last executing test programs: 4m32.57256064s ago: executing program 0 (id=76): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x40, 0x16}, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4m29.774901741s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x0, 0xfffffffffffffffa}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4m29.499025097s ago: executing program 0 (id=92): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x12) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 4m28.913283698s ago: executing program 0 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 4m22.73079287s ago: executing program 0 (id=117): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x4, 0x4, 0x80000000, 0x2, 0x7}) 4m20.734922765s ago: executing program 0 (id=129): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="4ad2b7c12bb0005eee57d9ac4a9f", @ANYRES64=0x0], 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 4m19.983436091s ago: executing program 32 (id=129): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="4ad2b7c12bb0005eee57d9ac4a9f", @ANYRES64=0x0], 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 3m56.16689475s ago: executing program 3 (id=228): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 3m53.558008367s ago: executing program 3 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r3, 0x2) 3m52.257503021s ago: executing program 3 (id=236): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) 3m51.962553709s ago: executing program 3 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000200)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x8000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x290109c, 0x0) umount2(&(0x7f0000000180)='./cgroup\x00', 0x2) 3m51.509905241s ago: executing program 3 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x10001, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 3m49.288834055s ago: executing program 3 (id=250): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 3m48.366592771s ago: executing program 33 (id=250): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 5.835523907s ago: executing program 4 (id=637): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x400, 0x1a4) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 5.454611829s ago: executing program 4 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x1, 0x1, 0x400008, 0x2, 0x2}}) 4.949676698s ago: executing program 2 (id=642): syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0xc, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 3.766534633s ago: executing program 1 (id=643): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 3.761043144s ago: executing program 2 (id=644): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c8c0) 3.508540094s ago: executing program 2 (id=645): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000001000)={')', 0x20, '.', 0x20, 'a', 0x20, 'bl'}, 0x9) 3.507297928s ago: executing program 1 (id=646): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x0, 0xc, {0x8, 0xb, 0x2, 0x2, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd, 0xa, 0x9, 0xd6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfd, 0x9, 0x3, {0x8, 0x25, 0x1, 0x1, 0x3, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x3, 0xc, {0x8, 0x25, 0x1, 0x80, 0x3, 0x0, 0xc0}}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(0x0, 0xf8) 3.317862067s ago: executing program 2 (id=647): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f00001fa000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0xa1464000) 3.14585098s ago: executing program 4 (id=648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.041549851s ago: executing program 4 (id=649): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2.975771148s ago: executing program 2 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.816853324s ago: executing program 4 (id=651): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400"], 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8800, 0x100) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x97, "fa0b572e8d4398a5fc4fd6c3eecc5247f2359bbf897ad98d212a37a408b5a10415b2e0701f2df6d1f7c9db0edb14999cb7f099078628bf5d7bdc0c6e8e7c38818e2477f72405fc475c80823b6ef3f47e1a344072b707a9025da7ed647cad09d80420920efb46771aeb7fc936ede3128877539ed56f9c4f0b689b7bceaf9581552d81755fa54a7b9acba84e172a3b6cf6ab2b5375acc2b7"}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x1, &(0x7f0000001100)={{}, {0x0, 0x3938700}}, 0x0) r5 = gettid() tkill(r5, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) recvmmsg(r0, &(0x7f000001ba40)=[{{0x0, 0x0, 0x0, 0xffffffffffffff90, &(0x7f0000000600)=""/135, 0xffce}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) 2.380397527s ago: executing program 2 (id=652): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pipe2(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x5) r4 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) open(0x0, 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.70515412s ago: executing program 1 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f00000039000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.573184317s ago: executing program 1 (id=654): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x65}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.336229333s ago: executing program 1 (id=655): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pipe2(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x5) r4 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) open(0x0, 0x20000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.010608486s ago: executing program 4 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) semtimedop(r3, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 0s ago: executing program 1 (id=657): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Interface activated: batadv_slave_1 [ 106.811891][ T1519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.843336][ T1519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.857375][ T1519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.857428][ T1519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.016390][ T5810] veth0_macvtap: entered promiscuous mode [ 107.142834][ T5810] veth1_macvtap: entered promiscuous mode [ 107.206555][ T5807] veth0_vlan: entered promiscuous mode [ 107.220637][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.220663][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.431248][ T5811] veth0_vlan: entered promiscuous mode [ 107.435196][ T5807] veth1_vlan: entered promiscuous mode [ 107.465696][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.501806][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.501829][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.529994][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.556914][ T5811] veth1_vlan: entered promiscuous mode [ 107.649753][ T1519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.649842][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.649875][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.699752][ T1519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.723559][ T1519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.743570][ T1519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.877299][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.877319][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.961799][ T5807] veth0_macvtap: entered promiscuous mode [ 108.172400][ T5807] veth1_macvtap: entered promiscuous mode [ 108.325142][ T5811] veth0_macvtap: entered promiscuous mode [ 108.420290][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.420312][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.478107][ T5811] veth1_macvtap: entered promiscuous mode [ 108.574899][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.785761][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.839010][ T5926] trusted_key: syz.1.2 sent an empty control message without MSG_MORE. [ 108.977624][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.978945][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.009148][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.009169][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.023631][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.054823][ T1027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.102064][ T1376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.135660][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.349771][ T1376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.350408][ T1376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.353293][ T1376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.354920][ T1376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.145054][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.145076][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.238987][ T1376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.239009][ T1376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.710514][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.710534][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.003956][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.004075][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.145667][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.396129][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 112.491285][ T5823] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 112.491317][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.491338][ T5823] usb 3-1: Product: syz [ 112.491353][ T5823] usb 3-1: Manufacturer: syz [ 112.491368][ T5823] usb 3-1: SerialNumber: syz [ 112.585007][ T5823] usb 3-1: config 0 descriptor?? [ 113.136734][ T5823] airspy 3-1:0.0: Board ID: 00 [ 113.136757][ T5823] airspy 3-1:0.0: Firmware version: [ 114.205260][ T5823] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 114.317860][ T5823] airspy 3-1:0.0: Registered as swradio24 [ 114.317883][ T5823] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 114.607361][ T5823] usb 3-1: USB disconnect, device number 2 [ 115.698361][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.701675][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.831965][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.896567][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.007949][ T6076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.013734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.183371][ T36] audit: type=1326 audit(1776358551.646:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.2.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02c8a6c819 code=0x0 [ 120.234305][ T5130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.780013][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.819683][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.010211][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 121.012465][ T5882] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 121.012491][ T5882] usb 5-1: config 0 has no interface number 0 [ 121.012532][ T5882] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.012551][ T5882] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 121.012583][ T5882] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 121.012606][ T5882] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 121.012627][ T5882] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 121.012650][ T5882] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.012671][ T5882] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.012695][ T5882] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.012715][ T5882] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.012734][ T5882] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.111968][ T5882] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 121.112000][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.112022][ T5882] usb 5-1: Product: syz [ 121.112037][ T5882] usb 5-1: Manufacturer: syz [ 121.112052][ T5882] usb 5-1: SerialNumber: syz [ 121.264359][ T5882] usb 5-1: config 0 descriptor?? [ 121.267826][ T6090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.311573][ T5882] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 121.311592][ T5882] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 121.392372][ T5882] scsi host1: microtekX6 [ 121.427057][ T853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.502573][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.547580][ T4535] microtek usb (rev 0.4.3): error -90 submitting URB [ 121.568870][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 121.608160][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 121.647686][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 121.829018][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.967125][ T5931] usb 5-1: USB disconnect, device number 2 [ 122.008023][ T853] usb 1-1: Using ep0 maxpacket: 32 [ 122.019267][ T853] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.019345][ T853] usb 1-1: config 0 has no interface number 0 [ 122.100452][ T853] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.100485][ T853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.100505][ T853] usb 1-1: Product: syz [ 122.100521][ T853] usb 1-1: Manufacturer: syz [ 122.100536][ T853] usb 1-1: SerialNumber: syz [ 122.695884][ T853] usb 1-1: config 0 descriptor?? [ 122.857938][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.234564][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 123.391166][ T853] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.391201][ T853] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.432234][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 124.487672][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 124.585144][ T853] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 124.585767][ T853] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 124.696775][ T853] usb 1-1: USB disconnect, device number 2 [ 124.748156][ T31] net_ratelimit: 3 callbacks suppressed [ 