last executing test programs: 3m41.621553028s ago: executing program 0 (id=8): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, 0x0, 0x40) getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 3m36.090349346s ago: executing program 0 (id=10): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010025bd700000000000020000000800", @ANYBLOB="0c009900b417"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="58e1a192964f91b2b2"]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m32.565383894s ago: executing program 0 (id=19): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 3m31.318330108s ago: executing program 0 (id=24): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 3m30.911427156s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) 3m20.360710225s ago: executing program 0 (id=67): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m19.042555531s ago: executing program 1 (id=69): 3m18.85654198s ago: executing program 1 (id=71): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) close_range(r0, r2, 0x0) 3m17.807987637s ago: executing program 1 (id=76): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 3m17.755160511s ago: executing program 1 (id=77): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0003}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1fe, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 3m15.870419154s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m12.548463051s ago: executing program 1 (id=99): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) userfaultfd(0x80000) socket$kcm(0x2d, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) 3m4.609503378s ago: executing program 32 (id=67): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m57.101907159s ago: executing program 33 (id=99): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) userfaultfd(0x80000) socket$kcm(0x2d, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) 2m9.476691553s ago: executing program 2 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='ac', 0x2) 2m9.106633028s ago: executing program 2 (id=394): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = dup2(r1, r0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 2m8.913655284s ago: executing program 2 (id=395): socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @random, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x34, 0x24, 0x65, 0x0, 0x3, 0x21, 0x0, @multicast1, @multicast2}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x7, "0585b8", 0x4, "0b35e7"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x1, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x101, 0xb}}}}}}, 0x0) 2m8.23369968s ago: executing program 2 (id=399): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xee8c0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0xc0, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) 2m7.876248305s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="1b00000001") 2m7.763991242s ago: executing program 4 (id=402): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 2m6.948118665s ago: executing program 2 (id=403): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 2m6.835036718s ago: executing program 4 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='namespace0.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='namespace0.0', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='pfn0.0', 0x6) 2m6.478041943s ago: executing program 34 (id=403): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 2m6.436637243s ago: executing program 4 (id=407): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r1}) 2m6.043056393s ago: executing program 4 (id=409): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xee8c0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0xc0, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) 2m5.469336829s ago: executing program 4 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="1b00000001") 2m4.316418069s ago: executing program 4 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 2m3.601227053s ago: executing program 35 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 4.006892588s ago: executing program 3 (id=1044): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 3.939635354s ago: executing program 7 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001") 3.877407417s ago: executing program 5 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 3.539943347s ago: executing program 6 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3.259275001s ago: executing program 7 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x922, 0x0) 3.023075068s ago: executing program 6 (id=1052): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 2.797934456s ago: executing program 7 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="1b00000001") 2.776948494s ago: executing program 8 (id=1054): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.604044874s ago: executing program 8 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='ac', 0x2) 2.574428898s ago: executing program 6 (id=1056): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) 2.570896456s ago: executing program 5 (id=1057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e"], 0x50}}, 0x840) 2.421081818s ago: executing program 8 (id=1058): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007400)={0x2020}, 0x2020) 2.387957713s ago: executing program 7 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.32187319s ago: executing program 5 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:01.0', 0xc) 2.276636444s ago: executing program 3 (id=1061): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, 0x0) 2.238674415s ago: executing program 8 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) 2.203623106s ago: executing program 6 (id=1063): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c"], 0x30}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.964038171s ago: executing program 5 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) 1.962388386s ago: executing program 6 (id=1065): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) read$dsp(r0, &(0x7f00000000c0)=""/15, 0xf) 1.944103309s ago: executing program 3 (id=1066): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="0100"], 0x6f4}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 917.116908ms ago: executing program 7 (id=1067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x295, 0x0, 0x8}]}) 911.276223ms ago: executing program 6 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) 681.438589ms ago: executing program 5 (id=1069): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x12100080, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 678.993391ms ago: executing program 3 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000400)="1b00000001") 517.380535ms ago: executing program 7 (id=1071): syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 451.072062ms ago: executing program 8 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 319.428927ms ago: executing program 3 (id=1073): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8080) 153.083839ms ago: executing program 5 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 150.94997ms ago: executing program 8 (id=1075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c"], 0x30}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:01.0', 0xc) kernel console output (not intermixed with test programs): usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.943169][ T5595] usb 4-1: USB disconnect, device number 4 [ 144.280571][ T5783] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 144.388570][ T5783] usb 5-1: USB disconnect, device number 2 [ 144.663809][ T6093] kAFS: unparsable volume name [ 145.327477][ T6017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.788776][ T6109] siw: device registration error -23 [ 145.998091][ T6116] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 146.208621][ T6108] lo speed is unknown, defaulting to 1000 [ 146.361312][ T6124] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 146.438027][ T6108] lo speed is unknown, defaulting to 1000 [ 146.452507][ T6108] lo speed is unknown, defaulting to 1000 [ 146.565329][ T6124] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.104'. [ 148.122766][ T6172] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 148.267937][ T6108] infiniband sz1: set active [ 148.267960][ T6108] infiniband sz1: added lo [ 148.283444][ T6172] syz_tun: entered promiscuous mode [ 148.382836][ T6172] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.416065][ T9] lo speed is unknown, defaulting to 1000 [ 148.493247][ T5595] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.514652][ T6108] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.514709][ T6108] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.514752][ T6108] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.676859][ T6108] RDS/IB: sz1: added [ 148.709711][ T6108] smc: adding ib device sz1 with port count 1 [ 148.709981][ T6108] smc: ib device sz1 port 1 has no pnetid [ 148.710715][ T5595] usb 3-1: Using ep0 maxpacket: 8 [ 148.730498][ T5595] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.743183][ T5595] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.743209][ T5595] usb 3-1: config 0 has no interface number 0 [ 148.743250][ T5595] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.743271][ T5595] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 148.743302][ T5595] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.743326][ T5595] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.743365][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.747980][ T9] lo speed is unknown, defaulting to 1000 [ 148.859438][ T5595] usb 3-1: config 0 descriptor?? [ 148.907100][ T6108] lo speed is unknown, defaulting to 1000 [ 148.971605][ T5595] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.103418][ T6189] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 149.620911][ T37] audit: type=1800 audit(1787212858.819:3): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.120" name="subclass" dev="configfs" ino=9566 res=0 errno=0 [ 149.978380][ T5783] usb 3-1: USB disconnect, device number 2 [ 150.382618][ T5783] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 150.752887][ T3334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.790154][ T6215] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 150.978517][ T6202] syz.3.122 (6202) used greatest stack depth: 17536 bytes left [ 151.130077][ T6216] syzkaller0: entered promiscuous mode [ 151.130106][ T6216] syzkaller0: entered allmulticast mode [ 151.568625][ T37] audit: type=1800 audit(1787212860.879:4): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.133" name="subclass" dev="configfs" ino=9670 res=0 errno=0 [ 153.335909][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.338881][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.349723][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.413280][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.428878][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.590596][ T59] Bluetooth: hci5: command tx timeout [ 157.680471][ T59] Bluetooth: hci5: command tx timeout [ 159.750409][ T59] Bluetooth: hci5: command tx timeout [ 160.869193][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.894969][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.899019][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.918627][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.919547][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.836742][ T59] Bluetooth: hci5: command tx timeout [ 163.039251][ T59] Bluetooth: hci6: command tx timeout [ 163.325837][ T6108] lo speed is unknown, defaulting to 1000 [ 163.652177][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652218][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652253][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652281][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652305][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652329][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652355][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652381][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652408][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.652435][ T5711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.727046][ T3334] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.732136][ T66] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.744254][ T55] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.840023][ T5711] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [ūk] on syz1 [ 164.178658][ T6261] netlink: 'syz.3.140': attribute type 10 has an invalid length. [ 164.313312][ T6260] bond0: (slave syz_tun): Releasing backup interface [ 164.332585][ T6257] fido_id[6257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.110695][ T59] Bluetooth: hci6: command tx timeout [ 165.232233][ T6284] Bluetooth: ISO socket layer initialized [ 165.450569][ T6108] lo speed is unknown, defaulting to 1000 [ 166.127280][ T6301] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 166.127559][ T6301] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 166.222106][ T3382] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.028500][ T3382] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.151117][ T6299] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.190513][ T59] Bluetooth: hci6: command tx timeout [ 167.384315][ T3382] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.686177][ T6241] lo speed is unknown, defaulting to 1000 [ 167.881714][ T3382] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.739988][ T6346] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.168'. [ 169.270453][ T59] Bluetooth: hci6: command tx timeout [ 169.688173][ T6246] lo speed is unknown, defaulting to 1000 [ 170.145827][ T6362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'. [ 170.145852][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.174'. [ 170.145872][ T6362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'. [ 170.571821][ T6364] Character devices: [ 170.571821][ T6364] 1 mem [ 170.571821][ T6364] 2 pty [ 170.571821][ T6364] 3 ttyp [ 170.571821][ T6364] 4 /dev/vc/0 [ 170.571821][ T6364] 4 tty [ 170.571821][ T6364] 4 ttyS [ 170.571821][ T6364] 5 /dev/tty [ 170.571821][ T6364] 5 /dev/console [ 170.571821][ T6364] 5 /dev/ptmx [ 170.571821][ T6364] 5 ttyprintk [ 170.571821][ T6364] 7 vcs [ 170.571821][ T6364] 9 st [ 170.571821][ T6364] 10 misc [ 170.571821][ T6364] 13 input [ 170.571821][ T6364] 14 sound [ 170.571821][ T6364] 21 sg [ 170.571821][ T6364] 29 fb [ 170.571821][ T6364] 81 video4linux [ 170.571821][ T6364] 89 i2c [ 170.571821][ T6364] 90 mtd [ 170.571821][ T6364] 98 comedi [ 170.571821][ T6364] 108 ppp [ 170.571821][ T6364] 116 alsa [ 170.571821][ T6364] 128 ptm [ 170.571821][ T6364] 136 pts [ 170.571821][ T6364] 152 aoechr [ 170.571821][ T6364] 166 ttyACM [ 170.571821][ T6364] 180 usb [ 170.571821][ T6364] 188 ttyUSB [ 170.571821][ T6364] 189 usb_device [ 170.571821][ T6364] 202 cpu/msr [ 170.571821][ T6364] 203 cpu/cpuid [ 170.571821][ T6364] 212 DVB [ 170.571821][ T6364] 216 rfcomm [ 170.571821][ T6364] 226 drm [ 170.571821][ T6364] 231 infiniband_mad [ 170.571821][ T6364] 231 infiniband_verbs [ 170.571821][ T6364] 234 mei [ 170.571821][ T6364] 235 ublk-char [ 170.571821][ T6364] 236 ttynull [ 170.571821][ T6364] 237 noz [ 170.571821][ T6364] 238 gsmtty [ 170.571821][ T6364] 239 bsg [ 170.571821][ T6364] 240 pvfs2-req [ 170.571821][ T6364] 241 counter [ 170.571821][ T6364] 242 tee [ 170.571821][ T6364] 243 iio [ 170.571821][ T6364] 244 ptp [ 170.571821][ T6364] 245 pps [ 170.571821][ T6364] 246 cec [ 170.571821][ T6364] 247 media [ 170.571821][ T6364] 248 rtc [ 170.571821][ T6364] 249 dma_heap [ 170.571821][ T6364] 250 dax [ 170.571821][ T6364] 251 dimmctl [ 170.571821][ T6364] 252 ndctl [ 170.571821][ T6364] 253 tpm [ 170.571821][ T6364] 254 gpiochip [ 170.571821][ T6364] 493 hidg [ 170.571821][ T6364] 494 gnss [ 170.720411][ T6364] batadv_slave_0: entered promiscuous mode [ 170.726712][ T6363] batadv_slave_0: left promiscuous mode [ 171.792569][ T3382] bridge_slave_1: left allmulticast mode [ 171.792760][ T3382] bridge_slave_1: left promiscuous mode [ 171.876281][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.108796][ T3382] bridge_slave_0: left allmulticast mode [ 172.108836][ T3382] bridge_slave_0: left promiscuous mode [ 172.125939][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.575106][ T6402] netlink: 'syz.3.188': attribute type 61 has an invalid length. [ 174.622185][ T3382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.723106][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.884660][ T3382] bond0 (unregistering): Released all slaves [ 175.212324][ T6406] netlink: 'syz.2.189': attribute type 10 has an invalid length. [ 175.230817][ T6108] lo speed is unknown, defaulting to 1000 [ 175.271373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.273734][ T1439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.362242][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.382473][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.677839][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.318362][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 176.734332][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.035806][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.234737][ T6433] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 177.248417][ T6108] lo speed is unknown, defaulting to 1000 [ 177.752117][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.112055][ T6450] netlink: 104 bytes leftover after parsing attributes in process `syz.4.204'. [ 178.793100][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.214284][ T6481] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 179.552068][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 179.752819][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.849706][ T6494] netlink: 104 bytes leftover after parsing attributes in process `syz.3.215'. [ 180.872017][ T5718] net_ratelimit: 3 callbacks suppressed [ 180.872073][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.930573][ T3382] hsr_slave_0: left promiscuous mode [ 180.973191][ T3382] hsr_slave_1: left promiscuous mode [ 180.974141][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.974212][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.006150][ T6520] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 181.022368][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.022398][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.129098][ T3382] veth1_macvtap: left promiscuous mode [ 181.129297][ T3382] veth0_macvtap: left promiscuous mode [ 181.129497][ T3382] veth1_vlan: left promiscuous mode [ 181.158274][ T3382] veth0_vlan: left promiscuous mode [ 181.910657][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.981171][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 182.044432][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 182.390731][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 182.402232][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 182.404204][ T5597] Bluetooth: hci2: hardware error 0x00 [ 182.671294][ T6524] netlink: 104 bytes leftover after parsing attributes in process `syz.3.226'. [ 182.874484][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.950880][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.093842][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.096506][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.096687][ T6241] bridge_slave_0: entered allmulticast mode [ 183.128867][ T6241] bridge_slave_0: entered promiscuous mode [ 183.187659][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.187789][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.188014][ T6241] bridge_slave_1: entered allmulticast mode [ 183.190098][ T6241] bridge_slave_1: entered promiscuous mode [ 183.764995][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.821958][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.998497][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.215748][ T6241] team0: Port device team_slave_0 added [ 184.242041][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.417758][ T6241] team0: Port device team_slave_1 added [ 184.463737][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.463966][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.464237][ T6246] bridge_slave_0: entered allmulticast mode [ 184.492000][ T6246] bridge_slave_0: entered promiscuous mode [ 184.588874][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.589046][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.589237][ T6246] bridge_slave_1: entered allmulticast mode [ 184.617646][ T6246] bridge_slave_1: entered promiscuous mode [ 184.710652][ T5597] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 184.759681][ T6570] netlink: 104 bytes leftover after parsing attributes in process `syz.4.237'. [ 184.825572][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.825590][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.825618][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.927768][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.927786][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.927814][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.997731][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.031775][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.090849][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.330177][ T6246] team0: Port device team_slave_0 added [ 185.748876][ T3382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.809942][ T6246] team0: Port device team_slave_1 added [ 185.825665][ T6241] hsr_slave_0: entered promiscuous mode [ 185.826757][ T6241] hsr_slave_1: entered promiscuous mode [ 185.827641][ T6241] debugfs: 'hsr0' already exists in 'hsr' [ 185.827670][ T6241] Cannot create hsr debugfs directory [ 185.868251][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 185.910632][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.090566][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.168458][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.168477][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.168505][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.237688][ T6599] netlink: 104 bytes leftover after parsing attributes in process `syz.2.246'. [ 186.467910][ T3382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.567215][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.567232][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.567261][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.796162][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.005807][ T3382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.106926][ T6246] hsr_slave_0: entered promiscuous mode [ 187.108007][ T6246] hsr_slave_1: entered promiscuous mode [ 187.108722][ T6246] debugfs: 'hsr0' already exists in 'hsr' [ 187.108746][ T6246] Cannot create hsr debugfs directory [ 187.112304][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.441509][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.819551][ T3382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.915325][ T6629] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.960382][ T6629] md: array md0 already initialised! [ 188.151229][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.190532][ T5595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.253942][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.112094][ T3382] bridge_slave_1: left allmulticast mode [ 190.112130][ T3382] bridge_slave_1: left promiscuous mode [ 190.112409][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.231019][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.286267][ T3382] bridge_slave_0: left allmulticast mode [ 190.286301][ T3382] bridge_slave_0: left promiscuous mode [ 190.286527][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.386775][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.414961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.733662][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 191.048209][ T6708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.271051][ T5784] net_ratelimit: 1 callbacks suppressed [ 191.271070][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.574117][ T443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.574421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.997122][ T3382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.045065][ T3382] bond0 (unregistering): Released all slaves [ 192.310850][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.353965][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.591973][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.843067][ T6241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.961393][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.077353][ T6241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.336630][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.365936][ T6241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.393436][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.482423][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482498][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.607650][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.929579][ T6787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.313'. [ 195.077493][ T6790] netlink: 104 bytes leftover after parsing attributes in process `syz.4.314'. [ 195.430522][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.512475][ T6241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.616248][ T6241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.366882][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 196.397831][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.470542][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.630717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.788083][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 196.961666][ T6824] vlan2: entered promiscuous mode [ 196.961691][ T6824] hsr0: entered promiscuous mode [ 196.962034][ T6824] vlan2: entered allmulticast mode [ 196.962051][ T6824] hsr0: entered allmulticast mode [ 196.962065][ T6824] hsr_slave_0: entered allmulticast mode [ 196.962088][ T6824] hsr_slave_1: entered allmulticast mode [ 197.083734][ T6827] hsr_slave_0: left promiscuous mode [ 197.127362][ T6827] hsr_slave_1: left promiscuous mode [ 197.267557][ T6833] netlink: 104 bytes leftover after parsing attributes in process `syz.3.326'. [ 197.336991][ T6835] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 197.337080][ T6835] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.510767][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.692325][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.747503][ T6246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.783856][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.921141][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.921166][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.984399][ T3382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.984427][ T3382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.271697][ T3382] veth1_macvtap: left promiscuous mode [ 198.271810][ T3382] veth0_macvtap: left promiscuous mode [ 198.272965][ T3382] veth1_vlan: left promiscuous mode [ 198.273123][ T3382] veth0_vlan: left promiscuous mode [ 198.448884][ T6852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.627877][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.677745][ T6858] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 198.677830][ T6858] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 198.902020][ T6862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.308801][ T6869] netlink: 104 bytes leftover after parsing attributes in process `syz.4.341'. [ 199.670668][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.121276][ T3382] team0 (unregistering): Port device team_slave_1 removed [ 200.243273][ T3382] team0 (unregistering): Port device team_slave_0 removed [ 200.710899][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.711082][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.109955][ T1439] smc: removing ib device sz1 [ 201.375371][ T6246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.435370][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.462282][ T5698] lo speed is unknown, defaulting to 1000 [ 201.462338][ T5698] sz1: Port: 1 Link DOWN [ 201.674021][ T6882] bond0: (slave syz_tun): Releasing backup interface [ 201.691641][ T1439] smbdirect: ib_dev[sz1] removed [ 201.752826][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.951772][ T6246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.055770][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.084145][ T6246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.329686][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.794040][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.817659][ T6922] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 203.442453][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 203.751451][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.826804][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.833485][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.192751][ T6241] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.295512][ T6951] futex_wake_op: syz.2.368 tries to shift op by 144; fix this program [ 204.360087][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.376913][ T443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.465168][ T6954] netlink: 'syz.4.369': attribute type 10 has an invalid length. [ 204.583404][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.583529][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.610925][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.871053][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.107801][ T6246] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.344160][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.344309][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.466413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.466561][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.553991][ T6967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.913474][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.991370][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.469051][ T6997] netlink: 104 bytes leftover after parsing attributes in process `syz.4.382'. [ 206.630623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.821043][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.950915][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.784773][ T5251] 8021q: adding VLAN 0 to HW filter on device eth5 [ 208.022343][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.467765][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.588882][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.076246][ T7050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 209.079585][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.114077][ T7062] netlink: 104 bytes leftover after parsing attributes in process `syz.3.396'. [ 209.831867][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.060148][ T6241] veth0_vlan: entered promiscuous mode [ 210.158899][ T6241] veth1_vlan: entered promiscuous mode [ 210.272282][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.483848][ T6246] veth0_vlan: entered promiscuous mode [ 210.616126][ T5251] 8021q: adding VLAN 0 to HW filter on device eth6 [ 210.631280][ T6241] veth0_macvtap: entered promiscuous mode [ 210.694979][ T6241] veth1_macvtap: entered promiscuous mode [ 210.731936][ T6246] veth1_vlan: entered promiscuous mode [ 210.856103][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.887862][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.079048][ T6246] veth0_macvtap: entered promiscuous mode [ 211.190605][ T6246] veth1_macvtap: entered promiscuous mode [ 211.402075][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.687385][ T3424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.834475][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.939656][ T7107] netlink: 104 bytes leftover after parsing attributes in process `syz.3.410'. [ 212.049947][ T7110] netlink: 104 bytes leftover after parsing attributes in process `syz.3.410'. [ 212.121256][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.157002][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.158282][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.186024][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.198473][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.302847][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.302867][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.430885][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.550942][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.645589][ T3424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.872113][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.931634][ T3424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.934018][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156983][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.157005][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.591696][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.887638][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.990074][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.045812][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.050189][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.066240][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.067985][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.242374][ T59] Bluetooth: hci0: command tx timeout [ 214.244025][ T5251] 8021q: adding VLAN 0 to HW filter on device eth7 [ 214.640645][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.005210][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.048496][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.066017][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.086100][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.088939][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.342702][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.621931][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.674397][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.930738][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.966878][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.985688][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.230479][ T59] Bluetooth: hci1: command tx timeout [ 216.320716][ T59] Bluetooth: hci0: command tx timeout [ 216.711094][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.351167][ T59] Bluetooth: hci2: command tx timeout [ 217.548323][ T443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.548346][ T443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.746112][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.751196][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.166650][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.240886][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.240929][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.316831][ T59] Bluetooth: hci1: command tx timeout [ 218.392090][ T59] Bluetooth: hci0: command tx timeout [ 218.439172][ T7171] netlink: 104 bytes leftover after parsing attributes in process `syz.3.419'. [ 218.496922][ T7174] netlink: 104 bytes leftover after parsing attributes in process `syz.3.419'. [ 218.792223][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.961992][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.205515][ T7186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.442545][ T59] Bluetooth: hci2: command tx timeout [ 219.838481][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.026707][ T7208] netlink: 196 bytes leftover after parsing attributes in process `syz.3.426'. [ 220.213187][ T5251] 8021q: adding VLAN 0 to HW filter on device eth8 [ 220.390394][ T59] Bluetooth: hci1: command tx timeout [ 220.419309][ T7215] netlink: 104 bytes leftover after parsing attributes in process `syz.6.428'. [ 220.470664][ T59] Bluetooth: hci0: command tx timeout [ 220.472779][ T7217] netlink: 104 bytes leftover after parsing attributes in process `syz.6.428'. [ 220.538245][ T12] bridge_slave_1: left allmulticast mode [ 220.538273][ T12] bridge_slave_1: left promiscuous mode [ 220.538528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.641744][ T12] bridge_slave_0: left allmulticast mode [ 220.641771][ T12] bridge_slave_0: left promiscuous mode [ 220.647634][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.362038][ T7219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.510403][ T59] Bluetooth: hci2: command tx timeout [ 221.661266][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.721341][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.763410][ T12] bond0 (unregistering): Released all slaves [ 221.890847][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 221.890872][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.432'. [ 221.890900][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 222.069337][ T5725] syz2: Port: 1 Link DOWN [ 222.122518][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 222.122542][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.432'. [ 222.471443][ T59] Bluetooth: hci1: command tx timeout [ 222.782897][ T7255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.153554][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.153766][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.154016][ T7111] bridge_slave_0: entered allmulticast mode [ 223.166271][ T7111] bridge_slave_0: entered promiscuous mode [ 223.285909][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.286063][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.286311][ T7111] bridge_slave_1: entered allmulticast mode [ 223.319217][ T7111] bridge_slave_1: entered promiscuous mode [ 223.605808][ T59] Bluetooth: hci2: command tx timeout [ 223.991227][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.061986][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.214493][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.398067][ T7300] overlayfs: failed to resolve './bus': -2 [ 224.479809][ T12] hsr_slave_0: left promiscuous mode [ 224.512713][ T12] hsr_slave_1: left promiscuous mode [ 224.515451][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.515477][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.565183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.565213][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.872166][ T12] veth1_macvtap: left promiscuous mode [ 224.872279][ T12] veth0_macvtap: left promiscuous mode [ 224.875863][ T12] veth1_vlan: left promiscuous mode [ 224.876062][ T12] veth0_vlan: left promiscuous mode [ 225.037321][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.901862][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.952704][ T12] team0 (unregistering): Port device team_slave_0 removed [ 226.080070][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.090116][ T55] smbdirect: ib_dev[syz2] removed [ 226.611652][ T7111] team0: Port device team_slave_0 added [ 226.630691][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.687144][ T7111] team0: Port device team_slave_1 added [ 226.810714][ T5725] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.842478][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.961764][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 226.964254][ T5725] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 226.967102][ T5725] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 226.967130][ T5725] usb 4-1: config 179 has no interface number 0 [ 226.967177][ T5725] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 226.967206][ T5725] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 226.967236][ T5725] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 226.967264][ T5725] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 226.967292][ T5725] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 226.967322][ T5725] usb 4-1: config 179 interface 65 has no altsetting 0 [ 226.967357][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.098458][ T7334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.111854][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.152288][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.152508][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.152733][ T7137] bridge_slave_0: entered allmulticast mode [ 227.158235][ T7137] bridge_slave_0: entered promiscuous mode [ 227.172925][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.172974][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.173204][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.413278][ T5725] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 227.501628][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.501729][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.501952][ T7137] bridge_slave_1: entered allmulticast mode [ 227.544460][ T7137] bridge_slave_1: entered promiscuous mode [ 227.579714][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.579729][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.579750][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.806486][ T4941] input input5: unable to receive magic message: -110 [ 228.157093][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.233418][ T4941] input input5: unable to receive magic message: -32 [ 228.434759][ T6247] input input5: unable to receive magic message: -32 [ 228.500639][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 228.531061][ T4941] input input5: unable to receive magic message: -32 [ 228.694984][ T4941] input input5: unable to receive magic message: -32 [ 228.728971][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 228.747057][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.811704][ T4941] input input5: unable to receive magic message: -32 [ 229.089868][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.220515][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.565372][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.565571][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.566025][ T7149] bridge_slave_0: entered allmulticast mode [ 229.601919][ T7149] bridge_slave_0: entered promiscuous mode [ 229.671295][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.722491][ T5784] usb 4-1: USB disconnect, device number 5 [ 229.722540][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 229.741367][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.925258][ T7111] hsr_slave_0: entered promiscuous mode [ 229.940094][ T7111] hsr_slave_1: entered promiscuous mode [ 229.949955][ T7111] debugfs: 'hsr0' already exists in 'hsr' [ 229.949981][ T7111] Cannot create hsr debugfs directory [ 230.028368][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.028470][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.028640][ T7149] bridge_slave_1: entered allmulticast mode [ 230.083360][ T7149] bridge_slave_1: entered promiscuous mode [ 230.151475][ T7137] team0: Port device team_slave_0 added [ 230.154054][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.233349][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.425372][ T7137] team0: Port device team_slave_1 added [ 230.791429][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.962474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.278233][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.336064][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.462240][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.600937][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.686814][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.703780][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.704700][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.704714][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.704742][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.843066][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.843084][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.843112][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.074115][ T7422] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 232.075117][ T7422] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 232.579687][ T7149] team0: Port device team_slave_0 added [ 232.595820][ T7432] __nla_validate_parse: 2 callbacks suppressed [ 232.595839][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 233.085612][ T7149] team0: Port device team_slave_1 added [ 233.120865][ T7432] hsr_slave_0: left promiscuous mode [ 233.160405][ T7432] hsr_slave_1: left promiscuous mode [ 233.949320][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.949338][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.949366][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.192512][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.278219][ T7137] hsr_slave_0: entered promiscuous mode [ 234.289480][ T7137] hsr_slave_1: entered promiscuous mode [ 234.344515][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.344533][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.344562][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.418371][ T31] net_ratelimit: 2 callbacks suppressed [ 234.418391][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.619375][ T7459] md: array md0 already initialised! [ 234.632222][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.785954][ T7462] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 234.786030][ T7462] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.142712][ T7467] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 235.203651][ T7467] md: array md0 already initialised! [ 235.313249][ T7149] hsr_slave_0: entered promiscuous mode [ 235.353926][ T7149] hsr_slave_1: entered promiscuous mode [ 235.355764][ T7149] debugfs: 'hsr0' already exists in 'hsr' [ 235.355791][ T7149] Cannot create hsr debugfs directory [ 235.434345][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.099956][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.119117][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.460553][ T7488] md: array md0 already initialised! [ 236.471045][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.650828][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.178719][ T7111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.298174][ T7111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.471949][ T12] bridge_slave_1: left allmulticast mode [ 237.471986][ T12] bridge_slave_1: left promiscuous mode [ 237.472272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.510940][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.536644][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.629465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.872210][ T12] bridge_slave_0: left allmulticast mode [ 237.878151][ T12] bridge_slave_0: left promiscuous mode [ 237.878395][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.007701][ T7515] netlink: 104 bytes leftover after parsing attributes in process `syz.3.495'. [ 238.065851][ T7516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.495'. [ 238.861403][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.951201][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.993587][ T7521] md: array md0 already initialised! [ 238.998297][ T12] bond0 (unregistering): Released all slaves [ 239.060777][ T7111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.174939][ T7111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.452287][ T5251] 8021q: adding VLAN 0 to HW filter on device eth9 [ 239.453595][ T7111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.495760][ T7111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.552217][ T7111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.600961][ T5718] net_ratelimit: 16 callbacks suppressed [ 239.600977][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.635803][ T7111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.832424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.630969][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.731586][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.118434][ T7569] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.180365][ T7569] md: array md0 already initialised! [ 241.233709][ T7570] md: array md0 already initialised! [ 241.560591][ T1439] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.560627][ T1439] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.620371][ T443] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.661057][ T443] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.701244][ T55] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.710505][ T55] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.711481][ T55] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.711508][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.711544][ T55] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.711578][ T55] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.880010][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.887561][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.091650][ T7589] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.180620][ T12] hsr_slave_0: left promiscuous mode [ 242.221823][ T12] hsr_slave_1: left promiscuous mode [ 242.222782][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.222802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.281733][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.281761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.663381][ T12] veth1_macvtap: left promiscuous mode [ 242.663495][ T12] veth0_macvtap: left promiscuous mode [ 242.665305][ T12] veth1_vlan: left promiscuous mode [ 242.665521][ T12] veth0_vlan: left promiscuous mode [ 242.770425][ T5711] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 242.942329][ T5711] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.954886][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.972051][ T5711] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 242.972094][ T5711] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.972146][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.972175][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.972203][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.972232][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 242.972260][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.972289][ T5711] usb 4-1: config 168 interface 0 has no altsetting 0 [ 242.989137][ T5711] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 242.989181][ T5711] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.989224][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.989252][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.989279][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 242.989306][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 242.989333][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.989361][ T5711] usb 4-1: config 168 interface 0 has no altsetting 0 [ 243.073461][ T5711] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 243.073504][ T5711] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 243.073542][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 243.073569][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.073595][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 243.073623][ T5711] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 243.073649][ T5711] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 243.073675][ T5711] usb 4-1: config 168 interface 0 has no altsetting 0 [ 243.178412][ T5711] usb 4-1: string descriptor 0 read error: -22 [ 243.178571][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.335851][ T5711] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 243.377250][ T7619] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.519750][ T5711] usb 4-1: USB disconnect, device number 6 [ 243.990526][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.361911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 244.421614][ T12] team0 (unregistering): Port device team_slave_0 removed [ 244.756015][ T5251] 8021q: adding VLAN 0 to HW filter on device eth10 [ 244.964110][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.032881][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.064153][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.223882][ T7634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.247829][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.328336][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.328473][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.352524][ T7635] netlink: 104 bytes leftover after parsing attributes in process `syz.3.532'. [ 245.445613][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.445760][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.695305][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.070934][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.950505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.059343][ T5251] 8021q: adding VLAN 0 to HW filter on device eth11 [ 247.111148][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.152169][ T7149] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.257562][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.303848][ T7149] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.339787][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.361168][ T7149] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.398695][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.441153][ T7680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 247.704084][ T7149] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 247.777792][ T7149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.030493][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.152115][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.254051][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.513487][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.727284][ T7137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.835951][ T7137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.849422][ T7137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.873796][ T7719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.981437][ T7719] md: array md0 already has disks! [ 248.987415][ T7137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.028328][ T7137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.101155][ T7137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.109091][ T7137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.181919][ T7137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.286768][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.530808][ T7739] netlink: 104 bytes leftover after parsing attributes in process `syz.3.554'. [ 249.737215][ T7742] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.777250][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.849289][ T5251] 8021q: adding VLAN 0 to HW filter on device eth12 [ 249.898160][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.967705][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.967882][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.074349][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.074520][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.146461][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.310608][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.376112][ T7111] veth0_vlan: entered promiscuous mode [ 250.442999][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.473737][ T7757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.531633][ T7757] md: array md0 already has disks! [ 250.575044][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.575262][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.640039][ T7111] veth1_vlan: entered promiscuous mode [ 250.830788][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.831305][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.276970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.330128][ T7111] veth0_macvtap: entered promiscuous mode [ 251.356202][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.383363][ T7779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.458540][ T7111] veth1_macvtap: entered promiscuous mode [ 251.577442][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.621246][ T5783] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 251.632992][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.823199][ T5783] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 251.842266][ T5783] usb 4-1: config index 0 descriptor too short (expected 71, got 53) [ 251.842331][ T5783] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.842355][ T5783] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 251.902367][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.902397][ T5783] usb 4-1: Product: syz [ 251.902413][ T5783] usb 4-1: Manufacturer: syz [ 251.902429][ T5783] usb 4-1: SerialNumber: syz [ 252.081321][ T443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.400102][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.567786][ T5783] usb 4-1: USB disconnect, device number 7 [ 252.920757][ T55] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.921391][ T55] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.923473][ T55] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.944083][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.944106][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.279217][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.290122][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.290142][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.433379][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.224084][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.310688][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.471295][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.645671][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.111672][ T7842] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.511898][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.909157][ T7149] veth0_vlan: entered promiscuous mode [ 255.913524][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913592][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.999863][ T7860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.031041][ T7149] veth1_vlan: entered promiscuous mode [ 256.487716][ T7137] veth0_vlan: entered promiscuous mode [ 256.518025][ T7149] veth0_macvtap: entered promiscuous mode [ 256.550663][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.707842][ T7137] veth1_vlan: entered promiscuous mode [ 256.802361][ T7149] veth1_macvtap: entered promiscuous mode [ 257.029516][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.151850][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.303084][ T7886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.360608][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.397208][ T7137] veth0_macvtap: entered promiscuous mode [ 257.570614][ T7137] veth1_macvtap: entered promiscuous mode [ 257.592470][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.041076][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.142172][ T3424] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.142597][ T3424] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.210090][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.488902][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.633470][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.746314][ T443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.746335][ T443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.695317][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.695339][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.695858][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.851342][ T7912] md: array md0 already has disks! [ 260.100936][ T3334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.102367][ T3334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.241010][ T7918] futex_wake_op: syz.6.595 tries to shift op by 144; fix this program [ 260.493222][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.501434][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.501455][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.669979][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.712514][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.008818][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.042143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.067977][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.349325][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.349348][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.520551][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.750917][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.400421][ T5698] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 262.590319][ T5698] usb 9-1: Using ep0 maxpacket: 8 [ 262.591149][ T5698] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 262.592663][ T5698] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.592687][ T5698] usb 9-1: config 179 has no interface number 0 [ 262.592745][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 262.592773][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 262.592801][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 262.592829][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 262.592858][ T5698] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 262.592888][ T5698] usb 9-1: config 179 interface 65 has no altsetting 0 [ 262.592919][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.727426][ T7952] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 262.792076][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.983000][ T7968] futex_wake_op: syz.7.610 tries to shift op by 144; fix this program [ 263.132451][ T5711] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 263.320336][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 263.322496][ T5711] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 263.462318][ T5711] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.462350][ T5711] usb 6-1: config 179 has no interface number 0 [ 263.462412][ T5711] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 263.462441][ T5711] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 263.462471][ T5711] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.462498][ T5711] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 263.462526][ T5711] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.462583][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.754185][ T7960] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 263.936654][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.110004][ T5698] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input6 [ 264.402801][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.560607][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.797616][ T4941] input input6: unable to receive magic message: -71 [ 265.975841][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.460640][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.821986][ T4941] input input6: unable to receive magic message: -71 [ 267.355236][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.936357][ T5698] usb 9-1: USB disconnect, device number 2 [ 267.936455][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.967929][ T36] usb 6-1: USB disconnect, device number 2 [ 267.967978][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.968043][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.968855][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.152667][ T7992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.390467][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.221295][ T5698] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 269.380498][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.433006][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.438649][ T8012] syz.5.626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 269.438704][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.5.626 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 269.438747][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.438773][ T8012] Call Trace: [ 269.438783][ T8012] [ 269.438793][ T8012] dump_stack_lvl+0xe8/0x150 [ 269.438839][ T8012] dump_header+0xd3/0x4b0 [ 269.438873][ T8012] oom_kill_process+0x3ab/0x970 [ 269.438914][ T8012] out_of_memory+0x1064/0x1480 [ 269.438963][ T8012] ? __pfx_out_of_memory+0x10/0x10 [ 269.438998][ T8012] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 269.439037][ T8012] ? _mutex_lock_killable+0x152/0x1d0 [ 269.439066][ T8012] ? try_charge_memcg+0xbbe/0x15c0 [ 269.439099][ T8012] try_charge_memcg+0xc7d/0x15c0 [ 269.439144][ T8012] ? __pfx_try_charge_memcg+0x10/0x10 [ 269.439182][ T8012] ? percpu_ref_tryget+0x15/0x180 [ 269.439224][ T8012] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 269.439253][ T8012] __memcg_kmem_charge_page+0x36c/0x5a0 [ 269.439277][ T8012] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 269.439304][ T8012] __alloc_frozen_pages_noprof+0x1be/0x380 [ 269.439340][ T8012] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.439375][ T8012] ? __pfx_policy_nodemask+0x10/0x10 [ 269.439405][ T8012] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 269.439449][ T8012] alloc_pages_mpol+0xce/0x280 [ 269.439484][ T8012] alloc_pages_noprof+0xd2/0x2f0 [ 269.439518][ T8012] __vmalloc_node_range_noprof+0xe2b/0x1730 [ 269.439585][ T8012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.439615][ T8012] ? hash_ip_create+0x79f/0x14c0 [ 269.439641][ T8012] ? rcu_is_watching+0x16/0xb0 [ 269.439675][ T8012] ? hash_ip_create+0x79f/0x14c0 [ 269.439699][ T8012] ? rcu_is_watching+0x16/0xb0 [ 269.439732][ T8012] ? hash_ip_create+0x79f/0x14c0 [ 269.439756][ T8012] __kvmalloc_node_noprof+0x658/0x8a0 [ 269.439787][ T8012] ? hash_ip_create+0x79f/0x14c0 [ 269.439811][ T8012] ? __kmalloc_noprof+0x443/0x780 [ 269.439837][ T8012] ? hash_ip_create+0x731/0x14c0 [ 269.439861][ T8012] ? hash_ip_create+0x79f/0x14c0 [ 269.439894][ T8012] hash_ip_create+0x79f/0x14c0 [ 269.439938][ T8012] ? __pfx_hash_ip_create+0x10/0x10 [ 269.439969][ T8012] ? ip_set_create+0x4f4/0x1a40 [ 269.440000][ T8012] ? __pfx_hash_ip_create+0x10/0x10 [ 269.440027][ T8012] ip_set_create+0xae7/0x1a40 [ 269.440059][ T8012] ? ip_set_create+0x4f4/0x1a40 [ 269.440106][ T8012] ? __pfx_ip_set_create+0x10/0x10 [ 269.440161][ T8012] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 269.440201][ T8012] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 269.440247][ T8012] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 269.440280][ T8012] ? unwind_get_return_address+0x4d/0x90 [ 269.440305][ T8012] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 269.440361][ T8012] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 269.440450][ T8012] netlink_rcv_skb+0x226/0x4a0 [ 269.440484][ T8012] ? __lock_acquire+0x683/0x2ce0 [ 269.440509][ T8012] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 269.440546][ T8012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.440606][ T8012] ? bpf_lsm_capable+0x9/0x20 [ 269.440631][ T8012] ? security_capable+0x7e/0x2c0 [ 269.440671][ T8012] nfnetlink_rcv+0x2b9/0x28d0 [ 269.440704][ T8012] ? __local_bh_enable+0x1e3/0x2f0 [ 269.440739][ T8012] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 269.440767][ T8012] ? lockdep_hardirqs_on+0x7b/0x110 [ 269.440804][ T8012] ? __dev_queue_xmit+0x294/0x3880 [ 269.440833][ T8012] ? __dev_queue_xmit+0x1ee9/0x3880 [ 269.440870][ T8012] ? __dev_queue_xmit+0x294/0x3880 [ 269.440900][ T8012] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 269.440944][ T8012] ? __pfx___dev_queue_xmit+0x10/0x10 [ 269.440975][ T8012] ? ref_tracker_free+0x668/0x820 [ 269.441009][ T8012] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.441040][ T8012] ? __asan_memcpy+0x40/0x70 [ 269.441060][ T8012] ? __skb_clone+0x5c/0x6c0 [ 269.441089][ T8012] ? __skb_clone+0x449/0x6c0 [ 269.441119][ T8012] ? skb_clone+0x246/0x3a0 [ 269.441148][ T8012] ? __netlink_deliver_tap+0x811/0x860 [ 269.441170][ T8012] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.441202][ T8012] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.441225][ T8012] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.441255][ T8012] netlink_unicast+0x7f5/0x990 [ 269.441302][ T8012] netlink_sendmsg+0x813/0xb40 [ 269.441338][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.441365][ T8012] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 269.441409][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.441432][ T8012] sock_sendmsg_nosec+0x13a/0x180 [ 269.441466][ T8012] ____sys_sendmsg+0x565/0x870 [ 269.441489][ T8012] ? __might_fault+0xaf/0x130 [ 269.441523][ T8012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.441558][ T8012] ? import_iovec+0x73/0xa0 [ 269.441604][ T8012] ___sys_sendmsg+0x2a5/0x360 [ 269.441626][ T8012] ? __lock_acquire+0x683/0x2ce0 [ 269.441656][ T8012] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.441682][ T8012] ? futex_wait+0x2a2/0x390 [ 269.441749][ T8012] ? __fget_files+0x2a/0x420 [ 269.441777][ T8012] ? __fget_files+0x3a8/0x420 [ 269.441818][ T8012] __x64_sys_sendmsg+0x1b7/0x290 [ 269.441846][ T8012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.441894][ T8012] do_syscall_64+0x166/0x520 [ 269.441917][ T8012] ? trace_irq_disable+0x3b/0x140 [ 269.441938][ T8012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.441963][ T8012] ? clear_bhb_loop+0x70/0xc0 [ 269.441992][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.442016][ T8012] RIP: 0033:0x7f70ba6fe0d9 [ 269.442038][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.442058][ T8012] RSP: 002b:00007f70b8956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.442093][ T8012] RAX: ffffffffffffffda RBX: 00007f70ba985fa0 RCX: 00007f70ba6fe0d9 [ 269.442111][ T8012] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 269.442126][ T8012] RBP: 00007f70ba795024 R08: 0000000000000000 R09: 0000000000000000 [ 269.442140][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.442155][ T8012] R13: 00007f70ba986038 R14: 00007f70ba985fa0 R15: 00007ffe6297a718 [ 269.442192][ T8012] [ 269.806357][ T8012] memory: usage 96kB, limit 96kB, failcnt 36 [ 269.806410][ T8012] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 269.806461][ T8012] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 269.806495][ T8012] Memory cgroup stats for [ 270.101876][ T5698] usb 9-1: Using ep0 maxpacket: 8 [ 270.105672][ T5698] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 270.106990][ T5698] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.107032][ T5698] usb 9-1: config 179 has no interface number 0 [ 270.107065][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 270.107086][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 270.107106][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 270.107125][ T5698] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 270.107157][ T5698] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 270.107178][ T5698] usb 9-1: config 179 interface 65 has no altsetting 0 [ 270.107202][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.350408][ T8012] /syz5/test: [ 270.350572][ T8012] cache 0 [ 270.350584][ T8012] rss 0 [ 270.350591][ T8012] shmem 0 [ 270.350599][ T8012] mapped_file 0 [ 270.350606][ T8012] dirty 0 [ 270.350622][ T8012] writeback 0 [ 270.350630][ T8012] workingset_refault_anon 0 [ 270.350638][ T8012] workingset_refault_file 0 [ 270.350647][ T8012] swap 0 [ 270.350654][ T8012] swapcached 0 [ 270.350662][ T8012] pgpgin 0 [ 270.350669][ T8012] pgpgout 0 [ 270.350677][ T8012] pgfault 0 [ 270.350684][ T8012] pgmajfault 0 [ 270.350692][ T8012] inactive_anon 0 [ 270.350700][ T8012] active_anon 0 [ 270.350708][ T8012] inactive_file 0 [ 270.350715][ T8012] active_file 0 [ 270.350723][ T8012] unevictable 0 [ 270.350731][ T8012] hierarchical_memory_limit 98304 [ 270.350741][ T8012] hierarchical_memsw_limit 9223372036854771712 [ 270.350751][ T8012] total_cache 0 [ 270.350758][ T8012] total_rss 0 [ 270.350766][ T8012] total_shmem 0 [ 270.350773][ T8012] total_mapped_file 0 [ 270.350781][ T8012] total_dirty 0 [ 270.350789][ T8012] total_writeback 0 [ 270.350796][ T8012] total_workingset_refault_anon 0 [ 270.350805][ T8012] total_workingset_refault_file 0 [ 270.350814][ T8012] total_swap 0 [ 270.350821][ T8012] total_swapcached 0 [ 270.350828][ T8012] total_pgpgin 0 [ 270.350836][ T8012] total_pgpgout 0 [ 270.350843][ T8012] total_pgfault 0 [ 270.350851][ T8012] total_pgmajfault 0 [ 270.350859][ T8012] total_inactive_anon 0 [ 270.350867][ T8012] total_active_anon 0 [ 270.350875][ T8012] total_inactive_file 0 [ 270.350882][ T8012] total_active_file 0 [ 270.350890][ T8012] total_unevictable 0 [ 270.350911][ T8012] anon_cost 0 [ 270.350920][ T8012] file_cost 0 [ 270.350928][ T8012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.626,pid=8010,uid=0 [ 270.351401][ T8012] Memory cgroup out of memory: Killed process 8010 (syz.5.626) total-vm:102180kB, anon-rss:1416kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 