last executing test programs: 1m5.126798002s ago: executing program 0 (id=683): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) recvfrom$inet(r1, &(0x7f00000010c0)=""/4096, 0x1000, 0x20, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f6ff0012000000000010000000000000000000000000006180a2937ac3a80b6952d8db16993ff2fd227974e2774c7d7aa797ae8bbf49aa30f777f89d1b7e63435927418882c5d1efa4d721934b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 1m3.255018066s ago: executing program 0 (id=684): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', '', [{0x20, '}^$}%'}, {}]}, 0xb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x0, &(0x7f0000000540)) lseek(r2, 0xa, 0x4) fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="01000000000000000000090000003000038014000200736974"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000000)=0x5, 0x4) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getpeername$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) 1m2.0354144s ago: executing program 0 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x90, 0x8, 0x0, 'queue1\x00', 0x56b}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xfffffffffffffd42, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x202c}, {r1, 0x4}, {r1, 0x5080}, {r4, 0x1254}, {r0, 0x411}], 0x5, &(0x7f0000000240), &(0x7f0000000280), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xffe0, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xdd1}]}}]}, 0x44}}, 0x0) mkdir(0x0, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="db68799812011e0130f56920ac06000000000000000109021b0009000090000904550701034902000907820300043179cba05e837e1da295eba7e36203fd5762fb0f87d0cce999938b98501d832da1e84e6a534c57db485babeb3567f63ad8debebb7cb2dd2b8046f1adad501bfc21b37d7d337d6b901f65236d63aef02973d775c1471a6356fbce281b0771085bde5d344ba2afe7111b530d4a4cf1b398872e33cde29f67a6d6"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m0.86717618s ago: executing program 4 (id=689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100)=0xa5c, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x1000, 0x8}, 0xc) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x84, 0x3, 0xfff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb8}, 0x1, 0x7a00}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7, 0xd3, &(0x7f0000000440)=""/211, 0x41100, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x9, 0x80000001}, 0x10, 0x1293b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0x1, r3], &(0x7f0000000600)=[{0x3, 0x5, 0xb, 0x8}, {0x3, 0x2, 0x6, 0xc}, {0x3, 0x3, 0x1, 0x3}, {0x1, 0x4, 0xe}, {0x5, 0x2, 0xa, 0x9}, {0x5, 0x4, 0x1, 0x1}, {0x3, 0x5, 0x1, 0xc}, {0x0, 0x2, 0x9, 0x7}], 0x10, 0x2, @void, @value}, 0x94) r11 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10001}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x9c, &(0x7f0000000200)=""/156, 0x41100, 0x1, '\x00', r6, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x6, 0xfff}, 0x10, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x80, 0x2dde1e3ad56d4950, 0x4b0, 0xffffff53, 0x1, 0x8, 0x1, {0xf, 0x3}, {0x9, 0x7}, {0xffffffff, 0x3}, {0x2, 0x1}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x7fffffff, 0x4, 0x1, 0x2, 0x6, 0x8000, 0x0, 0x100, 0x0, 0xa}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYRES16=r12], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 59.753243845s ago: executing program 1 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) write$binfmt_misc(r4, &(0x7f0000000100), 0xfdef) 57.833042059s ago: executing program 3 (id=694): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) recvfrom$inet(r1, &(0x7f00000010c0)=""/4096, 0x1000, 0x20, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f6ff0012000000000010000000000000000000000000006180a2937ac3a80b6952d8db16993ff2fd227974e2774c7d7aa797ae8bbf49aa30f777f89d1b7e63435927418882c5d1efa4d721934b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 