124.748173][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.937459][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.981620][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.207083][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.357161][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 126.368573][ T5931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.368602][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.368658][ T5931] usb 1-1: Product: syz [ 126.368716][ T5931] usb 1-1: Manufacturer: syz [ 126.368765][ T5931] usb 1-1: SerialNumber: syz [ 126.534295][ T5931] usb 1-1: config 0 descriptor?? [ 126.694630][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.713299][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.761474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.792578][ T5931] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.042698][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.839561][ T5931] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 127.982758][ T5931] usb 1-1: USB disconnect, device number 3 [ 128.187362][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.258207][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.660361][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.727610][ T6249] loop2: detected capacity change from 0 to 7 [ 129.870441][ T6249] loop2: [ 129.870479][ T6249] loop2: partition table partially beyond EOD, truncated [ 130.298840][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.620644][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.938620][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.163584][ T6269] Bluetooth: MGMT ver 1.23 [ 131.163629][ T6269] Bluetooth: hci0: unsupported parameter 255 [ 131.163649][ T6269] Bluetooth: hci0: unsupported parameter 255 [ 131.268284][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 131.337379][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.717365][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.739490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.791026][ T6279] Zero length message leads to an empty skb [ 132.378587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.380805][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.703720][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.790792][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.069032][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.069125][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.526540][ T5882] net_ratelimit: 5 callbacks suppressed [ 135.526557][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.739931][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.901312][ T5827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 135.934244][ T5827] Bluetooth: hci3: Injecting HCI hardware error event [ 135.946199][ T59] Bluetooth: hci3: hardware error 0x00 [ 135.962571][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.217895][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.537888][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.858729][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.872302][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.018236][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.040493][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.587353][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.760770][ T6338] team0: Port device team_slave_0 removed [ 137.847120][ T5931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.019677][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 138.032714][ T5931] usb 5-1: config 3 has an invalid interface number: 14 but max is 0 [ 138.032741][ T5931] usb 5-1: config 3 has no interface number 0 [ 138.032774][ T5931] usb 5-1: config 3 interface 14 has no altsetting 0 [ 138.055357][ T5931] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=ac.d1 [ 138.055389][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.055409][ T5931] usb 5-1: Product: syz [ 138.055423][ T5931] usb 5-1: Manufacturer: syz [ 138.055438][ T5931] usb 5-1: SerialNumber: syz [ 138.423007][ T5931] cytherm 5-1:3.14: Cypress thermometer device now attached [ 138.454937][ T5931] usb 5-1: USB disconnect, device number 3 [ 138.476836][ T5931] cytherm 5-1:3.14: Cypress thermometer now disconnected [ 138.792780][ T59] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 138.920601][ T4535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.327881][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.358349][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.361124][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.430278][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.440195][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.878410][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.065221][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.065258][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.065297][ T5895] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 140.065321][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.107832][ T5895] usb 5-1: config 0 descriptor?? [ 140.224777][ T4535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.654376][ T5895] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 140.789434][ T5882] net_ratelimit: 8 callbacks suppressed [ 140.789454][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.930533][ T4535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.068394][ T5895] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 141.187976][ T6382] input: syz0 as /devices/virtual/input/input5 [ 141.265285][ T5895] cp2112 0003:10C4:EA90.0001: error requesting version [ 141.291969][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.342878][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.584070][ T59] Bluetooth: hci2: command tx timeout [ 141.788902][ T5895] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 141.817433][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.894824][ T6400] capability: warning: `syz.3.145' uses deprecated v2 capabilities in a way that may be insecure [ 141.981652][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.981947][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.984674][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.076746][ T4535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.228667][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.862159][ T9] usb 5-1: USB disconnect, device number 4 [ 142.880269][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.308863][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.548180][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 143.657162][ T59] Bluetooth: hci2: command tx timeout [ 145.748197][ T59] Bluetooth: hci2: command tx timeout [ 145.843001][ T9] net_ratelimit: 7 callbacks suppressed [ 145.843021][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.861121][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.071954][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.464295][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.697529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.706036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.716399][ T4535] bridge_slave_1: left allmulticast mode [ 146.716739][ T4535] bridge_slave_1: left promiscuous mode [ 146.792587][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.951414][ T6475] netlink: 68 bytes leftover after parsing attributes in process `syz.3.168'. [ 147.046453][ T4535] bridge_slave_0: left allmulticast mode [ 147.046477][ T4535] bridge_slave_0: left promiscuous mode [ 147.060140][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.097564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.112839][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.500339][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.768010][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.826020][ T59] Bluetooth: hci2: command tx timeout [ 148.305457][ T6495] syz.3.174 (6495) used greatest stack depth: 17392 bytes left [ 149.540388][ T6501] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET) [ 149.557865][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.639142][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.679643][ T4535] bond0 (unregistering): Released all slaves [ 150.033459][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.033590][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.033817][ T6359] bridge_slave_0: entered allmulticast mode [ 150.060416][ T6359] bridge_slave_0: entered promiscuous mode [ 150.233504][ T6509] ref_ctr_offset mismatch. inode: 0xbf offset: 0x0 ref_ctr_offset(old): 0x16 ref_ctr_offset(new): 0x0 [ 150.772888][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.773016][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.773244][ T6359] bridge_slave_1: entered allmulticast mode [ 150.812269][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 150.813686][ T6359] bridge_slave_1: entered promiscuous mode [ 150.859242][ T5882] net_ratelimit: 21 callbacks suppressed [ 150.859257][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.937853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.098976][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.226643][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.226784][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.239967][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.257615][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.285663][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.285832][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.286089][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.093898][ T31] libceph: connect (1)[c::]:6789 error -101 [ 152.094326][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 152.201872][ T31] libceph: connect (1)[c::]:6789 error -101 [ 152.202080][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 152.205238][ T6522] ceph: No mds server is up or the cluster is laggy [ 152.214635][ T6532] ======================================================= [ 152.214635][ T6532] WARNING: The mand mount option has been deprecated and [ 152.214635][ T6532] and is ignored by this kernel. Remove the mand [ 152.214635][ T6532] option from the mount to silence this warning. [ 152.214635][ T6532] ======================================================= [ 152.329741][ T6514] syz.4.180 (6514): drop_caches: 2 [ 152.460361][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 152.460583][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 152.513718][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.554498][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.778549][ T6535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.779326][ T6535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 152.779388][ T6535] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 152.977519][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 153.019331][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 153.090281][ T6359] team0: Port device team_slave_0 added [ 153.281132][ T6536] syz.3.186 (6536) used greatest stack depth: 15776 bytes left [ 153.390961][ T6359] team0: Port device team_slave_1 added [ 153.865709][ T5882] IPVS: starting estimator thread 0... [ 153.979913][ T6558] IPVS: using max 8 ests per chain, 19200 per kthread [ 155.194833][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.194851][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.194876][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.294028][ T5464] 8021q: adding VLAN 0 to HW filter on device eth1 [ 155.304863][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.304878][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.304901][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.899005][ T6597] net_ratelimit: 209 callbacks suppressed [ 155.899026][ T6597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.965040][ T6596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.050033][ T6594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.067621][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.067852][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.067998][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.300077][ T6605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.302388][ T6605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.302966][ T6605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.303542][ T6605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.677864][ T4535] hsr_slave_0: left promiscuous mode [ 156.698060][ T4535] hsr_slave_1: left promiscuous mode [ 156.720677][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.720770][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.776774][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.776804][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.960013][ T4535] veth1_macvtap: left promiscuous mode [ 156.960296][ T4535] veth0_macvtap: left promiscuous mode [ 156.960549][ T4535] veth1_vlan: left promiscuous mode [ 156.960857][ T4535] veth0_vlan: left promiscuous mode [ 157.419550][ T6621] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 158.182605][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 158.182631][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 158.422776][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 158.540909][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 160.244598][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'. [ 160.470052][ T6359] hsr_slave_0: entered promiscuous mode [ 160.483246][ T6359] hsr_slave_1: entered promiscuous mode [ 161.344331][ T6013] net_ratelimit: 34 callbacks suppressed [ 161.344351][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.578876][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.659871][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.827202][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.124488][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.137431][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.857137][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.177459][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.406106][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.406491][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.960621][ T36] audit: type=1800 audit(1776358596.426:3): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.233" name="bus" dev="overlay" ino=308 res=0 errno=0 [ 166.459426][ T9] net_ratelimit: 10 callbacks suppressed [ 166.459446][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.215512][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.236397][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.236499][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.419614][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.241919][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.243481][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.244036][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.254454][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.254590][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.743264][ T5464] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.853309][ T6359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.981013][ T6359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.986202][ T6359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.104312][ T6359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.105212][ T6359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.147731][ T5882] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 169.295967][ T6359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.357052][ T5882] usb 2-1: device descriptor read/64, error -71 [ 169.387070][ T6359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.554929][ T6359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.788113][ T5882] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 169.940797][ T5882] usb 2-1: device descriptor read/64, error -71 [ 170.068913][ T5882] usb usb2-port1: attempt power cycle [ 170.455520][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.502123][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.505845][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.531979][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.557820][ T5882] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 170.557820][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.634996][ T5882] usb 2-1: device descriptor read/8, error -71 [ 170.678346][ T4535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.734561][ T5464] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.907104][ T5882] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 170.930676][ T5882] usb 2-1: device descriptor read/8, error -71 [ 171.037583][ T5882] usb usb2-port1: unable to enumerate USB device [ 171.212518][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.508897][ T5882] net_ratelimit: 299 callbacks suppressed [ 171.508917][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.978044][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.016329][ T4535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.148208][ T5464] 8021q: adding VLAN 0 to HW filter on device eth4 [ 172.157065][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.322852][ T5931] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 172.322883][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.358865][ T5931] usb 5-1: config 0 descriptor?? [ 172.457607][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.457781][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.537421][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.627862][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.700283][ T59] Bluetooth: hci4: command tx timeout [ 172.721894][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.797802][ T4535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.303616][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.341480][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.499862][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.500021][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.904395][ T4535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.260434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.260540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.399184][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.399323][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.519950][ T5931] usb 5-1: Cannot set autoneg [ 174.520219][ T5931] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 174.571804][ T5931] usb 5-1: USB disconnect, device number 5 [ 174.777131][ T59] Bluetooth: hci4: command tx timeout [ 176.088818][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 176.538171][ C0] net_ratelimit: 17 callbacks suppressed [ 176.538192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.617569][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.617960][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.707578][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.857021][ T59] Bluetooth: hci4: command tx timeout [ 177.017282][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.250422][ T4535] bridge_slave_1: left allmulticast mode [ 177.250445][ T4535] bridge_slave_1: left promiscuous mode [ 177.250639][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.330662][ T4535] bridge_slave_0: left allmulticast mode [ 177.330693][ T4535] bridge_slave_0: left promiscuous mode [ 177.331004][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.667793][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.739750][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.458866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.810286][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.810518][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.929157][ T36] audit: type=1800 audit(1776358610.346:4): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.275" name="bus" dev="overlay" ino=365 res=0 errno=0 [ 178.942428][ T59] Bluetooth: hci4: command tx timeout [ 179.267094][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.380051][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.424666][ T4535] bond0 (unregistering): Released all slaves [ 179.542403][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.542602][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.542800][ T6784] bridge_slave_0: entered allmulticast mode [ 179.545704][ T6784] bridge_slave_0: entered promiscuous mode [ 179.547043][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.606110][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.606264][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.606471][ T6784] bridge_slave_1: entered allmulticast mode [ 179.650823][ T6784] bridge_slave_1: entered promiscuous mode [ 179.753630][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.753681][ T43] usb 2-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 179.753705][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.830259][ T43] usb 2-1: config 0 descriptor?? [ 179.936887][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.963856][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.325537][ T6922] process 'syz.1.279' launched './file0' with NULL argv: empty string added [ 180.767725][ T6784] team0: Port device team_slave_0 added [ 180.816676][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 180.817263][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.940440][ T43] usb 2-1: USB disconnect, device number 6 [ 181.776484][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 181.778290][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 181.828688][ T6939] ceph: No mds server is up or the cluster is laggy [ 181.831488][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 181.831672][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 182.039385][ T6051] net_ratelimit: 53 callbacks suppressed [ 182.039406][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.067818][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.104733][ T5791] libceph: connect (1)[c::]:6789 error -101 [ 182.104933][ T5791] libceph: mon0 (1)[c::]:6789 connect error [ 182.156044][ T6784] team0: Port device team_slave_1 added [ 182.459591][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.581505][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.581861][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.582185][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.585297][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.626045][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.642951][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.667355][ T6949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.929903][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.929921][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.929946][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.993656][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.993675][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.993701][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.707351][ T5791] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.801180][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.832027][ T6784] hsr_slave_0: entered promiscuous mode [ 183.833440][ T6784] hsr_slave_1: entered promiscuous mode [ 183.836141][ T6784] debugfs: 'hsr0' already exists in 'hsr' [ 183.836178][ T6784] Cannot create hsr debugfs directory [ 184.014298][ T5791] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.014332][ T5791] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.014365][ T5791] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.014386][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.159563][ T6958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.499387][ T5791] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.820438][ T4535] hsr_slave_0: left promiscuous mode [ 184.895516][ T4535] hsr_slave_1: left promiscuous mode [ 184.918390][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.918419][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.008078][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.008103][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.565984][ T4535] veth1_macvtap: left promiscuous mode [ 185.566102][ T4535] veth0_macvtap: left promiscuous mode [ 185.566358][ T4535] veth1_vlan: left promiscuous mode [ 185.566529][ T4535] veth0_vlan: left promiscuous mode [ 185.833842][ T5791] usb 2-1: USB disconnect, device number 7 [ 187.050497][ T43] net_ratelimit: 279 callbacks suppressed [ 187.050517][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.053740][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.347866][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.138974][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.139144][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.946129][ T7017] loop2: detected capacity change from 0 to 7 [ 189.007226][ T7017] Dev loop2: unable to read RDB block 7 [ 189.007279][ T7017] loop2: unable to read partition table [ 189.007503][ T7017] loop2: partition table beyond EOD, truncated [ 189.007537][ T7017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 189.169402][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 189.170771][ T7019] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 189.177438][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.177608][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.307962][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 189.817209][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.366830][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.846315][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.947409][ T5464] 8021q: adding VLAN 0 to HW filter on device eth5 [ 190.949741][ T7019] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 192.405961][ T5823] net_ratelimit: 2 callbacks suppressed [ 192.406008][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.673783][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.858480][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.178644][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.265914][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.340725][ T6359] veth0_vlan: entered promiscuous mode [ 193.402529][ T6359] veth1_vlan: entered promiscuous mode [ 193.569958][ T6359] veth0_macvtap: entered promiscuous mode [ 193.659185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.659700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.659936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.660192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.660421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.882620][ T4535] IPVS: stop unused estimator thread 0... [ 193.945443][ T6359] veth1_macvtap: entered promiscuous mode [ 195.053017][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.053091][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.587945][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.595272][ T6784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 195.841250][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.873740][ T6784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.023822][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.044097][ T6784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.214823][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.244382][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.244837][ T6784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.343546][ T6784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.404653][ T7104] binder: 7102:7104 ioctl 4018620d 0 returned -22 [ 196.478778][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.488867][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.523215][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.593423][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.948891][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 197.150556][ T5464] 8021q: adding VLAN 0 to HW filter on device eth6 [ 197.511021][ T6051] net_ratelimit: 177 callbacks suppressed [ 