270.473770][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.597975][ T8017] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 271.031073][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.114657][ T5698] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input7 [ 271.225013][ T4941] input input7: unable to receive magic message: -71 [ 271.557664][ T4941] input input7: unable to receive magic message: -71 [ 271.724383][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.882367][ T4941] input input7: unable to receive magic message: -71 [ 272.122505][ T4941] input input7: unable to receive magic message: -71 [ 272.172906][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.172966][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.221101][ T5698] usb 9-1: USB disconnect, device number 3 [ 272.423249][ T8056] overlayfs: missing 'lowerdir' [ 272.712409][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.558437][ T5698] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 273.706339][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.8.650'. [ 273.721972][ T5698] usb 6-1: Using ep0 maxpacket: 8 [ 273.722809][ T5698] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 273.724297][ T5698] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.724324][ T5698] usb 6-1: config 179 has no interface number 0 [ 273.724371][ T5698] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 273.724401][ T5698] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 273.724432][ T5698] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 273.724460][ T5698] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 273.724488][ T5698] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 273.724517][ T5698] usb 6-1: config 179 interface 65 has no altsetting 0 [ 273.724552][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.729263][ T8088] netlink: 104 bytes leftover after parsing attributes in process `syz.8.650'. [ 273.783265][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.902271][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.071234][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.107408][ T8080] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.390168][ T8097] overlayfs: missing 'lowerdir' [ 274.479502][ T5698] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input8 [ 274.683430][ T4941] input input8: unable to receive magic message: -71 [ 274.800359][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 274.806632][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.876598][ T4941] input input8: unable to receive magic message: -71 [ 274.967584][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 275.066383][ T4941] input input8: unable to receive magic message: -71 [ 275.113323][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.798240][ T5698] usb 6-1: USB disconnect, device number 3 [ 275.798354][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.830517][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.168757][ T8128] netlink: 104 bytes leftover after parsing attributes in process `syz.5.664'. [ 276.205764][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 276.578129][ T8133] overlayfs: missing 'lowerdir' [ 276.960603][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.120416][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.137154][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.161557][ T5726] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 278.313923][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 278.317061][ T5726] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 278.342518][ T5726] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 278.342550][ T5726] usb 4-1: config 179 has no interface number 0 [ 278.342594][ T5726] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 278.342619][ T5726] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 278.342648][ T5726] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 278.342675][ T5726] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 278.342701][ T5726] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.342729][ T5726] usb 4-1: config 179 interface 65 has no altsetting 0 [ 278.342775][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.455349][ T8156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.598995][ T5726] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 278.607817][ T8166] netlink: 104 bytes leftover after parsing attributes in process `syz.8.679'. [ 278.690738][ T4941] input input9: unable to receive magic message: -110 [ 278.784942][ T4941] input input9: unable to receive magic message: -32 [ 278.883971][ T8156] input input9: unable to receive magic message: -32 [ 278.979880][ T4941] input input9: unable to receive magic message: -32 [ 279.260393][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.078964][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.686'. [ 280.196293][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.236226][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.333930][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.368835][ T8103] input input9: unable to receive magic message: -32 [ 281.155484][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 281.270355][ T5718] usb 4-1: USB disconnect, device number 8 [ 281.270864][ T8190] hsr_slave_0: left promiscuous mode [ 281.350569][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.355914][ T8190] hsr_slave_1: left promiscuous mode [ 282.225546][ T8217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.694'. [ 282.390579][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.183740][ T5726] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 283.270710][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.340312][ T5726] usb 9-1: Using ep0 maxpacket: 8 [ 283.341164][ T5726] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 283.345291][ T5726] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 283.345319][ T5726] usb 9-1: config 179 has no interface number 0 [ 283.345368][ T5726] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 283.345399][ T5726] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 283.345430][ T5726] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 283.345459][ T5726] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 283.345488][ T5726] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 283.345518][ T5726] usb 9-1: config 179 interface 65 has no altsetting 0 [ 283.345552][ T5726] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.472343][ T8234] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 283.523711][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.593308][ T5726] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input10 [ 283.595476][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 283.680817][ T4941] input input10: unable to receive magic message: -110 [ 283.835338][ T4941] input input10: unable to receive magic message: -32 [ 284.026687][ T4941] input input10: unable to receive magic message: -32 [ 284.170948][ T4941] input input10: unable to receive magic message: -32 [ 284.470733][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.496997][ T8260] netlink: 104 bytes leftover after parsing attributes in process `syz.6.708'. [ 284.746981][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.763851][ T4941] input input10: unable to receive magic message: -32 [ 285.113492][ T4941] input input10: unable to receive magic message: -32 [ 285.397794][ T4941] input input10: unable to receive magic message: -32 [ 285.455313][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.510956][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.993935][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.088264][ T10] usb 9-1: USB disconnect, device number 4 [ 286.088383][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 286.323067][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.474388][ T8286] futex_wake_op: syz.3.715 tries to shift op by 144; fix this program [ 286.551051][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.108293][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.720'. [ 287.151460][ T8298] netlink: 104 bytes leftover after parsing attributes in process `syz.7.720'. [ 287.221224][ T8299] netlink: 104 bytes leftover after parsing attributes in process `syz.7.720'. [ 287.574754][ T8306] netlink: 104 bytes leftover after parsing attributes in process `syz.8.721'. [ 287.670325][ T7871] net_ratelimit: 1 callbacks suppressed [ 287.670346][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.701986][ T8330] md: array md0 already has disks! [ 288.715565][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.803494][ T8330] md: array md0 already has disks! [ 288.896420][ T8335] futex_wake_op: syz.7.734 tries to shift op by 144; fix this program [ 289.192273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.351251][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.470391][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 289.472636][ T8346] netlink: 104 bytes leftover after parsing attributes in process `syz.3.739'. [ 289.474770][ T8347] netlink: 104 bytes leftover after parsing attributes in process `syz.6.737'. [ 289.545070][ T8348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.739'. [ 289.750522][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.473217][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.696144][ T8370] md: array md0 already has disks! [ 290.723030][ T8372] md: array md0 already has disks! [ 290.790560][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.370475][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.752'. [ 291.376667][ T8388] netlink: 104 bytes leftover after parsing attributes in process `syz.7.752'. [ 291.834441][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.922391][ T8398] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 291.941900][ T8398] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 292.146355][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'. [ 292.162662][ T8402] netlink: 104 bytes leftover after parsing attributes in process `syz.5.758'. [ 292.223076][ T8405] netlink: 104 bytes leftover after parsing attributes in process `syz.5.758'. [ 292.627171][ T8412] md: array md0 already has disks! [ 292.690895][ T8412] md: array md0 already has disks! [ 292.870633][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.013053][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.766'. [ 293.014301][ T8427] netlink: 104 bytes leftover after parsing attributes in process `syz.6.766'. [ 293.234541][ T8430] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 293.234615][ T8430] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 293.510521][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.910579][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.414905][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.779'. [ 294.419439][ T8466] netlink: 104 bytes leftover after parsing attributes in process `syz.7.779'. [ 294.430133][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.780'. [ 294.437941][ T8467] netlink: 104 bytes leftover after parsing attributes in process `syz.8.780'. [ 294.509604][ T8469] netlink: 104 bytes leftover after parsing attributes in process `syz.7.779'. [ 294.826027][ T8471] vlan2: entered promiscuous mode [ 294.826052][ T8471] hsr0: entered promiscuous mode [ 294.826383][ T8471] vlan2: entered allmulticast mode [ 294.826399][ T8471] hsr0: entered allmulticast mode [ 294.826413][ T8471] hsr_slave_0: entered allmulticast mode [ 294.826437][ T8471] hsr_slave_1: entered allmulticast mode [ 294.959725][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.590852][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.996431][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.352100][ T8515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.550654][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.831614][ T8528] md: array md0 already has disks! [ 296.881531][ T8528] md: array md0 already has disks! [ 297.065979][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.311927][ T8542] __nla_validate_parse: 8 callbacks suppressed [ 297.311950][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 297.314528][ T8542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.805'. [ 297.366831][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 297.411834][ T8540] vlan2: entered promiscuous mode [ 297.411859][ T8540] hsr0: entered promiscuous mode [ 297.412204][ T8540] vlan2: entered allmulticast mode [ 297.412219][ T8540] hsr0: entered allmulticast mode [ 297.412233][ T8540] hsr_slave_0: entered allmulticast mode [ 297.412256][ T8540] hsr_slave_1: entered allmulticast mode [ 297.880476][ T7871] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 298.030426][ T7871] usb 8-1: Using ep0 maxpacket: 8 [ 298.036280][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.8.811'. [ 298.044499][ T7871] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 298.052843][ T7871] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.052913][ T7871] usb 8-1: config 179 has no interface number 0 [ 298.053036][ T7871] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 298.053112][ T7871] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 298.053198][ T7871] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 298.053273][ T7871] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 298.053355][ T7871] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.053447][ T7871] usb 8-1: config 179 interface 65 has no altsetting 0 [ 298.053517][ T7871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.120564][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.319983][ T8551] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 298.647453][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 298.707876][ T7871] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input11 [ 298.780064][ T8573] netlink: 'syz.6.814': attribute type 10 has an invalid length. [ 298.842164][ T4941] input input11: unable to receive magic message: -71 [ 299.040499][ T8573] syz_tun: entered promiscuous mode [ 299.042698][ T4941] input input11: unable to receive magic message: -71 [ 299.188412][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.819'. [ 299.199499][ T8586] netlink: 104 bytes leftover after parsing attributes in process `syz.8.819'. [ 299.296605][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.328860][ T7871] usb 8-1: USB disconnect, device number 2 [ 299.328967][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 299.334009][ T8588] netlink: 104 bytes leftover after parsing attributes in process `syz.8.819'. [ 299.362532][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.818'. [ 