57.540696967s ago: executing program 1 (id=696): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) read$FUSE(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000ac91b2e9000000c800000000004b64ffec850000007d000020850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e060d0211000100000000000000030609085ffe7baaaaaaaaaa11bc5dac738c6762412e9dda93f9653e5d32503a7676ee76929ee9eda3beb7fea3dbd640604adcca7b9628176bb7a9fad8a28ba0a4a4c54cb47fa45c9cdab6941c06fd030abbdb8bf4b6e4b618712f6d7b5837d5834e68cf675b08bf667ab1cf26e6a2f8d0e91d8d05d78adf152c5d1550da06453e63ee"], 0x109) mkdir(0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) lseek(0xffffffffffffffff, 0xcbe, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 56.818624542s ago: executing program 0 (id=697): syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@alu={0x7, 0x0, 0x3, 0x1f428dfc1f001067, 0x6, 0x30, 0x10}, @func, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x2, 0x2, 0x2, 0xb, 0x1, 0x80, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x7d09c09128bc13c, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000100fc020000000000000000000000000000140002"], 0x44}}, 0x884) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0xd46, 0x0, @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x8, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000004c0)={0x45, 0x9, 0x5}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f40000002d00010026bd7000fcdbdf250400"], 0xf4}, 0x1, 0x0, 0x0, 0x400000c}, 0x2400c810) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b65740000140002800800024000000003080001400000000a240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 56.806289453s ago: executing program 3 (id=699): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1c002fd, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000300)=@udp6}, 0x20) 56.666532632s ago: executing program 4 (id=700): clock_settime(0xfffffffffffffffb, &(0x7f0000000000)={0x77359400}) mkdir(&(0x7f0000001c00)='./file1\x00', 0x108) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x800000000001, 0x7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 56.355341857s ago: executing program 1 (id=701): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r2 = socket$inet(0x2, 0x6, 0x5) sendmsg$inet(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRESDEC=r4], 0x14e) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) r7 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000300)=""/128) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',wroup_id=', @ANYRES64=r5, @ANYRESDEC]) execveat(r1, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x700) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000380)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0xfef7, 0x7, 0x8, 0xfffe, 0x17}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 55.655027445s ago: executing program 2 (id=702): listen(0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="6115"], 0x8) (fail_nth: 3) 53.002087341s ago: executing program 2 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xc2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r5) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1, 0x1}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 51.989039149s ago: executing program 4 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)=@x86={0x88, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0x9, 0x10, 0x8, 0xac, 0xd, 0x6, '\x00', 0x4, 0xffff}) r5 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) syslog(0x2, &(0x7f0000001100)=""/4086, 0xff6) (fail_nth: 2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)}, 0x800) close(r5) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x40000) 51.983098118s ago: executing program 1 (id=705): syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283afffe880000000000000000000000000000ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000"/94], 