197.511041][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.932065][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.932441][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.939639][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.208020][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.208232][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.366569][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.426279][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.426301][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.739987][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.167655][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.433202][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.501189][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.664750][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.785461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.785601][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.884717][ T7156] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 199.968377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.968560][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.999663][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.029816][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.034823][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.069068][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.072964][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.142907][ T7153] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.142939][ T7153] overlayfs: failed to set xattr on upper [ 200.142947][ T7153] overlayfs: ...falling back to redirect_dir=nofollow. [ 200.142955][ T7153] overlayfs: ...falling back to index=off. [ 200.142963][ T7153] overlayfs: ...falling back to uuid=null. [ 202.381153][ T59] Bluetooth: hci5: command tx timeout [ 203.793444][ T6051] net_ratelimit: 9 callbacks suppressed [ 203.793464][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.832961][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.860202][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.947735][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.948500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.948642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.951752][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.071556][ T5464] 8021q: adding VLAN 0 to HW filter on device eth7 [ 204.106820][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.133356][ T7190] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 204.185682][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 204.327111][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 204.467075][ T59] Bluetooth: hci5: command tx timeout [ 204.564870][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.564917][ T5895] usb 3-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 204.564939][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.620995][ T5895] usb 3-1: config 0 descriptor?? [ 204.712727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.857980][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.084357][ T5895] hid (null): unknown global tag 0xe [ 205.084392][ T5895] hid (null): invalid report_count 29795 [ 205.084408][ T5895] hid (null): unknown global tag 0xe [ 205.086285][ T5895] hid (null): usage index exceeded [ 205.146381][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146419][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146455][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146482][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146508][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146535][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146561][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146586][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146612][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146639][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown main item tag 0x0 [ 205.146867][ T5895] hid-generic 0003:0B05:1AFE.0002: unknown global tag 0xe [ 205.166996][ T5895] hid-generic 0003:0B05:1AFE.0002: item 0 1 1 14 parsing failed [ 205.172270][ T5895] hid-generic 0003:0B05:1AFE.0002: probe with driver hid-generic failed with error -22 [ 205.286764][ T7190] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 205.324129][ T9] usb 3-1: USB disconnect, device number 3 [ 205.749097][ T4516] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.030263][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.539457][ T59] Bluetooth: hci5: command tx timeout [ 206.616795][ T4516] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.627289][ T59] Bluetooth: hci5: command tx timeout [ 210.101741][ T5895] net_ratelimit: 10 callbacks suppressed [ 210.101757][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.101922][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.151048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.332913][ T4516] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.567272][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.567403][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.628660][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.076401][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 212.358445][ T7267] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 212.430002][ T4516] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.627447][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.627981][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.972592][ T5464] 8021q: adding VLAN 0 to HW filter on device eth8 [ 213.017748][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.185827][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.200104][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.200224][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.200449][ T7155] bridge_slave_0: entered allmulticast mode [ 213.212075][ T7155] bridge_slave_0: entered promiscuous mode [ 213.516222][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.516758][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.519988][ T7155] bridge_slave_1: entered allmulticast mode [ 213.522835][ T7155] bridge_slave_1: entered promiscuous mode [ 214.915508][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.110484][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.325478][ T7155] team0: Port device team_slave_0 added [ 215.352190][ T7155] team0: Port device team_slave_1 added [ 215.737694][ T43] net_ratelimit: 6 callbacks suppressed [ 215.737712][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.738119][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.420005][ T4516] bridge_slave_1: left allmulticast mode [ 216.420168][ T4516] bridge_slave_1: left promiscuous mode [ 216.810768][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.835194][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.905420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.912526][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.198631][ T4516] bridge_slave_0: left allmulticast mode [ 218.198662][ T4516] bridge_slave_0: left promiscuous mode [ 218.198906][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.226745][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.322521][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.322668][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.398309][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.398453][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.602491][ T7353] binder: 7352:7353 ioctl c0306201 2000000002c0 returned -14 [ 221.007810][ T4516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.087877][ T4516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.109480][ T4516] bond0 (unregistering): Released all slaves [ 221.224491][ T6784] veth0_vlan: entered promiscuous mode [ 221.230155][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.230170][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.230195][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.257472][ T9] net_ratelimit: 3 callbacks suppressed [ 221.257526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.280425][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.280462][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.280548][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.498193][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.501921][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.746818][ T7363] ip6erspan0: entered allmulticast mode [ 222.457184][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 222.492876][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 222.597152][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.597382][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.619964][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.885445][ T6784] veth1_vlan: entered promiscuous mode [ 223.099743][ T7155] hsr_slave_0: entered promiscuous mode [ 223.101055][ T7155] hsr_slave_1: entered promiscuous mode [ 223.102233][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 223.102259][ T7155] Cannot create hsr debugfs directory [ 223.509230][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.657704][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.658000][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.048962][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.172396][ T4516] hsr_slave_0: left promiscuous mode [ 225.260048][ T4516] hsr_slave_1: left promiscuous mode [ 225.284992][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.285018][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.008315][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.008342][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.220102][ T36] audit: type=1326 audit(1776358657.696:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.220242][ T36] audit: type=1326 audit(1776358657.696:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.221988][ T36] audit: type=1326 audit(1776358657.696:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.222356][ T36] audit: type=1326 audit(1776358657.696:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.222506][ T36] audit: type=1326 audit(1776358657.696:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.224805][ T36] audit: type=1326 audit(1776358657.696:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f037a77c819 code=0x7ffc0000 [ 226.247297][ T5791] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.414493][ T4516] veth1_macvtap: left promiscuous mode [ 226.414596][ T4516] veth0_macvtap: left promiscuous mode [ 226.414854][ T4516] veth1_vlan: left promiscuous mode [ 226.415033][ T4516] veth0_vlan: left promiscuous mode [ 226.424158][ T36] audit: type=1326 audit(1776358657.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f037a73d04e code=0x7ffc0000 [ 226.448373][ T36] audit: type=1326 audit(1776358657.916:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f037a73d04e code=0x7ffc0000 [ 226.493491][ T5791] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.493542][ T5791] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.493573][ T5791] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.493630][ T5791] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 226.493652][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.510984][ T36] audit: type=1326 audit(1776358657.986:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f037a73d04e code=0x7ffc0000 [ 226.521426][ T36] audit: type=1326 audit(1776358657.996:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7411 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f037a73d04e code=0x7ffc0000 [ 226.572941][ T5931] net_ratelimit: 5 callbacks suppressed [ 226.572958][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.664553][ T7407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.947354][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.338345][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.282983][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.409650][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.424360][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.441430][ T5791] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 228.498389][ T5791] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 228.733830][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 229.181838][ T5791] usb 3-1: USB disconnect, device number 4 [ 229.181921][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 229.427835][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.527117][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.586102][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.983691][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.319117][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 231.418790][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 231.452159][ T7442] binder: 7441:7442 ioctl c0306201 2000000002c0 returned -14 [ 231.822415][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.885352][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.896134][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.913188][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.920632][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.070728][ T31] net_ratelimit: 3 callbacks suppressed [ 232.070773][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.218781][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.786248][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.834542][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.151062][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.498882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.957821][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.095595][ T5827] Bluetooth: hci2: command tx timeout [ 234.311132][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.379758][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.010264][ T5464] 8021q: adding VLAN 0 to HW filter on device eth9 [ 235.021051][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.452096][ T7463] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 238.452510][ T7463] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 238.474886][ T5827] Bluetooth: hci2: command tx timeout [ 238.474921][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 238.530170][ T4535] net_ratelimit: 6 callbacks suppressed [ 238.530190][ T4535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.532160][ T4535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.571557][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.581198][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.703907][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.780808][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.811908][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.925292][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.933908][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.018622][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.288402][ T7463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.288507][ T7463] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.385254][ T7463] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 239.385367][ T7463] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 239.510612][ T7463] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 239.571561][ T5464] 8021q: adding VLAN 0 to HW filter on device eth10 [ 239.626098][ T7463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.626215][ T7463] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.703102][ T7463] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 241.117699][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 241.337017][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 241.417131][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 241.482165][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 241.657123][ T59] Bluetooth: hci2: command 0x0419 tx timeout [ 243.531523][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 243.531560][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 243.577286][ T5895] net_ratelimit: 62 callbacks suppressed [ 243.577303][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.577419][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.595831][ T7526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.682191][ T7527] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[7527] [ 243.757702][ T5827] Bluetooth: hci2: command 0x0419 tx timeout [ 244.195237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.461144][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.617389][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.617542][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.872644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.876055][ T5827] Bluetooth: hci2: command 0x0419 tx timeout [ 245.876660][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.022585][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.089930][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.699302][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 248.290172][ T5827] Bluetooth: hci2: command 0x0419 tx timeout [ 248.886925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 248.937174][ T5931] net_ratelimit: 10 callbacks suppressed [ 248.937195][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.967278][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.967458][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.878394][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.860739][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.094164][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.095707][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.115477][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.146103][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.598479][ T7588] bond_slave_0: entered promiscuous mode [ 252.598527][ T7588] bond_slave_1: entered promiscuous mode [ 252.598572][ T7588] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 252.632906][ T7588] vlan2: entered promiscuous mode [ 252.632927][ T7588] bond0: entered promiscuous mode [ 252.778208][ T7598] team_slave_0: entered promiscuous mode [ 252.778249][ T7598] team_slave_1: entered promiscuous mode [ 252.794060][ T7598] vlan2: entered promiscuous mode [ 252.794121][ T7598] team0: entered promiscuous mode [ 252.937304][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.020120][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.020224][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.020385][ T7445] bridge_slave_0: entered allmulticast mode [ 253.022438][ T7445] bridge_slave_0: entered promiscuous mode [ 253.053986][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.054288][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.054513][ T7445] bridge_slave_1: entered allmulticast mode [ 253.079791][ T7445] bridge_slave_1: entered promiscuous mode [ 253.110182][ T7602] kvm: emulating exchange as write [ 253.347074][ T6013] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 253.518954][ T6013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.518989][ T6013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.519012][ T6013] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.519054][ T6013] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 253.519076][ T6013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.544998][ T6013] usb 2-1: config 0 descriptor?? [ 253.977713][ T43] net_ratelimit: 1 callbacks suppressed [ 253.977731][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.158104][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.251519][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.286780][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.482185][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.023712][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.024299][ T7155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.048502][ T6013] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 255.069126][ T6013] usb 2-1: USB disconnect, device number 8 [ 255.101117][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.269653][ T7620] fido_id[7620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 255.335071][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.368844][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.074615][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.074688][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.228207][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.228266][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.228599][ T7155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.382511][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.386660][ T7445] team0: Port device team_slave_0 added [ 256.417615][ T7155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.580396][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.939768][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.360526][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.364562][ T7445] team0: Port device team_slave_1 added [ 257.396051][ T7155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.622916][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.036997][ T31] net_ratelimit: 3 callbacks suppressed [ 259.037015][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.037274][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.125002][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.297679][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.297696][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.297742][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.413527][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.413545][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.413572][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.637231][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.637570][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.692684][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.707800][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.079564][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.080377][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.137300][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.739879][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.535753][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.551925][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.596000][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.607553][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.837326][ T7445] hsr_slave_0: entered promiscuous mode [ 263.849627][ T7445] hsr_slave_1: entered promiscuous mode [ 265.202513][ T5931] net_ratelimit: 3 callbacks suppressed [ 265.202533][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.237041][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.237282][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.635459][ T59] Bluetooth: hci4: command tx timeout [ 266.643315][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.923237][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.923806][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.407362][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.651671][ T4516] bridge_slave_1: left allmulticast mode [ 267.651698][ T4516] bridge_slave_1: left promiscuous mode [ 267.651949][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.927161][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.927372][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.300519][ T59] Bluetooth: hci4: command tx timeout [ 269.305014][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.346068][ T4516] bridge_slave_0: left allmulticast mode [ 269.346096][ T4516] bridge_slave_0: left promiscuous mode [ 269.346384][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.542026][ T6013] net_ratelimit: 2 callbacks suppressed [ 270.542045][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.542274][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.342480][ T59] Bluetooth: hci4: command tx timeout [ 271.977228][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.977505][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.257186][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.287101][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.287224][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.416985][ T59] Bluetooth: hci4: command tx timeout [ 273.569031][ T4516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.577322][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.328548][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.493856][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.517954][ T4516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.543375][ T4516] bond0 (unregistering): Released all slaves [ 274.888886][ T7764] overlayfs: failed to clone lowerpath [ 275.577429][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.737173][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.747122][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.212455][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 276.806576][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.811130][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.036460][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.036623][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.653622][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.658255][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.319487][ T4516] hsr_slave_0: left promiscuous mode [ 279.337055][ T4516] hsr_slave_1: left promiscuous mode [ 279.338241][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.507894][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.609507][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.593786][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.596599][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.714752][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.721956][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.277827][ T4516] veth1_vlan: left promiscuous mode [ 281.278056][ T4516] veth0_vlan: left promiscuous mode [ 281.742387][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.282718][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.700268][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.800724][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 282.869809][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.034822][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 283.046907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.076915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.086915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.096910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.106906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.116913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.126905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.136906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.146905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.581603][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.710184][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.587030][ T6051] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 285.739130][ T6051] usb 2-1: Using ep0 maxpacket: 32 [ 285.754073][ T6051] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.754100][ T6051] usb 2-1: config 0 has no interfaces? [ 285.784392][ T6051] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 285.784421][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.784441][ T6051] usb 2-1: Product: syz [ 285.784455][ T6051] usb 2-1: Manufacturer: syz [ 285.784468][ T6051] usb 2-1: SerialNumber: syz [ 285.872598][ T5931] net_ratelimit: 4 callbacks suppressed [ 285.872616][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.934515][ T6051] usb 2-1: config 0 descriptor?? [ 286.047346][ T7847] syz.2.492 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 