] team0: Port device team_slave_0 added [ 667.549046][T12894] team0: Port device team_slave_1 added [ 667.610017][T12894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.637512][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.809079][T12894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.832709][T11440] Bluetooth: hci4: command tx timeout [ 667.855218][T12894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.871212][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.939828][T12894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.150953][T12894] hsr_slave_0: entered promiscuous mode [ 668.158101][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.175213][T12894] hsr_slave_1: entered promiscuous mode [ 668.181656][T12894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.189676][T12894] Cannot create hsr debugfs directory [ 668.708163][T12894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.193498][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.231814][T12894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.518098][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'. [ 669.728624][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.913383][T11440] Bluetooth: hci4: command tx timeout [ 670.109429][T12894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.219869][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2227'. [ 670.239248][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.417717][T12894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.273257][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.394914][T12894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 671.460651][T12894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 671.555134][T12894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 671.599046][T12894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 671.650139][T12976] binder: 12975:12976 unknown command 1074291477 [ 671.656914][T12976] binder: 12975:12976 ioctl c0306201 2000000005c0 returned -22 [ 671.861078][T12894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.882804][T12894] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.912958][ T5812] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 671.949579][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2237'. [ 671.993518][T11440] Bluetooth: hci4: command tx timeout [ 672.138643][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.145890][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.165729][ T5812] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 672.168212][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.181705][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.213373][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.259327][ T5812] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 672.302647][ T5812] usb 2-1: config 1 has no interface number 1 [ 672.308870][ T5812] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 672.336443][T12894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.361897][T12894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.383087][ T5812] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.397002][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.425535][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.472715][ T5812] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.481986][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.500118][ T5812] usb 2-1: Product: syz [ 672.514025][ T5812] usb 2-1: Manufacturer: syz [ 672.518769][ T5812] usb 2-1: SerialNumber: syz [ 672.807520][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.833153][ T5812] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 672.840679][ T5812] usb 2-1: MIDIStreaming interface descriptor not found [ 672.969256][ T5812] usb 2-1: USB disconnect, device number 30 [ 673.056249][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.179524][T12894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.305855][T12894] veth0_vlan: entered promiscuous mode [ 673.343674][T12894] veth1_vlan: entered promiscuous mode [ 673.435618][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.468991][T12894] veth0_macvtap: entered promiscuous mode [ 673.496257][T12894] veth1_macvtap: entered promiscuous mode [ 673.535602][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.551447][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.569124][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.591902][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.622338][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.647598][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.699054][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.730313][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.771741][T12894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.799081][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.836418][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.872882][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.900973][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.911513][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.923006][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.933585][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.946325][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.073816][T11440] Bluetooth: hci4: command tx timeout [ 674.170711][T12894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.476809][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.524181][T12894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.539814][T12894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.557039][T12894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.572629][T12894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.760963][T13014] loop2: detected capacity change from 0 to 7 [ 674.776076][T13014] Dev loop2: unable to read RDB block 7 [ 674.812702][T13014] loop2: unable to read partition table [ 674.826520][T13014] loop2: partition table beyond EOD, truncated [ 674.852957][T13014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 674.881753][ T5138] Dev loop2: unable to read RDB block 7 [ 674.900233][ T5138] loop2: unable to read partition table [ 674.900703][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.917122][ T5138] loop2: partition table beyond EOD, truncated [ 674.936926][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.981909][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.095716][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.669267][T13023] ip6gre1: entered allmulticast mode [ 675.796316][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.982422][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.200638][ T27] audit: type=1800 audit(1785322135.903:283): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2251" name="UDC" dev="configfs" ino=33858 res=0 errno=0 [ 677.055661][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.131802][T13047] xt_TCPMSS: Only works on TCP SYN packets [ 677.188531][T13047] bridge2: entered promiscuous mode [ 677.204886][T13047] bridge2: entered allmulticast mode [ 677.260243][T13047] team0: Port device bridge2 added [ 677.301854][T13050] loop2: detected capacity change from 0 to 7 [ 677.313875][T13050] Dev loop2: unable to read RDB block 7 [ 677.319658][T13050] loop2: unable to read partition table [ 677.326363][T13050] loop2: partition table beyond EOD, truncated [ 677.342689][T13050] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 677.587560][ T27] audit: type=1326 audit(1785322137.293:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 677.749562][ T27] audit: type=1326 audit(1785322137.323:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 677.875810][ T27] audit: type=1326 audit(1785322137.333:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.006055][ T27] audit: type=1326 audit(1785322137.333:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.041429][ T27] audit: type=1326 