299.380653][ T8589] netlink: 104 bytes leftover after parsing attributes in process `syz.5.818'. [ 299.542616][ T8573] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 299.591263][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.311634][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.490510][ T8621] md: array md0 already has disks! [ 300.514137][ T8623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 300.544205][ T8621] md: array md0 already has disks! [ 300.680378][ T5711] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 300.851600][ T5711] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.855459][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.855511][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.855551][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.913000][ T5711] usb 8-1: config 0 descriptor?? [ 301.360011][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.505679][ T5711] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 301.738233][ T5711] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0002/input/input12 [ 302.112492][ T8653] md: array md0 already has disks! [ 302.112566][ T8657] md: array md0 already has disks! [ 302.391059][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.631636][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.884470][ T8680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.906712][ T8678] __nla_validate_parse: 9 callbacks suppressed [ 302.906733][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.855'. [ 302.908211][ T8678] netlink: 104 bytes leftover after parsing attributes in process `syz.5.855'. [ 302.963402][ T8685] netlink: 104 bytes leftover after parsing attributes in process `syz.5.855'. [ 302.968517][ T5711] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 303.032697][ T8680] md: array md0 already has disks! [ 303.035863][ T5711] usb 8-1: USB disconnect, device number 3 [ 303.100501][ T8688] md: array md0 already has disks! [ 303.141906][ T8688] md: array md0 already has disks! [ 303.184237][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.860'. [ 303.184944][ T8691] netlink: 104 bytes leftover after parsing attributes in process `syz.7.860'. [ 303.341678][ T8689] fido_id[8689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 303.430564][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.812304][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.829065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.829579][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.948426][ T8706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.975118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.363653][ T8720] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.409380][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.874'. [ 304.422791][ T8723] netlink: 104 bytes leftover after parsing attributes in process `syz.8.874'. [ 304.471615][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.491967][ T8720] md: array md0 already has disks! [ 304.604254][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.669188][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.691021][ T8725] md: array md0 already has disks! [ 304.692967][ T8727] md: array md0 already has disks! [ 304.970017][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.879'. [ 304.980438][ T8738] netlink: 104 bytes leftover after parsing attributes in process `syz.6.879'. [ 305.043156][ T8741] netlink: 104 bytes leftover after parsing attributes in process `syz.6.879'. [ 305.192105][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.554510][ T8759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.621982][ T8759] md: array md0 already has disks! [ 306.081632][ T8770] md: array md0 already has disks! [ 306.121015][ T8770] md: array md0 already has disks! [ 306.136890][ T8771] hsr_slave_0: left promiscuous mode [ 306.187973][ T8771] hsr_slave_1: left promiscuous mode [ 306.947971][ T8794] md: could not open device unknown-block(1,0). [ 306.948094][ T8794] md: error, md_import_device() returned -16 [ 307.553057][ T8814] md: array md0 already has disks! [ 307.611268][ T8812] md: array md0 already has disks! [ 308.635913][ T7871] net_ratelimit: 4 callbacks suppressed [ 308.635933][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.711878][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.975805][ T8859] __nla_validate_parse: 10 callbacks suppressed [ 308.975828][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.925'. [ 308.978493][ T8859] netlink: 104 bytes leftover after parsing attributes in process `syz.6.925'. [ 309.055539][ T8862] netlink: 104 bytes leftover after parsing attributes in process `syz.6.925'. [ 309.086911][ T8860] futex_wake_op: syz.5.926 tries to shift op by 144; fix this program [ 309.568734][ T8876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.671679][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.819337][ T8882] program syz.7.935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.394175][ T8903] futex_wake_op: syz.6.943 tries to shift op by 144; fix this program [ 310.710573][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.933641][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 311.315310][ T8928] syzkaller0: entered promiscuous mode [ 311.315341][ T8928] syzkaller0: entered allmulticast mode [ 311.346797][ T8933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.390702][ T8933] md: array md0 already has disks! [ 311.600769][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 311.753068][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.753156][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.820485][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.830892][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.269196][ T8953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.803085][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.804100][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.883764][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.910702][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.970574][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.379643][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379719][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.830600][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.992222][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.030734][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.070750][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.870585][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.130487][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.150806][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.191715][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.920539][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.235040][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.412286][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.271930][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.662816][ T8962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 325.702124][ T8962] md: array md0 already has disks! [ 326.098754][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 326.253481][ T8977] hsr_slave_0: left promiscuous mode [ 326.288114][ T8977] hsr_slave_1: left promiscuous mode [ 326.313818][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.959601][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.299166][ T9000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.382993][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.539324][ T9000] md: array md0 already has disks! [ 327.787887][ T8989] syz.5.976 (8989) used greatest stack depth: 16416 bytes left [ 327.843897][ T9008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.901612][ T9008] md: array md0 already has disks! [ 328.302765][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.990'. [ 328.360773][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.8.990'. [ 328.392698][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.429006][ T9031] netlink: 'syz.8.990': attribute type 10 has an invalid length. [ 328.547278][ T9033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.979135][ T9045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.045225][ T9045] md: array md0 already has disks! [ 329.401675][ T9054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.432145][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.455663][ T9054] md: array md0 already has disks! [ 329.639969][ T9061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.726902][ T9057] bond0: (slave syz_tun): Releasing backup interface [ 329.879886][ T9066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.994388][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.070394][ T5726] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.207986][ T9075] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.251138][ T5726] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 330.255035][ T5726] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 330.255064][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.259003][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.259030][ T5726] usb 4-1: Product: syz [ 330.259047][ T5726] usb 4-1: Manufacturer: syz [ 330.259064][ T5726] usb 4-1: SerialNumber: syz [ 330.321285][ T9075] md: array md0 already has disks! [ 330.405989][ T5726] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 330.472991][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.623923][ T4941] bcm5974 4-1:1.0: could not read from device [ 330.725501][ T5726] bcm5974 4-1:1.0: could not read from device [ 330.808234][ T4941] bcm5974 4-1:1.0: could not read from device [ 330.964481][ T5726] input: failed to attach handler mousedev to device input13, error: -5 [ 331.036011][ T5726] usb 4-1: USB disconnect, device number 9 [ 331.092686][ T4941] bcm5974 4-1:1.0: could not read from device [ 331.362926][ T9091] Config c/1 of g1 needs at least one function. [ 331.363566][ T9091] udc usbip-vudc.0: failed to start g1: -22 [ 331.363595][ T9091] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 331.431059][ T9091] UDC core: g1: couldn't find an available UDC or it's busy [ 331.520449][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.997348][ T9114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.045553][ T9114] md: array md0 already has disks! [ 332.566254][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.717013][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.031127][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.061287][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'. [ 333.201778][ T9145] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 333.250940][ T9145] md: array md0 already has disks! [ 333.406456][ T9151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 333.591915][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.990141][ T9168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 334.074812][ T9168] md: array md0 already has disks! [ 334.190476][ T5726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 334.253436][ T9173] md: could not open device unknown-block(1,0). [ 334.253520][ T9173] md: error, md_import_device() returned -16 [ 334.350317][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 334.355553][ T5726] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 334.365656][ T5726] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.365687][ T5726] usb 4-1: config 179 has no interface number 0 [ 334.365738][ T5726] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 334.365767][ T5726] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 334.365797][ T5726] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.365826][ T5726] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 334.365974][ T5726] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.366023][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.502897][ T9166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.630800][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.785501][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 334.785513][ T36] usb 4-1: USB disconnect, device number 10 [ 334.785655][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 334.886550][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 335.220711][ T9193] md: array md0 already has disks! [ 335.261507][ T9193] md: could not open device unknown-block(1,0). [ 335.261573][ T9193] md: error, md_import_device() returned -16 [ 335.616010][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1059'. [ 335.680435][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.899624][ T9223] futex_wake_op: syz.3.1066 tries to shift op by 144; fix this program [ 335.899860][ T9216] syz.8.1062 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 335.899900][ T9216] CPU: 0 UID: 0 PID: 9216 Comm: syz.8.1062 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.899927][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.899957][ T9216] Call Trace: [ 335.899966][ T9216] [ 335.899978][ T9216] dump_stack_lvl+0xe8/0x150 [ 335.900029][ T9216] dump_header+0xd3/0x4b0 [ 335.900065][ T9216] oom_kill_process+0x3ab/0x970 [ 335.900105][ T9216] out_of_memory+0x1064/0x1480 [ 335.900159][ T9216] ? __pfx_out_of_memory+0x10/0x10 [ 335.900191][ T9216] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.900233][ T9216] ? _mutex_lock_killable+0x152/0x1d0 [ 335.900262][ T9216] ? try_charge_memcg+0xbbe/0x15c0 [ 335.900292][ T9216] try_charge_memcg+0xc7d/0x15c0 [ 335.900338][ T9216] ? __pfx_try_charge_memcg+0x10/0x10 [ 335.900375][ T9216] ? percpu_ref_tryget+0x15/0x180 [ 335.900417][ T9216] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 335.900446][ T9216] __memcg_kmem_charge_page+0x36c/0x5a0 [ 335.900469][ T9216] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 335.900496][ T9216] __alloc_frozen_pages_noprof+0x1be/0x380 [ 335.900532][ T9216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.900567][ T9216] ? __pfx_policy_nodemask+0x10/0x10 [ 335.900598][ T9216] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 335.900640][ T9216] alloc_pages_mpol+0xce/0x280 [ 335.900674][ T9216] alloc_pages_noprof+0xd2/0x2f0 [ 335.900707][ T9216] __vmalloc_node_range_noprof+0xe2b/0x1730 [ 335.900765][ T9216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.900795][ T9216] ? hash_ip_create+0x79f/0x14c0 [ 335.900821][ T9216] ? rcu_is_watching+0x16/0xb0 [ 335.900851][ T9216] ? hash_ip_create+0x79f/0x14c0 [ 335.900875][ T9216] ? rcu_is_watching+0x16/0xb0 [ 335.900907][ T9216] ? hash_ip_create+0x79f/0x14c0 [ 335.900931][ T9216] __kvmalloc_node_noprof+0x658/0x8a0 [ 335.900961][ T9216] ? hash_ip_create+0x79f/0x14c0 [ 335.900984][ T9216] ? __kmalloc_noprof+0x443/0x780 [ 335.901020][ T9216] ? hash_ip_create+0x731/0x14c0 [ 335.901044][ T9216] ? hash_ip_create+0x79f/0x14c0 [ 335.901078][ T9216] hash_ip_create+0x79f/0x14c0 [ 335.901123][ T9216] ? __pfx_hash_ip_create+0x10/0x10 [ 335.901153][ T9216] ? ip_set_create+0x4f4/0x1a40 [ 335.901184][ T9216] ? __pfx_hash_ip_create+0x10/0x10 [ 335.901212][ T9216] ip_set_create+0xae7/0x1a40 [ 335.901245][ T9216] ? ip_set_create+0x4f4/0x1a40 [ 335.901291][ T9216] ? __pfx_ip_set_create+0x10/0x10 [ 335.901348][ T9216] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.901388][ T9216] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.901435][ T9216] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 335.901469][ T9216] ? unwind_get_return_address+0x4d/0x90 [ 335.901495][ T9216] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 335.901554][ T9216] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 335.901645][ T9216] netlink_rcv_skb+0x226/0x4a0 [ 335.901681][ T9216] ? __lock_acquire+0x683/0x2ce0 [ 335.901707][ T9216] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 335.901745][ T9216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.901797][ T9216] ? bpf_lsm_capable+0x9/0x20 [ 335.901821][ T9216] ? security_capable+0x7e/0x2c0 [ 335.901863][ T9216] nfnetlink_rcv+0x2b9/0x28d0 [ 335.901895][ T9216] ? __local_bh_enable+0x1e3/0x2f0 [ 335.901929][ T9216] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 335.901958][ T9216] ? lockdep_hardirqs_on+0x7b/0x110 [ 335.901995][ T9216] ? __dev_queue_xmit+0x294/0x3880 [ 335.902029][ T9216] ? __dev_queue_xmit+0x1ee9/0x3880 [ 335.902065][ T9216] ? __dev_queue_xmit+0x294/0x3880 [ 335.902095][ T9216] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 335.902137][ T9216] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.902170][ T9216] ? ref_tracker_free+0x668/0x820 [ 335.902207][ T9216] ? __pfx_ref_tracker_free+0x10/0x10 [ 335.902240][ T9216] ? __asan_memcpy+0x40/0x70 [ 335.902261][ T9216] ? __skb_clone+0x5c/0x6c0 [ 335.902288][ T9216] ? __skb_clone+0x449/0x6c0 [ 335.902317][ T9216] ? skb_clone+0x246/0x3a0 [ 335.902346][ T9216] ? __netlink_deliver_tap+0x811/0x860 [ 335.902369][ T9216] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.902400][ T9216] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.902423][ T9216] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.902453][ T9216] netlink_unicast+0x7f5/0x990 [ 335.902498][ T9216] netlink_sendmsg+0x813/0xb40 [ 335.902533][ T9216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.902558][ T9216] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.902603][ T9216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.902626][ T9216] sock_sendmsg_nosec+0x13a/0x180 [ 335.902660][ T9216] ____sys_sendmsg+0x565/0x870 [ 335.902682][ T9216] ? __might_fault+0xaf/0x130 [ 335.902716][ T9216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.902750][ T9216] ? import_iovec+0x73/0xa0 [ 335.902790][ T9216] ___sys_sendmsg+0x2a5/0x360 [ 335.902811][ T9216] ? __lock_acquire+0x683/0x2ce0 [ 335.902842][ T9216] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.902870][ T9216] ? futex_wait+0x2a2/0x390 [ 335.902941][ T9216] ? __fget_files+0x2a/0x420 [ 335.902969][ T9216] ? __fget_files+0x3a8/0x420 [ 335.903020][ T9216] __x64_sys_sendmsg+0x1b7/0x290 [ 335.903047][ T9216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.903096][ T9216] do_syscall_64+0x166/0x520 [ 335.903118][ T9216] ? trace_irq_disable+0x3b/0x140 [ 335.903141][ T9216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.903166][ T9216] ? clear_bhb_loop+0x70/0xc0 [ 335.903194][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.903218][ T9216] RIP: 0033:0x7f0cd28ae0d9 [ 335.903239][ T9216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.903259][ T9216] RSP: 002b:00007f0cd0b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.903283][ T9216] RAX: ffffffffffffffda RBX: 00007f0cd2b35fa0 RCX: 00007f0cd28ae0d9 [ 335.903301][ T9216] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 335.903316][ T9216] RBP: 00007f0cd2945024 R08: 0000000000000000 R09: 0000000000000000 [ 335.903331][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.903346][ T9216] R13: 00007f0cd2b36038 R14: 00007f0cd2b35fa0 R15: 00007ffec8ac6918 [ 335.903383][ T9216] [ 336.089821][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.195254][ T9216] memory: usage 96kB, limit 96kB, failcnt 36 [ 336.195274][ T9216] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 336.195288][ T9216] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 336.195301][ T9216] Memory cgroup stats for /syz8/test: [ 336.195419][ T9216] cache 0 [ 336.195427][ T9216] rss 0 [ 336.195433][ T9216] shmem 0 [ 336.195439][ T9216] mapped_file 0 [ 336.195445][ T9216] dirty 0 [ 336.195452][ T9216] writeback 0 [ 336.195458][ T9216] workingset_refault_anon 0 [ 336.195464][ T9216] workingset_refault_file 0 [ 336.195471][ T9216] swap 0 [ 336.195477][ T9216] swapcached 0 [ 336.195482][ T9216] pgpgin 0 [ 336.195488][ T9216] pgpgout 0 [ 336.195494][ T9216] pgfault 0 [ 336.195500][ T9216] pgmajfault 0 [ 336.195505][ T9216] inactive_anon 0 [ 336.195512][ T9216] active_anon 0 [ 336.195517][ T9216] inactive_file 0 [ 336.195523][ T9216] active_file 0 [ 336.195529][ T9216] unevictable 0 [ 336.195534][ T9216] hierarchical_memory_limit 98304 [ 336.195541][ T9216] hierarchical_memsw_limit 9223372036854771712 [ 336.195549][ T9216] total_cache 0 [ 336.195555][ T9216] total_rss 0 [ 336.195561][ T9216] total_shmem 0 [ 336.195567][ T9216] total_mapped_file 0 [ 336.195575][ T9216] total_dirty 0 [ 336.195581][ T9216] total_writeback 0 [ 336.195588][ T9216] total_workingset_refault_anon 0 [ 336.195595][ T9216] total_workingset_refault_file 0 [ 336.195603][ T9216] total_swap 0 [ 336.195609][ T9216] total_swapcached 0 [ 336.195615][ T9216] total_pgpgin 0 [ 336.195622][ T9216] total_pgpgout 0 [ 336.195628][ T9216] total_pgfault 0 [ 336.195635][ T9216] total_pgmajfault 0 [ 336.195642][ T9216] total_inactive_anon 0 [ 336.195648][ T9216] total_active_anon 0 [ 336.195655][ T9216] total_inactive_file 0 [ 336.195662][ T9216] total_active_file 0 [ 336.195669][ T9216] total_unevictable 0 [ 336.195675][ T9216] anon_cost 0 [ 336.195682][ T9216] file_cost 0 [ 336.195689][ T9216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.1062,pid=9215,uid=0 [ 336.713034][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.747356][ T9216] Memory cgroup out of memory: Killed process 9215 (syz.8.1062) total-vm:102252kB, anon-rss:1428kB, file-rss:22760kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 337.260686][ T9233] md: array md0 already has disks! [ 337.262387][ T9236] md: could not open device unknown-block(1,0). [ 337.262453][ T9236] md: error, md_import_device() returned -16 [ 337.687237][ T9229] Could not create tracefs 'set_event_pid' entry [ 337.750811][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.811197][ T9229] Could not create tracefs 'set_event_notrace_pid' entry [ 337.841277][ T196] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 337.932541][ T9229] ------------[ cut here ]------------ [ 337.932557][ T9229] !list_empty(&ei->children) [ 337.932577][ T9229] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#1: syz.6.1068/9229 [ 337.932632][ T9229] Modules linked in: [ 337.932652][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.6.1068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.932679][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.932694][ T9229] RIP: 0010:free_ei+0x284/0x340 [ 337.932729][ T9229] Code: 48 c7 c7 40 80 77 8e 48 89 de 48 c7 c2 90 a0 cf 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 32 69 da fd e8 ad 3f f6 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f 3f f6 fd 90 0f 0b 90 48 b8 00 00 00 [ 337.932750][ T9229] RSP: 0018:ffffc90004cefa88 EFLAGS: 00010283 [ 337.932770][ T9229] RAX: ffffffff83cfa423 RBX: ffff8880206ba710 RCX: 0000000000080000 [ 337.932788][ T9229] RDX: ffffc9001f0a4000 RSI: 000000000007ecb4 RDI: 000000000007ecb5 [ 337.932804][ T9229] RBP: ffff8880206ba700 R08: 00000000ffffffff R09: 1ffffffff1f5fba6 [ 337.932827][ T9229] R10: dffffc0000000000 R11: fffffbfff1f5fba7 R12: 0000000000000000 [ 337.932845][ T9229] R13: ffff88805d402800 R14: ffff8880206ba700 R15: 0000000000000003 [ 337.932863][ T9229] FS: 00007f32944456c0(0000) GS:ffff888125d29000(0000) knlGS:0000000000000000 [ 337.932883][ T9229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.932899][ T9229] CR2: 0000001b33322ff8 CR3: 000000003c118000 CR4: 00000000003526f0 [ 337.932920][ T9229] Call Trace: [ 337.932928][ T9229] [ 337.932937][ T9229] ? new_inode+0x13a/0x170 [ 337.933003][ T9229] ? tracefs_get_inode+0x11/0x80 [ 337.933043][ T9229] eventfs_create_events_dir+0x7c7/0xa00 [ 337.933087][ T9229] create_event_toplevel_files+0x11e/0x1a0 [ 337.933130][ T9229] event_trace_add_tracer+0x8a/0x3b0 [ 337.933173][ T9229] trace_array_create_dir+0x77/0x160 [ 337.933204][ T9229] trace_array_create_systems+0xb3c/0xe60 [ 337.933231][ T9229] ? mutex_lock_nested+0x152/0x1d0 [ 337.933269][ T9229] instance_mkdir+0xd5/0x140 [ 337.933308][ T9229] tracefs_syscall_mkdir+0x11a/0x190 [ 337.933342][ T9229] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 337.933375][ T9229] ? generic_permission+0x2bf/0x670 [ 337.933409][ T9229] ? __pfx_tracefs_permission+0x10/0x10 [ 337.933446][ T9229] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 337.933483][ T9229] vfs_mkdir+0x408/0x620 [ 337.933528][ T9229] filename_mkdirat+0x289/0x520 [ 337.933572][ T9229] ? __pfx_filename_mkdirat+0x10/0x10 [ 337.933614][ T9229] ? do_getname+0x151/0x250 [ 337.933643][ T9229] __se_sys_mkdirat+0x35/0x150 [ 337.933684][ T9229] do_syscall_64+0x166/0x520 [ 337.933706][ T9229] ? trace_irq_disable+0x3b/0x140 [ 337.933729][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.933754][ T9229] ? clear_bhb_loop+0x70/0xc0 [ 337.933784][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.933807][ T9229] RIP: 0033:0x7f329620e0d9 [ 337.933836][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.933856][ T9229] RSP: 002b:00007f3294445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 337.933880][ T9229] RAX: ffffffffffffffda RBX: 00007f3296496090 RCX: 00007f329620e0d9 [ 337.933898][ T9229] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 337.933915][ T9229] RBP: 00007f32962a5024 R08: 0000000000000000 R09: 0000000000000000 [ 337.933930][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.933945][ T9229] R13: 00007f3296496128 R14: 00007f3296496090 R15: 00007fff8e0f7ab8 [ 337.933984][ T9229] [ 337.933995][ T9229] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.934012][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.6.1068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.934038][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.934051][ T9229] Call Trace: [ 337.934060][ T9229] [ 337.934069][ T9229] vpanic+0x56d/0xa60 [ 337.934106][ T9229] ? __pfx__printk+0x10/0x10 [ 337.934132][ T9229] ? __pfx_vpanic+0x10/0x10 [ 337.934165][ T9229] ? is_bpf_text_address+0x292/0x2b0 [ 337.934195][ T9229] ? is_bpf_text_address+0x26/0x2b0 [ 337.934235][ T9229] panic+0xc5/0xd0 [ 337.934268][ T9229] ? __pfx_panic+0x10/0x10 [ 337.934324][ T9229] __warn+0x315/0x4c0 [ 337.934343][ T9229] ? free_ei+0x284/0x340 [ 337.934379][ T9229] ? free_ei+0x284/0x340 [ 337.934412][ T9229] __report_bug+0x276/0x570 [ 337.934440][ T9229] ? free_ei+0x284/0x340 [ 337.934477][ T9229] ? __pfx___report_bug+0x10/0x10 [ 337.934512][ T9229] ? kasan_quarantine_put+0xbb/0x1f0 [ 337.934537][ T9229] ? lockdep_hardirqs_on+0x7b/0x110 [ 337.934577][ T9229] ? free_ei+0x284/0x340 [ 337.934610][ T9229] report_bug+0x16b/0x220 [ 337.934633][ T9229] ? free_ei+0x284/0x340 [ 337.934663][ T9229] ? free_ei+0x286/0x340 [ 337.934696][ T9229] handle_bug+0x9c/0x200 [ 337.934722][ T9229] exc_invalid_op+0x1a/0x50 [ 337.934749][ T9229] asm_exc_invalid_op+0x1a/0x20 [ 337.934771][ T9229] RIP: 0010:free_ei+0x284/0x340 [ 337.934803][ T9229] Code: 48 c7 c7 40 80 77 8e 48 89 de 48 c7 c2 90 a0 cf 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 32 69 da fd e8 ad 3f f6 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f 3f f6 fd 90 0f 0b 90 48 b8 00 00 00 [ 337.934868][ T9229] RSP: 0018:ffffc90004cefa88 EFLAGS: 00010283 [ 337.934888][ T9229] RAX: ffffffff83cfa423 RBX: ffff8880206ba710 RCX: 0000000000080000 [ 337.934905][ T9229] RDX: ffffc9001f0a4000 RSI: 000000000007ecb4 RDI: 000000000007ecb5 [ 337.934922][ T9229] RBP: ffff8880206ba700 R08: 00000000ffffffff R09: 1ffffffff1f5fba6 [ 337.934939][ T9229] R10: dffffc0000000000 R11: fffffbfff1f5fba7 R12: 0000000000000000 [ 337.934955][ T9229] R13: ffff88805d402800 R14: ffff8880206ba700 R15: 0000000000000003 [ 337.934982][ T9229] ? free_ei+0x283/0x340 [ 337.935023][ T9229] ? free_ei+0x283/0x340 [ 337.935054][ T9229] ? new_inode+0x13a/0x170 [ 337.935079][ T9229] ? tracefs_get_inode+0x11/0x80 [ 337.935115][ T9229] eventfs_create_events_dir+0x7c7/0xa00 [ 337.935159][ T9229] create_event_toplevel_files+0x11e/0x1a0 [ 337.935200][ T9229] event_trace_add_tracer+0x8a/0x3b0 [ 337.935240][ T9229] trace_array_create_dir+0x77/0x160 [ 337.935270][ T9229] trace_array_create_systems+0xb3c/0xe60 [ 337.935298][ T9229] ? mutex_lock_nested+0x152/0x1d0 [ 337.935334][ T9229] instance_mkdir+0xd5/0x140 [ 337.935376][ T9229] tracefs_syscall_mkdir+0x11a/0x190 [ 337.935411][ T9229] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 337.935443][ T9229] ? generic_permission+0x2bf/0x670 [ 337.935475][ T9229] ? __pfx_tracefs_permission+0x10/0x10 [ 337.935512][ T9229] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 337.935548][ T9229] vfs_mkdir+0x408/0x620 [ 337.935592][ T9229] filename_mkdirat+0x289/0x520 [ 337.935635][ T9229] ? __pfx_filename_mkdirat+0x10/0x10 [ 337.935675][ T9229] ? do_getname+0x151/0x250 [ 337.935704][ T9229] __se_sys_mkdirat+0x35/0x150 [ 337.935745][ T9229] do_syscall_64+0x166/0x520 [ 337.935766][ T9229] ? trace_irq_disable+0x3b/0x140 [ 337.935789][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.935813][ T9229] ? clear_bhb_loop+0x70/0xc0 [ 337.935848][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.935872][ T9229] RIP: 0033:0x7f329620e0d9 [ 337.935891][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.935910][ T9229] RSP: 002b:00007f3294445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 337.935933][ T9229] RAX: ffffffffffffffda RBX: 00007f3296496090 RCX: 00007f329620e0d9 [ 337.935950][ T9229] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 337.935967][ T9229] RBP: 00007f32962a5024 R08: 0000000000000000 R09: 0000000000000000 [ 337.935981][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.935995][ T9229] R13: 00007f3296496128 R14: 00007f3296496090 R15: 00007fff8e0f7ab8 [ 337.936033][ T9229] [ 337.936634][ T9229] Kernel Offset: disabled