286.796723][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.976960][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.977209][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.134518][ T6051] usb 2-1: USB disconnect, device number 9 [ 288.158881][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.195223][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.636882][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.675037][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.821351][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.911169][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.029652][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 292.417251][ T31] net_ratelimit: 3 callbacks suppressed [ 292.417271][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.417400][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.396073][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.458459][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.464122][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.469452][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.485367][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.522656][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.523084][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.734809][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.735003][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.889072][ T59] Bluetooth: hci5: command tx timeout [ 295.905898][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.027134][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.027269][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.128835][ T36] kauditd_printk_skb: 153 callbacks suppressed [ 296.128855][ T36] audit: type=1800 audit(1776358727.606:168): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.503" name="file1" dev="overlay" ino=720 res=0 errno=0 [ 296.460481][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 296.658674][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.529276][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 297.541591][ T31] net_ratelimit: 1 callbacks suppressed [ 297.541610][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.541959][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.789472][ T59] Bluetooth: hci5: command tx timeout [ 299.900340][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.900601][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.901891][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.902113][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.902482][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.021611][ T5882] usb 3-1: device descriptor read/all, error -71 [ 301.456539][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.457672][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.525119][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.525236][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.525479][ T7675] bridge_slave_0: entered allmulticast mode [ 301.567142][ T7675] bridge_slave_0: entered promiscuous mode [ 301.929915][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.930047][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.930292][ T7675] bridge_slave_1: entered allmulticast mode [ 301.979306][ T7675] bridge_slave_1: entered promiscuous mode [ 302.307271][ T5827] Bluetooth: hci5: command tx timeout [ 302.415176][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.466408][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.476694][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.714472][ T7675] team0: Port device team_slave_0 added [ 302.793060][ T7675] team0: Port device team_slave_1 added [ 303.086413][ T853] net_ratelimit: 1 callbacks suppressed [ 303.086431][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.086563][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.497804][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.497931][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.384440][ T5827] Bluetooth: hci5: command tx timeout [ 305.572565][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.588232][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.071418][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.463976][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.464093][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.619835][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.651246][ T7964] netlink: 'syz.2.517': attribute type 8 has an invalid length. [ 306.651266][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 307.969268][ T7975] fuse: Bad value for 'fd' [ 309.162148][ T6013] net_ratelimit: 3 callbacks suppressed [ 309.162168][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.162384][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.162505][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.493237][ T7964] veth1_to_team: entered promiscuous mode [ 309.503207][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.503611][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.527481][ T7964] gretap0: entered promiscuous mode [ 309.531369][ T7964] batadv_slave_0: entered promiscuous mode [ 309.531926][ T7964] batadv_slave_0: left promiscuous mode [ 310.743706][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.743897][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.766520][ T7964] veth1_to_team: left promiscuous mode [ 310.821982][ T7964] gretap0: left promiscuous mode [ 310.905277][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.905290][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.905308][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.350182][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.350600][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.537373][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.865379][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.865397][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.865425][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.118230][ T5791] net_ratelimit: 3 callbacks suppressed [ 315.118260][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.186335][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.187290][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.511157][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.511346][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.297479][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.303392][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.303529][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.659089][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.659144][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.669969][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.726419][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.665914][ T7675] hsr_slave_0: entered promiscuous mode [ 319.677718][ T7675] hsr_slave_1: entered promiscuous mode [ 319.679282][ T7675] debugfs: 'hsr0' already exists in 'hsr' [ 319.679308][ T7675] Cannot create hsr debugfs directory [ 319.746670][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 320.938293][ T6051] net_ratelimit: 11 callbacks suppressed [ 320.938313][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.938607][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.213661][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.282762][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.295895][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.308396][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.332530][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.977511][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.977875][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.537871][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.538786][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.569542][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.569765][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.569979][ T7884] bridge_slave_0: entered allmulticast mode [ 322.572841][ T7884] bridge_slave_0: entered promiscuous mode [ 322.610601][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.610760][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.610953][ T7884] bridge_slave_1: entered allmulticast mode [ 322.613403][ T7884] bridge_slave_1: entered promiscuous mode [ 322.742196][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.757386][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.867268][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062e34400: rx timeout, send abort [ 322.869753][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888062e34400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 322.876755][ T7884] team0: Port device team_slave_0 added [ 322.971140][ T7884] team0: Port device team_slave_1 added [ 323.032724][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.058916][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.523872][ T5827] Bluetooth: hci2: command tx timeout [ 324.384053][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.391647][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.584201][ T5827] Bluetooth: hci2: command tx timeout [ 325.718015][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.718033][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.718059][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.757045][ T5882] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 325.809597][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.809614][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.809642][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.943031][ T5882] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 325.943060][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.943080][ T5882] usb 3-1: config 0 has no interface number 0 [ 325.943128][ T5882] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 325.943151][ T5882] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.007650][ T5882] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 326.007683][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.007704][ T5882] usb 3-1: Product: syz [ 326.007719][ T5882] usb 3-1: Manufacturer: syz [ 326.007733][ T5882] usb 3-1: SerialNumber: syz [ 327.127433][ T5882] usb 3-1: config 0 descriptor?? [ 329.856350][ T5827] Bluetooth: hci2: command tx timeout [ 330.489500][ T6051] net_ratelimit: 5 callbacks suppressed [ 330.489518][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.489801][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.499659][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.500233][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.500351][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.584467][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.584717][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.651622][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 331.652151][ T5882] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 331.776946][ T5882] usb 3-1: USB disconnect, device number 7 [ 331.998888][ T5827] Bluetooth: hci2: command tx timeout [ 332.174977][ T7884] hsr_slave_0: entered promiscuous mode [ 332.179869][ T7884] hsr_slave_1: entered promiscuous mode [ 332.185606][ T7884] debugfs: 'hsr0' already exists in 'hsr' [ 332.185632][ T7884] Cannot create hsr debugfs directory [ 332.256098][ T8103] batadv0: entered promiscuous mode [ 332.256490][ T8103] vlan2: entered promiscuous mode [ 332.620073][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.620685][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.289270][ T8120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.627544][ T8118] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 334.192438][ T13] bridge_slave_1: left allmulticast mode [ 334.192470][ T13] bridge_slave_1: left promiscuous mode [ 334.192806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.306609][ T13] bridge_slave_0: left allmulticast mode [ 334.306640][ T13] bridge_slave_0: left promiscuous mode [ 334.323189][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.655311][ T36] audit: type=1804 audit(1776358766.106:169): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.549" name="/newroot/147/file0" dev="tmpfs" ino=793 res=1 errno=0 [ 334.682329][ T8132] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 334.799141][ T8133] netlink: 108 bytes leftover after parsing attributes in process `syz.2.549'. [ 334.879685][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.957907][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.023166][ T13] bond0 (unregistering): Released all slaves [ 335.144706][ T8132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.228633][ T8134] bond1: (slave gretap1): making interface the new active one [ 335.298734][ T8134] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 335.752315][ T13] hsr_slave_0: left promiscuous mode [ 336.958553][ T13] hsr_slave_1: left promiscuous mode [ 336.959568][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.966951][ T6051] net_ratelimit: 7 callbacks suppressed [ 336.966967][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.967275][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.329569][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.642397][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.649603][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.981229][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.981382][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.060691][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.069212][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.167641][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.176713][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.359970][ T13] team0 (unregistering): Port device team_slave_1 removed [ 340.426695][ T13] team0 (unregistering): Port device team_slave_0 removed [ 341.978158][ T5791] net_ratelimit: 4 callbacks suppressed [ 341.978177][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.297286][ T5791] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.947762][ T8177] evm: overlay not supported [ 