audit(1785322137.333:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.075138][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.129809][ T27] audit: type=1326 audit(1785322137.333:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.167178][ T27] audit: type=1326 audit(1785322137.333:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.192923][ T27] audit: type=1326 audit(1785322137.333:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.230023][ T27] audit: type=1326 audit(1785322137.333:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.4.2259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194859de99 code=0x7ffc0000 [ 678.464893][T13077] loop2: detected capacity change from 0 to 7 [ 678.504493][T13077] Dev loop2: unable to read RDB block 7 [ 678.525375][T13077] loop2: unable to read partition table [ 678.531438][T13079] xt_TCPMSS: Only works on TCP SYN packets [ 678.541495][T13077] loop2: partition table beyond EOD, truncated [ 678.549865][T13079] bridge2: entered promiscuous mode [ 678.556211][T13079] bridge2: entered allmulticast mode [ 678.565631][T13079] team0: Port device bridge2 added [ 678.572667][T13077] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 678.612747][ T5138] Dev loop2: unable to read RDB block 7 [ 678.618345][ T5138] loop2: unable to read partition table [ 678.628769][ T5138] loop2: partition table beyond EOD, truncated [ 680.332373][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.649149][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.967189][ T8370] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.167340][ T8370] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.255420][T13110] loop2: detected capacity change from 0 to 7 [ 681.270744][T13110] Dev loop2: unable to read RDB block 7 [ 681.302468][T13110] loop2: unable to read partition table [ 681.326107][T13110] loop2: partition table beyond EOD, truncated [ 681.350957][T13110] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 681.406862][ T8370] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.631985][ T8370] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.674035][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.011558][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.021961][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.041955][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.091394][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.579355][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 682.618366][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 682.625628][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 682.625640][ T27] audit: type=1800 audit(1785322142.323:314): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2283" name="UDC" dev="configfs" ino=32748 res=0 errno=0 [ 682.653168][ T5778] Bluetooth: Unexpected start frame (len 10) [ 682.661279][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 682.673702][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 682.682210][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 682.689630][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.713678][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.942049][T13121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2284'. [ 683.363627][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.767859][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.874587][ T5778] Bluetooth: hci2: command tx timeout [ 684.885185][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.672202][ T5778] Bluetooth: Unexpected start frame (len 10) [ 685.728186][ T27] audit: type=1800 audit(1785322145.373:315): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2293" name="UDC" dev="configfs" ino=34849 res=0 errno=0 [ 685.881088][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.913485][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.989431][T13178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2294'. [ 686.269548][T13122] chnl_net:caif_netlink_parms(): no params data found [ 686.393704][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.417821][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.427259][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.441468][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.578701][T13157] loop4: detected capacity change from 0 to 40427 [ 686.590142][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.597602][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.605545][T13122] bridge_slave_0: entered allmulticast mode [ 686.613610][T13122] bridge_slave_0: entered promiscuous mode [ 686.688577][T13157] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 686.737160][T13157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 686.764797][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.772949][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.791232][T13157] F2FS-fs (loop4): Image doesn't support compression [ 686.807904][T13122] bridge_slave_1: entered allmulticast mode [ 686.819071][T13157] F2FS-fs (loop4): Image doesn't support compression [ 686.838098][T13122] bridge_slave_1: entered promiscuous mode [ 686.839365][T13157] F2FS-fs (loop4): invalid crc value [ 686.953325][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.961968][ T5778] Bluetooth: hci2: command tx timeout [ 687.203933][T13157] F2FS-fs (loop4): Start checkpoint disabled! [ 687.217813][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.317404][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.755667][ T6350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.953647][ T8370] hsr_slave_0: left promiscuous mode [ 688.042902][ T8370] hsr_slave_1: left promiscuous mode [ 688.085720][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.112470][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.163661][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.171205][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.224955][ T5778] Bluetooth: Unexpected start frame (len 10) [ 688.238131][ T27] audit: type=1800 audit(1785322147.943:316): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2301" name="UDC" dev="configfs" ino=34884 res=0 errno=0 [ 689.192878][ T5777] net_ratelimit: 3 callbacks suppressed [ 689.192890][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.394146][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.408099][ T5778] Bluetooth: hci2: command tx timeout [ 690.434490][ T8370] bridge_slave_1: left allmulticast mode [ 690.440197][ T8370] bridge_slave_1: left promiscuous mode [ 690.453097][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.462087][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.490032][ T8370] bridge_slave_0: left allmulticast mode [ 690.496100][ T8370] bridge_slave_0: left promiscuous mode [ 690.501896][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.626586][ T8370] veth1_macvtap: left promiscuous mode [ 690.632158][ T8370] veth0_macvtap: left promiscuous mode [ 690.645527][ T8370] veth1_vlan: left promiscuous mode [ 690.650972][ T8370] veth0_vlan: left promiscuous mode [ 691.437862][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.554684][ T8370] team0 (unregistering): Port device team_slave_1 removed [ 691.603455][ T8370] team0 (unregistering): Port device team_slave_0 removed [ 691.654932][ T8370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.707760][ T8370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.056903][ T8370] bond0 (unregistering): Released all slaves [ 692.171363][T13122] team0: Port device team_slave_0 added [ 692.197244][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2300'. [ 692.243297][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.252495][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.262849][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.277003][T13225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 692.335118][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2302'. [ 692.390998][T13122] team0: Port device team_slave_1 added [ 692.472870][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.482876][ T5778] Bluetooth: hci2: command tx timeout [ 692.524793][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.531763][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.617877][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.689919][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.705507][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.731496][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.749857][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.247014][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.424425][T13122] hsr_slave_0: entered promiscuous mode [ 694.485374][T13122] hsr_slave_1: entered promiscuous mode [ 694.548417][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.570957][T13122] Cannot create hsr debugfs directory [ 695.670908][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.730502][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.815745][T13267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2313'. [ 696.489531][T13122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 696.569864][T13122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 696.629889][T13122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 696.668748][T13122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 696.713529][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.057801][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.106934][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.159996][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.167275][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.252260][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.259450][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.393955][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.435554][T13122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.762371][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.993271][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.002206][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.022180][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.003547][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.281449][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.387485][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2322'. [ 700.190512][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.479531][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.487693][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.614979][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.747565][T13122] veth0_vlan: entered promiscuous mode [ 702.787486][T13122] veth1_vlan: entered promiscuous mode [ 702.885784][T13122] veth0_macvtap: entered promiscuous mode [ 702.917393][T13122] veth1_macvtap: entered promiscuous mode [ 703.025067][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.103444][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.209070][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.352474][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.511578][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.690137][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.758399][ T2947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.785207][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.869490][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.006049][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.133113][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.141476][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.166873][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.202280][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 704.263005][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.357912][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.382638][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.432577][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.458780][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.492577][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.539718][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.573002][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.616109][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.712060][T13122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.762648][T13122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.771440][T13122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.802694][T13122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.162895][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.170793][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.193798][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.259715][ T8373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.304796][ T8373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.554308][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.738348][T13405] xt_TCPMSS: Only works on TCP SYN packets [ 706.817084][T13405] bridge1: entered promiscuous mode [ 706.832680][T13405] bridge1: entered allmulticast mode [ 706.855262][T13405] team0: Port device bridge1 added [ 706.878627][T13408] bridge0: port 3(team0) entered blocking state [ 706.896335][T13408] bridge0: port 3(team0) entered disabled state [ 706.913128][T13408] team0: entered allmulticast mode [ 706.941795][T13408] team_slave_0: entered allmulticast mode [ 706.953318][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.985607][T13408] team_slave_1: entered allmulticast mode [ 706.994536][T13408] team0: entered promiscuous mode [ 707.009561][T13408] team_slave_0: entered promiscuous mode [ 707.036611][T13408] team_slave_1: entered promiscuous mode [ 707.060089][T13408] bridge0: port 3(team0) entered blocking state [ 707.066543][T13408] bridge0: port 3(team0) entered forwarding state [ 707.195453][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.602917][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.712233][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2339'. [ 708.668630][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.956584][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.965927][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.997792][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.109460][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 709.673857][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.340389][T11440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.352382][T11440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.370584][T11440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.394184][T11440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.293662][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.316429][T11440] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 711.323833][T11440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.456231][T13456] xt_TCPMSS: Only works on TCP SYN packets [ 711.583667][T13456] bridge2: entered promiscuous mode [ 711.588956][T13456] bridge2: entered allmulticast mode [ 711.629285][T13456] team0: Port device bridge2 added [ 711.916772][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 712.075727][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.340166][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.127735][T13449] chnl_net:caif_netlink_parms(): no params data found [ 713.362679][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.442749][ T5778] Bluetooth: hci3: command tx timeout [ 713.462261][T13449] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.469696][T13449] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.477238][T13449] bridge_slave_0: entered allmulticast mode [ 713.485070][T13449] bridge_slave_0: entered promiscuous mode [ 713.494813][T13449] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.502282][T13449] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.509859][T13449] bridge_slave_1: entered allmulticast mode [ 713.519483][T13449] bridge_slave_1: entered promiscuous mode [ 713.562459][T13449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.576733][T13449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.727156][T13449] team0: Port device team_slave_0 added [ 713.755523][T13449] team0: Port device team_slave_1 added [ 713.910667][T13449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.937964][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.041009][T13449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.073468][T13449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.134269][T13449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.160227][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.222094][T13449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.355555][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.375479][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.455033][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.484246][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.500737][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.512646][ T5778] Bluetooth: hci3: command tx timeout [ 715.534968][T13449] hsr_slave_0: entered promiscuous mode [ 715.554921][T13449] hsr_slave_1: entered promiscuous mode [ 715.603958][T13449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.611581][T13449] Cannot create hsr debugfs directory [ 715.803729][T13511] xt_TCPMSS: Only works on TCP SYN packets [ 715.907471][T13511] bridge1: entered promiscuous mode [ 715.952640][T13511] bridge1: entered allmulticast mode [ 715.984694][T13511] team0: Port device bridge1 added [ 716.078213][T13514] bridge0: port 3(team0) entered blocking state [ 716.088190][T13514] bridge0: port 3(team0) entered disabled state [ 716.119880][T13514] team0: entered allmulticast mode [ 716.152622][T13514] team_slave_0: entered allmulticast mode [ 716.180517][T13514] team_slave_1: entered allmulticast mode [ 716.205374][T13514] team0: entered promiscuous mode [ 716.213390][T13514] team_slave_0: entered promiscuous mode [ 716.227725][T13514] team_slave_1: entered promiscuous mode [ 716.291187][T13514] bridge0: port 3(team0) entered blocking state [ 716.297601][T13514] bridge0: port 3(team0) entered forwarding state [ 716.393024][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.574562][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.728424][T13523] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2357'. [ 717.334901][T13449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.443591][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.576476][T13449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.593328][ T5778] Bluetooth: hci3: command tx timeout [ 717.715100][T13449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.722830][ T7292] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 719.275853][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.290878][ T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.374638][ T7292] usb 6-1: config 9 interface 0 has no altsetting 0 [ 719.387570][ T7292] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 719.409832][ T7292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.421760][ T7292] usb 6-1: Product: syz [ 719.426405][ T7292] usb 6-1: Manufacturer: syz [ 719.430571][T13449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.431135][ T7292] usb 6-1: SerialNumber: syz [ 719.672827][ T5778] Bluetooth: hci3: command tx timeout [ 720.033429][T13449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.046787][T13449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.072040][ T7292] snd-usb-caiaq 6-1:9.0: can't set alt interface. [ 720.079584][ T7292] usb 6-1: unable to init card! (ret=-5) [ 720.085970][ T7292] snd-usb-caiaq: probe of 6-1:9.0 failed with error -5 [ 720.097571][T13449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.114796][ T7292] usb 6-1: USB disconnect, device number 2 [ 720.125246][T13449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.251552][T13449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.273754][T13449] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.299534][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.306714][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.312966][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.369223][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.376386][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.813384][T13561] xt_TCPMSS: Only works on TCP SYN packets [ 720.858051][T13561] bridge3: entered promiscuous mode [ 720.892643][T13561] bridge3: entered allmulticast mode [ 720.935178][T13561] team0: Port device bridge3 added [ 721.033931][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.043167][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.055969][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.121736][T13449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.230434][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2366'. [ 721.353938][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.181251][ T27] audit: type=1800 audit(1785322181.883:317): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2363" name="UDC" dev="configfs" ino=35579 res=0 errno=0 [ 722.185511][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 722.240075][T13575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 722.393200][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.429631][T13449] veth0_vlan: entered promiscuous mode [ 722.471442][T13449] veth1_vlan: entered promiscuous mode [ 722.594875][T13449] veth0_macvtap: entered promiscuous mode [ 722.641781][T13449] veth1_macvtap: entered promiscuous mode [ 722.692174][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.724420][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.762636][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.803093][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.836214][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.848208][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.858824][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.872879][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.908703][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.929843][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.966930][T13449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.978380][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.992165][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.008888][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.019797][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.034069][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.046001][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.052997][T13591] xt_TCPMSS: Only works on TCP SYN packets [ 723.056455][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.082269][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.092743][T13449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.104474][T13449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.118084][T13449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.130043][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'. [ 723.153606][T13591] bridge4: entered promiscuous mode [ 723.158857][T13591] bridge4: entered allmulticast mode [ 723.207846][T13591] team0: Port device bridge4 added [ 723.231930][T13449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.283588][T13449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.300397][T13449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.351512][T13449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.183766][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.195153][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.420467][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2374'. [ 724.470459][ T27] audit: type=1800 audit(1785322184.173:318): pid=13600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2375" name="UDC" dev="configfs" ino=35608 res=0 errno=0 [ 724.906243][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.968826][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.111288][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.129346][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.193776][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.282710][ T6782] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 725.537674][ T6782] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 725.630372][ T6782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.763558][ T6782] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 725.877770][ T6782] usb 2-1: config 1 has no interface number 1 [ 725.973189][ T6782] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 726.128369][ T6782] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.233209][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.248043][ T6782] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.257518][ T6782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.265644][ T6782] usb 2-1: Product: syz [ 726.272858][ T6782] usb 2-1: Manufacturer: syz [ 726.277545][ T6782] usb 2-1: SerialNumber: syz [ 726.509846][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.515146][ T6782] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 726.528139][ T6782] usb 2-1: MIDIStreaming interface descriptor not found [ 726.676441][T13623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 726.712939][ T6782] usb 2-1: USB disconnect, device number 31 [ 727.272959][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.281155][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.438679][T13636] xt_TCPMSS: Only works on TCP SYN packets [ 727.490182][T13636] bridge1: entered promiscuous mode [ 727.502134][T13636] bridge1: entered allmulticast mode [ 727.568943][T13636] team0: Port device bridge1 added [ 727.589844][T13637] bridge0: port 3(team0) entered blocking state [ 728.740848][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.751761][T13637] bridge0: port 3(team0) entered disabled state [ 728.803763][T13637] team0: entered allmulticast mode [ 728.834805][T13637] team_slave_0: entered allmulticast mode [ 728.862909][T13637] team_slave_1: entered allmulticast mode [ 728.890480][T13637] team0: entered promiscuous mode [ 728.900087][T13637] team_slave_0: entered promiscuous mode [ 728.910441][T13637] team_slave_1: entered promiscuous mode [ 728.925671][ T5778] Bluetooth: Unexpected start frame (len 10) [ 728.925955][T13637] bridge0: port 3(team0) entered blocking state [ 728.938179][T13637] bridge0: port 3(team0) entered forwarding state [ 728.955201][ T27] audit: type=1800 audit(1785322188.633:319): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2384" name="UDC" dev="configfs" ino=36598 res=0 errno=0 [ 729.352266][T13655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 729.542705][ T5830] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 729.764303][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.782758][ T5830] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 729.791502][ T5830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.830870][ T5830] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 729.861581][ T5830] usb 3-1: config 1 has no interface number 1 [ 729.881516][ T5830] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 729.920985][ T5830] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.956827][ T5830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.977047][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.993788][ T5830] usb 3-1: Product: syz [ 730.000887][ T5830] usb 3-1: Manufacturer: syz [ 730.017783][ T5830] usb 3-1: SerialNumber: syz [ 730.261778][ T5830] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 730.285616][ T5830] usb 3-1: MIDIStreaming interface descriptor not found [ 730.314415][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.393025][ T5830] usb 3-1: USB disconnect, device number 29 [ 730.475060][T13680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'. [ 730.793710][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.915881][T13683] bridge5: entered promiscuous mode [ 730.970001][T13683] bridge5: entered allmulticast mode [ 730.985525][T13683] team0: Port device bridge5 added [ 731.004169][ T27] audit: type=1800 audit(1785322190.713:320): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2397" name="UDC" dev="configfs" ino=36662 res=0 errno=0 [ 731.024180][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.833349][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.868286][T13711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.023678][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2403'. [ 732.504607][ T5778] Bluetooth: Unexpected start frame (len 10) [ 732.514085][ T27] audit: type=1800 audit(1785322192.223:321): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2406" name="UDC" dev="configfs" ino=36737 res=0 errno=0 [ 732.596170][T13733] bridge2: entered promiscuous mode [ 732.601431][T13733] bridge2: entered allmulticast mode [ 732.673237][T13733] team0: Port device bridge2 added [ 732.873417][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.082657][ T7292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 733.253707][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2414'. [ 733.274697][ T7292] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 733.353289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.443382][ T7292] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.453926][ T7292] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 733.453951][ T7292] usb 6-1: config 1 has no interface number 1 [ 733.453993][ T7292] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 733.454036][ T7292] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.456644][ T7292] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.507436][ T7292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.526209][ T7292] usb 6-1: Product: syz [ 733.534176][ T7292] usb 6-1: Manufacturer: syz [ 733.542607][ T7292] usb 6-1: SerialNumber: syz [ 733.913168][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.026870][ T7292] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 734.073077][ T7292] usb 6-1: MIDIStreaming interface descriptor not found [ 734.191791][ T7292] usb 6-1: USB disconnect, device number 3 [ 734.618491][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 734.683614][ T27] audit: type=1800 audit(1785322194.383:322): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2418" name="UDC" dev="configfs" ino=36786 res=0 errno=0 [ 734.686283][T13786] bridge6: entered promiscuous mode [ 734.726944][T13786] bridge6: entered allmulticast mode [ 734.736784][T13786] team0: Port device bridge6 added [ 734.768308][T13787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 734.962963][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.754950][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.013697][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.159291][ T5778] Bluetooth: Unexpected start frame (len 10) [ 736.181228][ T27] audit: type=1800 audit(1785322195.883:323): pid=13821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2429" name="UDC" dev="configfs" ino=36900 res=0 errno=0 [ 736.325413][T11440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.335714][T11440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 736.370842][T13830] xt_TCPMSS: Only works on TCP SYN packets [ 736.464978][T11440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.475564][T11440] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.491586][T11440] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 736.499144][T11440] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 736.905693][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.940196][T13830] bridge7: entered promiscuous mode [ 736.968122][T13830] bridge7: entered allmulticast mode [ 736.977149][T13830] team0: Port device bridge7 added [ 737.035352][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.086672][T13844] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 737.383992][T13825] chnl_net:caif_netlink_parms(): no params data found [ 