342.966947][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 342.975441][ T5791] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 342.975473][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.975493][ T5791] usb 2-1: Product: syz [ 342.975508][ T5791] usb 2-1: Manufacturer: syz [ 342.975522][ T5791] usb 2-1: SerialNumber: syz [ 343.066997][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.067160][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.468589][ T5791] usb 2-1: config 0 descriptor?? [ 343.510363][ T5791] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 343.577160][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.977557][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.977830][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.014185][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 344.841484][ T5791] gspca_ov534_9: reg_w failed -110 [ 344.917974][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.918132][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.126983][ T5791] gspca_ov534_9: Unknown sensor 0000 [ 345.127084][ T5791] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 345.137631][ T5791] usb 2-1: USB disconnect, device number 10 [ 345.538033][ T8194] overlayfs: failed to clone upperpath [ 347.264253][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.264515][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.592688][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.592835][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.644395][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.644535][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.504396][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.504676][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.556941][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.557078][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.307115][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.307246][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.307481][ T8052] bridge_slave_0: entered allmulticast mode [ 351.312912][ T8052] bridge_slave_0: entered promiscuous mode [ 351.366470][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.366598][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.382820][ T8052] bridge_slave_1: entered allmulticast mode [ 351.398415][ T8052] bridge_slave_1: entered promiscuous mode [ 351.555114][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.622519][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.622923][ T7884] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 351.664247][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.858632][ T13] bridge_slave_1: left allmulticast mode [ 351.858663][ T13] bridge_slave_1: left promiscuous mode [ 351.858998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.998370][ T13] bridge_slave_0: left allmulticast mode [ 351.998402][ T13] bridge_slave_0: left promiscuous mode [ 352.038332][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.247017][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 352.347131][ T13] bridge_slave_1: left allmulticast mode [ 352.347161][ T13] bridge_slave_1: left promiscuous mode [ 352.347408][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.642275][ T31] net_ratelimit: 3 callbacks suppressed [ 352.642313][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.642601][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.698720][ T13] bridge_slave_0: left allmulticast mode [ 352.698799][ T13] bridge_slave_0: left promiscuous mode [ 352.699506][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.737342][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.737796][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.677507][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.777003][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.777290][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.013579][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.029478][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.030145][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.408540][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.424869][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.431665][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.433042][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.433816][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.737179][ T8257] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 359.406972][ T31] net_ratelimit: 3 callbacks suppressed [ 359.406995][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.426883][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.434029][ T4548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.434379][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.435138][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.437786][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.074373][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.391820][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.398398][ T4548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.428752][ T59] Bluetooth: hci4: command tx timeout [ 360.428981][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.611954][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.669276][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.711275][ T13] bond0 (unregistering): Released all slaves [ 360.928331][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.987974][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.029192][ T13] bond0 (unregistering): Released all slaves [ 361.233750][ T8255] warning: `syz.1.574' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 361.238751][ T7884] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.456350][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.904416][ T59] Bluetooth: hci4: command tx timeout [ 363.613179][ T8273] delete_channel: no stack [ 364.737374][ T6051] net_ratelimit: 14 callbacks suppressed [ 364.737393][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.737529][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.833778][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.888251][ T5464] 8021q: adding VLAN 0 to HW filter on device eth9 [ 364.891300][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.915682][ T8052] team0: Port device team_slave_0 added [ 364.926648][ T8052] team0: Port device team_slave_1 added [ 364.938066][ T5827] Bluetooth: hci4: command tx timeout [ 365.037116][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.595098][ T13] hsr_slave_0: left promiscuous mode [ 365.598832][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.547589][ T13] hsr_slave_1: left promiscuous mode [ 366.548561][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.548698][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.548959][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.615278][ T8296] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 366.615318][ T8296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.128788][ T5827] Bluetooth: hci4: command tx timeout [ 367.617077][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.645883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.000492][ T13] hsr_slave_0: left promiscuous mode [ 369.017075][ T13] hsr_slave_1: left promiscuous mode [ 369.018806][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.067931][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.320994][ T13] team0 (unregistering): Port device team_slave_1 removed [ 369.598115][ T13] team0 (unregistering): Port device team_slave_0 removed [ 370.716997][ T6051] net_ratelimit: 12 callbacks suppressed [ 370.717017][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.717429][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.861949][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.277260][ T8331] netlink: 'syz.2.592': attribute type 10 has an invalid length. [ 372.091075][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.104236][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.139136][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.258897][ T13] team0 (unregistering): Port device team_slave_1 removed [ 372.297602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 372.467876][ T8313] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 372.629149][ T8330] bridge0: port 3(syz_tun) entered blocking state [ 372.629270][ T8330] bridge0: port 3(syz_tun) entered disabled state [ 372.629467][ T8330] syz_tun: entered allmulticast mode [ 372.633911][ T8330] syz_tun: entered promiscuous mode [ 372.636105][ T8330] bridge0: port 3(syz_tun) entered blocking state [ 372.636251][ T8330] bridge0: port 3(syz_tun) entered forwarding state [ 372.641991][ T8331] bridge0: port 3(syz_tun) entered disabled state [ 372.642328][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.651180][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.675104][ T8331] bridge0: port 3(syz_tun) entered blocking state [ 372.675513][ T8331] bridge0: port 3(syz_tun) entered forwarding state [ 372.676239][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.676613][ T8331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.677333][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.677778][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.690560][ T8331] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 372.823087][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.823106][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.823151][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.207088][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.319074][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.055558][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.059494][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.242599][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.242619][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.242650][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.450047][ T5823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 375.366064][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 375.741962][ T5882] net_ratelimit: 7 callbacks suppressed [ 375.741979][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.754482][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.754552][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.754576][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 375.755888][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.755915][ T5823] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.755936][ T5823] usb 3-1: Manufacturer: syz [ 375.856991][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.857155][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.897138][ T5823] usb 3-1: config 0 descriptor?? [ 375.980862][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.304235][ T8052] hsr_slave_0: entered promiscuous mode [ 376.305665][ T8052] hsr_slave_1: entered promiscuous mode [ 376.464322][ T5823] usb 3-1: USB disconnect, device number 8 [ 376.976952][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.977230][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.098037][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.098209][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.127054][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 378.222698][ T8383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.262185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.413423][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 378.426277][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 378.453276][ T5931] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 378.453308][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.453329][ T5931] usb 3-1: Product: syz [ 378.453344][ T5931] usb 3-1: Manufacturer: syz [ 378.453359][ T5931] usb 3-1: SerialNumber: syz [ 378.638834][ T5931] usb 3-1: config 0 descriptor?? [ 378.808817][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808860][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.890002][ T5931] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 378.956481][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 379.030759][ T5931] usb 3-1: USB disconnect, device number 9 [ 379.068657][ T1027] usb 3-1: Failed to submit usb control message: -32 [ 379.068713][ T1027] usb 3-1: unable to send the bmi data to the device: -32 [ 379.068732][ T1027] usb 3-1: unable to get target info from device [ 379.068759][ T1027] usb 3-1: could not get target info (-32) [ 379.068787][ T1027] usb 3-1: could not probe fw (-32) [ 380.243842][ T5464] 8021q: adding VLAN 0 to HW filter on device eth10 [ 381.551852][ T8218] net_ratelimit: 9 callbacks suppressed [ 381.551875][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.552002][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.611756][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.628804][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.628990][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.691283][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 382.699771][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.270130][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.617769][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.665147][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.675641][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.716633][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.717857][ T6051] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 383.734775][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.757284][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.762899][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.863059][ T8417] netlink: 34 bytes leftover after parsing attributes in process `syz.2.613'. [ 383.900626][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.912255][ T6051] usb 2-1: Using ep0 maxpacket: 8 [ 383.922784][ T6051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.922810][ T6051] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 383.955587][ T6051] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 383.955610][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.955625][ T6051] usb 2-1: Product: syz [ 383.955636][ T6051] usb 2-1: Manufacturer: syz [ 383.955647][ T6051] usb 2-1: SerialNumber: syz [ 384.294789][ T6051] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 384.294849][ T6051] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 384.335438][ T6051] usb 2-1: USB disconnect, device number 11 [ 385.909700][ T59] Bluetooth: hci5: command tx timeout [ 387.097012][ T8218] net_ratelimit: 6 callbacks suppressed [ 387.097031][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.127086][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.425189][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.425811][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.426070][ T8250] bridge_slave_0: entered allmulticast mode [ 387.455899][ T8250] bridge_slave_0: entered promiscuous mode [ 387.505745][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.505891][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.506145][ T8250] bridge_slave_1: entered allmulticast mode [ 387.537698][ T8250] bridge_slave_1: entered promiscuous mode [ 389.087343][ T59] Bluetooth: hci5: command tx timeout [ 389.088501][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.687282][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.136935][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.620355][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.859116][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.099079][ T59] Bluetooth: hci5: command tx timeout [ 391.221848][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.373825][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.396990][ T853] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 391.442729][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.589725][ T853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.591354][ T853] usb 3-1: not running at top speed; connect to a high speed hub [ 391.596078][ T853] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 391.596107][ T853] usb 3-1: config 0 has no interface number 0 [ 391.596161][ T853] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 391.596190][ T853] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 255, setting to 64 [ 391.596217][ T853] usb 3-1: config 0 interface 88 has no altsetting 0 [ 391.675028][ T853] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 391.675075][ T853] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 391.675097][ T853] usb 3-1: Product: syz [ 391.675112][ T853] usb 3-1: Manufacturer: syz [ 391.675127][ T853] usb 3-1: SerialNumber: syz [ 391.859245][ T853] usb 3-1: config 0 descriptor?? [ 391.862389][ T8464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.897468][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.032900][ T8250] team0: Port device team_slave_0 added Stopping sshd: [ 392.201332][ T853] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input8 [ 392.273687][ T853] usb 3-1: USB disconnect, device number 10 [ 392.302790][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.430921][ T8250] team0: Port device team_slave_1 added stopped /usr/sbin/sshd (pid 5556) OK [ 392.697192][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.857170][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping crond: stopped /usr/sbin/crond (pid 5542) OK [ 393.071593][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.185784][ T59] Bluetooth: hci5: command tx timeout [ 393.363802][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.497337][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.298158][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.327502][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.591582][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5463) [ 395.080594][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.080612][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.080640][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.217280][ T5823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 395.347174][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.411471][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.412756][ T5823] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 395.415158][ T5823] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 395.415185][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.415205][ T5823] usb 2-1: Product: syz [ 395.415219][ T5823] usb 2-1: Manufacturer: syz [ 395.415233][ T5823] usb 2-1: SerialNumber: syz [ 395.715802][ T5823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.725142][ T5823] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 395.964884][ T5823] usb 2-1: USB disconnect, device number 12 Stopping network: [ 396.090685][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.090702][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.090729][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.977035][ T8250] hsr_slave_0: entered promiscuous mode [ 396.982857][ T8250] hsr_slave_1: entered promiscuous mode [ 396.983836][ T8250] debugfs: 'hsr0' already exists in 'hsr' [ 396.983889][ T8250] Cannot create hsr debugfs directory [ 397.338788][ T5931] net_ratelimit: 4 callbacks suppressed [ 397.338807][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.820183][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.315732][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.581987][ T13] ------------[ cut here ]------------ [ 398.582003][ T13] refcount_t: addition on 0; use-after-free. [ 398.582019][ T13] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: kworker/u8:1/13 [ 398.582066][ T13] Modules linked in: [ 398.582096][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.582125][ T13] Tainted: [L]=SOFTLOCKUP [ 398.582133][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.582147][ T13] Workqueue: netns cleanup_net [ 398.582180][ T13] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 398.582209][ T13] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 db d0 26 fd 48 8d 3d c4 6d f8 0a 67 48 0f b9 3a eb 4a e8 c8 d0 26 fd 48 8d 3d c1 6d f8 0a <67> 48 0f b9 3a eb 37 e8 b5 d0 26 fd 48 8d 3d be 6d f8 0a 67 48 0f [ 398.582228][ T13] RSP: 0018:ffffc90000127270 EFLAGS: 00010293 [ 398.582247][ T13] RAX: ffffffff849cf868 RBX: 0000000000000002 RCX: ffff88801ceedc40 [ 398.582262][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f956630 [ 398.582277][ T13] RBP: 0000000000000000 R08: ffff88801ceedc40 R09: 0000000000000005 [ 398.582290][ T13] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888029bfa000 [ 398.582304][ T13] R13: dffffc0000000000 R14: ffff88803f0ad63c R15: ffff888029bfa000 [ 398.582339][ T13] FS: 0000000000000000(0000) GS:ffff888126121000(0000) knlGS:0000000000000000 [ 398.582373][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.582389][ T13] CR2: 00007f619df89f00 CR3: 0000000027c8e000 CR4: 00000000003526f0 [ 398.582414][ T13] Call Trace: [ 398.582426][ T13] [ 398.582437][ T13] nsim_fib_event_nb+0x1055/0x1240 [ 398.582472][ T13] ? leaf_walk_rcu+0x6a9/0x720 [ 398.582501][ T13] call_fib_notifier+0x45/0x80 [ 398.582532][ T13] fib_notify+0x36b/0x5e0 [ 398.582571][ T13] ? __pfx_fib_notify+0x10/0x10 [ 398.582593][ T13] ? register_fib_notifier+0x6a/0x360 [ 398.582630][ T13] ? net_generic+0x1e/0x240 [ 398.582659][ T13] ? net_generic+0x1e/0x240 [ 398.582696][ T13] register_fib_notifier+0x184/0x360 [ 398.582735][ T13] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 398.582760][ T13] ? register_fib_notifier+0x6a/0x360 [ 398.582794][ T13] nsim_fib_create+0x85d/0x9f0 [ 398.582817][ T13] ? queue_delayed_work_on+0x12f/0x1e0 [ 398.582859][ T13] ? __pfx_nsim_fib_create+0x10/0x10 [ 398.582896][ T13] nsim_dev_reload_up+0x374/0x7c0 [ 398.582961][ T13] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 398.583012][ T13] devlink_reload+0x501/0x8d0 [ 398.583046][ T13] ? __pfx_devlink_reload+0x10/0x10 [ 398.583066][ T13] ? xa_get_mark+0x6fc/0x7b0 [ 398.583105][ T13] devlink_pernet_pre_exit+0x1ff/0x420 [ 398.583144][ T13] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 398.583189][ T13] ? class_remove_file_ns+0x124/0x160 [ 398.583228][ T13] ops_undo_list+0x187/0x940 [ 398.583262][ T13] ? rt_spin_unlock+0x150/0x200 [ 398.583294][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 398.583320][ T13] ? rt_spin_unlock+0x14f/0x200 [ 398.583353][ T13] ? idr_destroy+0x21b/0x2a0 [ 398.583386][ T13] ? rt_spin_unlock+0x160/0x200 [ 398.583441][ T13] cleanup_net+0x56e/0x800 [ 398.583496][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 398.583523][ T13] ? process_scheduled_works+0xa70/0x1860 [ 398.583546][ T13] ? process_scheduled_works+0xa70/0x1860 [ 398.583570][ T13] process_scheduled_works+0xb5d/0x1860 [ 398.583618][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.583646][ T13] ? assign_work+0x3d5/0x5e0 [ 398.583672][ T13] worker_thread+0xa53/0xfc0 [ 398.583722][ T13] kthread+0x388/0x470 [ 398.583739][ T13] ? __pfx_worker_thread+0x10/0x10 [ 398.583761][ T13] ? __pfx_kthread+0x10/0x10 [ 398.583779][ T13] ret_from_fork+0x514/0xb70 [ 398.583806][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 398.583830][ T13] ? __switch_to+0xc79/0x1410 [ 398.583853][ T13] ? __pfx_kthread+0x10/0x10 [ 398.583871][ T13] ret_from_fork_asm+0x1a/0x30 [ 398.583901][ T13] [ 398.583918][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.583932][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.583954][ T13] Tainted: [L]=SOFTLOCKUP [ 398.583960][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.583970][ T13] Workqueue: netns cleanup_net [ 398.583991][ T13] Call Trace: [ 398.583997][ T13] [ 398.584003][ T13] vpanic+0x56c/0xa60 [ 398.584018][ T13] ? __pfx__printk+0x10/0x10 [ 398.584037][ T13] ? __pfx_vpanic+0x10/0x10 [ 398.584050][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 398.584066][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 398.584089][ T13] panic+0xc5/0xd0 [ 398.584103][ T13] ? __pfx_panic+0x10/0x10 [ 398.584125][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 398.584145][ T13] __warn+0x315/0x4c0 [ 398.584159][ T13] ? refcount_warn_saturate+0x9f/0x110 [ 398.584181][ T13] ? refcount_warn_saturate+0x9f/0x110 [ 398.584203][ T13] __report_bug+0x29a/0x540 [ 398.584217][ T13] ? nsim_dev_reload_up+0x374/0x7c0 [ 398.584239][ T13] ? devlink_reload+0x501/0x8d0 [ 398.584253][ T13] ? devlink_pernet_pre_exit+0x1ff/0x420 [ 398.584282][ T13] ? refcount_warn_saturate+0x9f/0x110 [ 398.584303][ T13] ? __pfx___report_bug+0x10/0x10 [ 398.584333][ T13] report_bug_entry+0x19a/0x290 [ 398.584349][ T13] ? refcount_warn_saturate+0x9f/0x110 [ 398.584368][ T13] ? refcount_warn_saturate+0xa4/0x110 [ 398.584388][ T13] handle_bug+0xce/0x200 [ 398.584407][ T13] exc_invalid_op+0x1a/0x50 [ 398.584426][ T13] asm_exc_invalid_op+0x1a/0x20 [ 398.584442][ T13] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 398.584464][ T13] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 db d0 26 fd 48 8d 3d c4 6d f8 0a 67 48 0f b9 3a eb 4a e8 c8 d0 26 fd 48 8d 3d c1 6d f8 0a <67> 48 0f b9 3a eb 37 e8 b5 d0 26 fd 48 8d 3d be 6d f8 0a 67 48 0f [ 398.584477][ T13] RSP: 0018:ffffc90000127270 EFLAGS: 00010293 [ 398.584490][ T13] RAX: ffffffff849cf868 RBX: 0000000000000002 RCX: ffff88801ceedc40 [ 398.584501][ T13] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f956630 [ 398.584530][ T13] RBP: 0000000000000000 R08: ffff88801ceedc40 R09: 0000000000000005 [ 398.584545][ T13] R10: 0000000000000100 R11: 0000000000000004 R12: ffff888029bfa000 [ 398.584559][ T13] R13: dffffc0000000000 R14: ffff88803f0ad63c R15: ffff888029bfa000 [ 398.584585][ T13] ? refcount_warn_saturate+0x98/0x110 [ 398.584623][ T13] nsim_fib_event_nb+0x1055/0x1240 [ 398.584664][ T13] ? leaf_walk_rcu+0x6a9/0x720 [ 398.584693][ T13] call_fib_notifier+0x45/0x80 [ 398.584716][ T13] fib_notify+0x36b/0x5e0 [ 398.584740][ T13] ? __pfx_fib_notify+0x10/0x10 [ 398.584754][ T13] ? register_fib_notifier+0x6a/0x360 [ 398.584778][ T13] ? net_generic+0x1e/0x240 [ 398.584796][ T13] ? net_generic+0x1e/0x240 [ 398.584819][ T13] register_fib_notifier+0x184/0x360 [ 398.584840][ T13] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 398.584855][ T13] ? register_fib_notifier+0x6a/0x360 [ 398.584877][ T13] nsim_fib_create+0x85d/0x9f0 [ 398.584892][ T13] ? queue_delayed_work_on+0x12f/0x1e0 [ 398.584920][ T13] ? __pfx_nsim_fib_create+0x10/0x10 [ 398.584942][ T13] nsim_dev_reload_up+0x374/0x7c0 [ 398.584968][ T13] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 398.584998][ T13] devlink_reload+0x501/0x8d0 [ 398.585020][ T13] ? __pfx_devlink_reload+0x10/0x10 [ 398.585033][ T13] ? xa_get_mark+0x6fc/0x7b0 [ 398.585077][ T13] devlink_pernet_pre_exit+0x1ff/0x420 [ 398.585103][ T13] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 398.585131][ T13] ? class_remove_file_ns+0x124/0x160 [ 398.585156][ T13] ops_undo_list+0x187/0x940 [ 398.585178][ T13] ? rt_spin_unlock+0x150/0x200 [ 398.585198][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 398.585217][ T13] ? rt_spin_unlock+0x14f/0x200 [ 398.585239][ T13] ? idr_destroy+0x21b/0x2a0 [ 398.585260][ T13] ? rt_spin_unlock+0x160/0x200 [ 398.585283][ T13] cleanup_net+0x56e/0x800 [ 398.585304][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 398.585329][ T13] ? process_scheduled_works+0xa70/0x1860 [ 398.585349][ T13] ? process_scheduled_works+0xa70/0x1860 [ 398.585372][ T13] process_scheduled_works+0xb5d/0x1860 [ 398.585417][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.585442][ T13] ? assign_work+0x3d5/0x5e0 [ 398.585469][ T13] worker_thread+0xa53/0xfc0 [ 398.585512][ T13] kthread+0x388/0x470 [ 398.585528][ T13] ? __pfx_worker_thread+0x10/0x10 [ 398.585549][ T13] ? __pfx_kthread+0x10/0x10 [ 398.585566][ T13] ret_from_fork+0x514/0xb70 [ 398.585592][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 398.585615][ T13] ? __switch_to+0xc79/0x1410 [ 398.585637][ T13] ? __pfx_kthread+0x10/0x10 [ 398.585655][ T13] ret_from_fork_asm+0x1a/0x30 [ 398.585682][ T13] [ 398.586286][ T13] Kernel Offset: disabled