737.667715][T13825] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.685935][T13825] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.694979][T13825] bridge_slave_0: entered allmulticast mode [ 737.703101][T13825] bridge_slave_0: entered promiscuous mode [ 737.719334][T13825] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.726795][T13825] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.735056][T13825] bridge_slave_1: entered allmulticast mode [ 737.743038][T13825] bridge_slave_1: entered promiscuous mode [ 737.789380][T13825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.802784][T13825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.823085][ T5812] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 737.876403][T13825] team0: Port device team_slave_0 added [ 737.907684][T13825] team0: Port device team_slave_1 added [ 737.950827][T13825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.957988][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.993394][T13825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.015627][T13825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.028364][ T5812] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 738.029037][T13825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.052641][ T5812] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.072288][T13825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.105354][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.123708][ T5812] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 738.141476][ T5812] usb 6-1: config 1 has no interface number 1 [ 738.162734][ T5812] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 738.184977][ T5812] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.223204][ T5812] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.248810][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.256395][T13825] hsr_slave_0: entered promiscuous mode [ 738.268574][ T5812] usb 6-1: Product: syz [ 738.273090][ T5812] usb 6-1: Manufacturer: syz [ 738.280530][T13825] hsr_slave_1: entered promiscuous mode [ 738.282692][ T5812] usb 6-1: SerialNumber: syz [ 738.297964][T13825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.334286][T13825] Cannot create hsr debugfs directory [ 738.531729][ T5812] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 738.563591][ T5812] usb 6-1: MIDIStreaming interface descriptor not found [ 738.567500][ T5778] Bluetooth: hci0: command tx timeout [ 738.701183][ T5812] usb 6-1: USB disconnect, device number 4 [ 738.784046][T13887] xt_TCPMSS: Only works on TCP SYN packets [ 738.839212][T13825] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.977700][T13887] bridge2: entered promiscuous mode [ 738.994404][T13887] bridge2: entered allmulticast mode [ 739.022277][T13887] team0: Port device bridge2 added [ 739.117358][T13825] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.129469][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.405764][T13825] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.507470][T13902] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 739.679693][T13825] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.914342][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.153120][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.174855][T13825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.282380][T13825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.321282][T13825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.384620][T13825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.632843][ T5778] Bluetooth: hci0: command tx timeout [ 740.685359][T13825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.762183][T13825] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.812221][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.819437][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.835935][T13929] xt_TCPMSS: Only works on TCP SYN packets [ 740.867158][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.874373][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.911695][T13929] bridge8: entered promiscuous mode [ 740.917449][T13929] bridge8: entered allmulticast mode [ 740.934305][T13929] team0: Port device bridge8 added [ 741.049434][T13825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.193191][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.347915][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.608074][T13952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2456'. [ 742.712849][ T5778] Bluetooth: hci0: command tx timeout [ 742.792291][T13825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.963127][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.041984][T13825] veth0_vlan: entered promiscuous mode [ 743.089448][T13825] veth1_vlan: entered promiscuous mode [ 743.197115][T13965] xt_TCPMSS: Only works on TCP SYN packets [ 743.210255][T13825] veth0_macvtap: entered promiscuous mode [ 743.276026][T13965] bridge9: entered promiscuous mode [ 743.282090][T13965] bridge9: entered allmulticast mode [ 743.306008][T13965] team0: Port device bridge9 added [ 743.344506][T13825] veth1_macvtap: entered promiscuous mode [ 743.353275][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.400727][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.462781][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.499238][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.556483][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.585730][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.616575][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.643660][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.665942][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.689746][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.716024][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.729132][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.740435][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.761480][T13825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.841736][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.872589][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.952592][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.985303][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.029384][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.062395][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.203128][ T5778] Bluetooth: hci0: command tx timeout [ 745.210568][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.232667][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.263244][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.271979][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.283651][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.293833][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.322804][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.351179][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.352970][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.365387][T13825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.389867][T13825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.412610][T13825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.466265][T13991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 745.489170][T13825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.514754][T13825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.530712][T13825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.541376][T13825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.736497][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.764849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.827278][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.848581][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.011333][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.160511][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2423'. [ 746.313734][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.572139][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2465'. [ 746.863379][T14009] xt_TCPMSS: Only works on TCP SYN packets [ 746.929992][T14009] bridge1: entered promiscuous mode [ 746.959499][T14009] bridge1: entered allmulticast mode [ 746.975889][T14009] team0: Port device bridge1 added [ 748.477051][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.480453][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.813371][ T5804] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 748.824647][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2473'. [ 748.913344][T14024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2474'. [ 749.032777][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.051960][ T5804] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 749.064051][ T5804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.082810][ T5804] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.140553][ T5804] usb 5-1: config 1 has no interface number 1 [ 749.153002][ T5804] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 749.168794][ T5804] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.198869][ T5804] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.215329][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.224215][ T5804] usb 5-1: Product: syz [ 749.251450][ T5804] usb 5-1: Manufacturer: syz [ 749.264093][ T5804] usb 5-1: SerialNumber: syz [ 749.514131][ T5804] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 749.517814][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.534216][ T5804] usb 5-1: MIDIStreaming interface descriptor not found [ 749.651918][ T5804] usb 5-1: USB disconnect, device number 17 [ 751.233140][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.444312][ T5778] Bluetooth: Unexpected start frame (len 10) [ 751.456845][ T27] audit: type=1800 audit(1785322211.163:324): pid=14045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2472" name="UDC" dev="configfs" ino=38788 res=0 errno=0 [ 751.649204][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2483'. [ 751.819671][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 752.079151][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.314487][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.446316][T14061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 753.928914][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.084268][ T5778] Bluetooth: Unexpected start frame (len 10) [ 754.147409][ T27] audit: type=1800 audit(1785322213.853:325): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2491" name="UDC" dev="configfs" ino=38829 res=0 errno=0 [ 754.438582][T14074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2492'. [ 754.488006][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2493'. [ 756.069282][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.118224][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.139188][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.284181][ T5778] Bluetooth: Unexpected start frame (len 10) [ 756.364973][T14101] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 757.116302][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.376955][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2504'. [ 757.419139][T14108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2502'. [ 758.771742][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.190184][ T5778] Bluetooth: Unexpected start frame (len 10) [ 759.233155][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.835238][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.046189][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2514'. [ 760.135058][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2515'. [ 761.765383][ T7292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.320271][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.541219][ T5778] Bluetooth: Unexpected start frame (len 10) [ 762.795214][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.201166][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2524'. [ 763.526652][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2525'. [ 764.724250][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.092690][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 765.193331][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.202094][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2529'. [ 765.313495][ T5830] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 765.335989][ T5830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.352987][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.367478][ T5830] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 765.394645][ T5830] usb 6-1: config 1 has no interface number 1 [ 765.400792][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 765.434478][ T5830] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.458596][ T5778] Bluetooth: Unexpected start frame (len 10) [ 765.460506][ T5830] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 765.477482][ T27] audit: type=1800 audit(1785322225.183:326): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2530" name="UDC" dev="configfs" ino=39107 res=0 errno=0 [ 765.512708][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.541055][ T5830] usb 6-1: Product: syz [ 765.571374][ T5830] usb 6-1: Manufacturer: syz [ 765.588795][ T5830] usb 6-1: SerialNumber: syz [ 765.758110][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.837147][ T5830] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 765.858196][ T5830] usb 6-1: MIDIStreaming interface descriptor not found [ 765.925793][ T5830] usb 6-1: USB disconnect, device number 5 [ 766.018024][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.062732][T14209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2533'. [ 766.204133][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 767.433372][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.681638][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 767.684292][ T27] audit: type=1800 audit(1785322227.393:327): pid=14227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2539" name="UDC" dev="configfs" ino=39139 res=0 errno=0 [ 767.692449][ T5778] Bluetooth: Unexpected start frame (len 10) [ 768.394171][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.411850][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2544'. [ 768.482891][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.613346][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.479862][ T5778] Bluetooth: Unexpected start frame (len 10) [ 770.486340][ T27] audit: type=1800 audit(1785322230.183:328): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2549" name="UDC" dev="configfs" ino=39232 res=0 errno=0 [ 770.539880][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 770.633416][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.657391][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 772.522366][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2555'. [ 772.532656][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.551966][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.252447][ T5778] Bluetooth: Unexpected start frame (len 10) [ 773.375110][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 774.619330][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.794133][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.603587][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.612109][ T5778] Bluetooth: Unexpected start frame (len 10) [ 775.674546][ T6782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.825157][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2565'. [ 775.844342][T14336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 881.042560][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 881.049550][ C1] rcu: (detected by 1, t=10502 jiffies, g=73237, q=302 ncpus=2) [ 881.057276][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295025217-4295014715), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 881.070658][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g73237 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 881.081861][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 881.091837][ C1] rcu: RCU grace-period kthread stack dump: [ 881.097735][ C1] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 881.108546][ C1] Call Trace: [ 881.111835][ C1] [ 881.114781][ C1] __schedule+0x15ae/0x4660 [ 881.119414][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 881.124453][ C1] ? lock_chain_count+0x20/0x20 [ 881.129322][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 881.134553][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 881.140468][ C1] ? asan.module_dtor+0x20/0x20 [ 881.145323][ C1] ? rcu_is_watching+0x15/0xb0 [ 881.150079][ C1] schedule+0xbd/0x170 [ 881.154134][ C1] schedule_timeout+0x188/0x2d0 [ 881.158966][ C1] ? console_conditional_schedule+0x40/0x40 [ 881.164844][ C1] ? update_process_times+0x1b0/0x1b0 [ 881.170198][ C1] ? prepare_to_swait_event+0x344/0x360 [ 881.175742][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 881.180583][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 881.185422][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 881.191385][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 881.196390][ C1] ? rcu_gp_init+0x1530/0x1530 [ 881.201129][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 881.205961][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 881.211142][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 881.216322][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 881.220890][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 881.225977][ C1] ? __kthread_parkme+0x71/0x1c0 [ 881.230895][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 881.235898][ C1] kthread+0x2fa/0x390 [ 881.239941][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 881.245029][ C1] ? kthread_blkcg+0xd0/0xd0 [ 881.249593][ C1] ret_from_fork+0x48/0x80 [ 881.253989][ C1] ? kthread_blkcg+0xd0/0xd0 [ 881.258554][ C1] ret_from_fork_asm+0x11/0x20 [ 881.263328][ C1] [ 881.266327][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 881.272639][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 881.279644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.289679][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x65/0xe0 [ 881.296162][ C1] Code: 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 5d 3e 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 <65> 44 8b 1d 4b 3e 7c 7e 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 [ 881.315745][ C1] RSP: 0018:ffffc900001f0330 EFLAGS: 00000202 [ 881.321789][ C1] RAX: 0000000000000003 RBX: ffffffff8fadb014 RCX: 0000000000000003 [ 881.329736][ C1] RDX: ffffffff813bbaa1 RSI: ffffffff8cfa0640 RDI: 0000000000000000 [ 881.337685][ C1] RBP: ffffc900001f0478 R08: ffff88801be73c00 R09: 0000000000000002 [ 881.345636][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000187de0 [ 881.353584][ C1] R13: ffffc900001f0428 R14: 0000000000000000 R15: dffffc0000000000 [ 881.361532][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 881.370438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.376999][ C1] CR2: 0000200000000000 CR3: 000000007e7ba000 CR4: 00000000003506e0 [ 881.384952][ C1] Call Trace: [ 881.388210][ C1] [ 881.391039][ C1] unwind_next_frame+0x16d1/0x2990 [ 881.396136][ C1] ? pv_native_safe_halt+0xf/0x10 [ 881.401140][ C1] ? pv_native_safe_halt+0xf/0x10 [ 881.406147][ C1] ? stack_trace_save+0x100/0x100 [ 881.411151][ C1] arch_stack_walk+0x144/0x190 [ 881.415898][ C1] ? default_idle+0x13/0x20 [ 881.420382][ C1] stack_trace_save+0xaa/0x100 [ 881.425125][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 881.430219][ C1] ? stack_trace_save+0xaa/0x100 [ 881.435135][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 881.440227][ C1] kasan_set_track+0x4e/0x70 [ 881.444798][ C1] ? kasan_set_track+0x4e/0x70 [ 881.449540][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 881.454560][ C1] ? slab_post_alloc_hook+0x6a/0x4d0 [ 881.459824][ C1] ? kmem_cache_alloc_node+0x1af/0x310 [ 881.465270][ C1] ? kmalloc_reserve+0x95/0x240 [ 881.470121][ C1] ? __alloc_skb+0x138/0x2c0 [ 881.474702][ C1] ? skb_copy+0x126/0x700 [ 881.479011][ C1] ? mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 881.485232][ C1] ? mac80211_hwsim_tx_frame+0x1b5/0x200 [ 881.490848][ C1] ? mac80211_hwsim_beacon_tx+0x3df/0x770 [ 881.496546][ C1] ? __iterate_interfaces+0x225/0x4c0 [ 881.501972][ C1] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 881.509145][ C1] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 881.514493][ C1] ? __hrtimer_run_queues+0x525/0xc10 [ 881.519847][ C1] ? hrtimer_run_softirq+0x177/0x290 [ 881.525109][ C1] ? handle_softirqs+0x27d/0x820 [ 881.530026][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 881.534766][ C1] ? irq_exit_rcu+0x9/0x20 [ 881.539159][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 881.544942][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.551141][ C1] ? pv_native_safe_halt+0xf/0x10 [ 881.556163][ C1] __kasan_slab_alloc+0x6c/0x80 [ 881.560994][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 881.566094][ C1] kmem_cache_alloc_node+0x1af/0x310 [ 881.571364][ C1] ? kmalloc_reserve+0x95/0x240 [ 881.576212][ C1] kmalloc_reserve+0x95/0x240 [ 881.580869][ C1] __alloc_skb+0x138/0x2c0 [ 881.585263][ C1] skb_copy+0x126/0x700 [ 881.589400][ C1] ? read_tsc+0x9/0x20 [ 881.593453][ C1] mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 881.599507][ C1] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 881.605384][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 881.611170][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 881.616608][ C1] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 881.622139][ C1] __iterate_interfaces+0x225/0x4c0 [ 881.627322][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 881.633556][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 881.640741][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 881.646959][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 881.653962][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 881.659139][ C1] ? hw_scan_work+0xf10/0xf10 [ 881.663793][ C1] __hrtimer_run_queues+0x525/0xc10 [ 881.668981][ C1] ? hrtimer_interrupt+0x980/0x980 [ 881.674073][ C1] ? read_tsc+0x9/0x20 [ 881.678127][ C1] hrtimer_run_softirq+0x177/0x290 [ 881.683224][ C1] handle_softirqs+0x27d/0x820 [ 881.687970][ C1] ? read_tsc+0x9/0x20 [ 881.692019][ C1] ? ktime_get+0x24b/0x280 [ 881.696413][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 881.701154][ C1] ? do_softirq+0x1a0/0x1a0 [ 881.705636][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 881.710813][ C1] __irq_exit_rcu+0xd3/0x190 [ 881.715389][ C1] ? irq_exit_rcu+0x20/0x20 [ 881.719872][ C1] irq_exit_rcu+0x9/0x20 [ 881.724091][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 881.729704][ C1] [ 881.732618][ C1] [ 881.735535][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.741490][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 881.747104][ C1] Code: 5e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 6a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 881.766688][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 881.772739][ C1] RAX: 0d4689987029ed00 RBX: ffffffff81630c31 RCX: 0d4689987029ed00 [ 881.780694][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 881.788644][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 881.796592][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 881.804546][ C1] R13: dffffc0000000000 R14: 1ffff110037ce780 R15: 0000000000000000 [ 881.812500][ C1] ? do_idle+0x221/0x5c0 [ 881.816750][ C1] default_idle+0x13/0x20 [ 881.821088][ C1] default_idle_call+0x6c/0xa0 [ 881.825841][ C1] do_idle+0x221/0x5c0 [ 881.829895][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 881.835073][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 881.840253][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 881.845959][ C1] cpu_startup_entry+0x43/0x60 [ 881.850703][ C1] start_secondary+0xee/0xf0 [ 881.855276][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 881.861338][ C1]