0x0) 51.909432606s ago: executing program 0 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) gettid() ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x9) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd67222100fedbdf48e8a8"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x14) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x13e) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="050000000000a2f46500000f00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x258}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)={0x1064, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1050, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "c05f0f99983f6087c480cc69cea03c6a7fbdeab78c2a6755eb238c91b47a891ad6ab4d98e8116ac1093508b2a1c681c7a00818c3b7e50a28de3b788f63c89045c9496f1dd82c97a4df9ad2f39fb80f2fda11963bc7b0d62f9c893268c9490cc599fc553f303dca70354e77431a97296dd7422e599c7908daa1fffbe95cdd84a87bd074d5cb73840fbc055624be2609ebb4df1b364a0a12ad8ce0827ae744ec618f0f7ccf1d4369a6f3854662ef07393ec4419dda5cd7f92fda1bbc15aa7eec87302ce39f48c7474fe7207ab6b85bd2c516c4ed2cb23057dbce3f9979f8f3949defdfaea9c6edc9b9572cd3361465657465d106473d6031f9136547233556deba812e0d9992041ed3cb927f31b192fb605e74a00d21f8b3d0be339cddd22491f689b30eb62888f606004bdc78062904e037381880139c35b29a126dccb0c280904778d8638bc24cf595d14130db06b732cb15323cf8f7a9b248c40c7474eccd46e1951cc7b3fced93afb3604df67e1d3bf80a9f811258c044ce2f3d27fc707a94a6c6eba6aaa339f523393aed98e9712702826fa0ce4930f65aa516072dabadc23f5516d8bbcf3c078b53dd6b81a808811846ea14bd542620204404c247e3639fb1ed8264a6d2fbe23abe035519863b8f7c964a8c7216e519eee147357ae6680438c0e8c779ccab9cce65965fcfb0678e23e9c47fac2319af67ba70f9b98d632276825b9916798fdfa0ed8c0bfca5f05dd720aecf6d49d490991508e18d735f9f0ba4e319a3bf631fee95a08f60c3f8b33b22580ea703627a36772968cf868d525eb7a971e8d2b679abafb88165c8e2a0db83554cacea9d23d61d56737b6a247791dbaecb7c597f6e32142ddb15b1574d03cb4ca9f21a51d8b73c4514c88098f4e745a288937c1ac97ad7e2deee7e381b9cbf89a28cb5cc18309bc89eb5282f3b70729f48cd65ed0f902c98b5c03cda87d3d590dd8891ffd891bdbba6b58d6da27d6e861a5187c55b6f98871e5971513ae1e0461eddafac9de236a75f339d2eb75ff16b1500f625a11f4406065c83d11de353f732d18c79377d50df7ea4bc12f79e9fb8e1c215ca0c34ae1d5f01f2cb2763145db8700fa96afb5d033789e82d218abbbff697b598bcb013cbc13d60397564f8d09649fb9a315e870f9883f560e792e9cc1efb70bcb9a709ae3ecd35faf22364ffe7d219cbcadef2d2edd8448364cee81ce851cbbe69b6554f070677ca82ec32e8d0c42f293ea1cff20000a6a7e00011817431e821522493b54c3dcd60cf2c00c6b624c82fb4dbe7a392a16e0f7f9375231564d8aa62e972cca3a46c5bfa50a3af973f761735d49da10da28d82bb1df09d44da7525af8cf10bb124d2c966ac1cef987311cc948bacbf848fd405f701cc86f1c217a4cfd61d233f49a5c53139ce913a5e30ed8046354c33b109461173f92bb2020d93058a5abc6026ad3d2a3e88b37536e836eb503971654364917c14e579038a6cf2e328ffb31cbdc578a9b7d447310c7cce879ef84946a7a66471364cc04962f5976996f5e7de49ea8483d05669784214202474170367cb315771747ffe156161f96cb86bfecf92c8a15b847cb88a31265b577ebe37dd7a6517d527cf4b8c8f274f18d3415e52c3f859e202581f2878936358ca4dfb84d2cb1fbe87d672af88db41da649368095b830fea03e9c1cf0002fb817f3fe6470dc9e4ecd5ff6e2bf1bfe44a4a0279b6bef9db86876999905f2b4edcebd206d431bcc6b0ac4fa483158ddb466b6d8bae02c8efa1b68a6f13a78e30d56b9fbbd96878e035a4d8175fa04c407eacdfeb0c6f8c911ae704d7b44401e624c3460071ed944fba98c4a305fdfb44a583d858cbd6959e725c5b0456b3360ad51ad05ee7baec7cd79a23e94828321deecba4ffa5ca79c347c52d7e92d6db2c15ba76738b9a5be2222389382b8e0d2155d3927704599658bb86d2376f250acbf4cabca287b8bfe92b1644724f3fcae20c6b497f743db3db7bcef76695872a59ae9fe3dae14724e0eccccf771b99344c0a61788bc9b9cdbd422387bd44c854a520cc3781404ddfe7ddd31fd1129bbe6bb1d6ce47ecbfd84cd01fbed0335a1afd861a3c02795d66d9db9708deca79817e7270a11f44a1928cf3b17205c94c4442b62d0e002c1d11488317d9a0d3eb52f1194737426045c37231d9537057d6b882141b4eed8d99f248ae0a8448b12a69b17316cef72544b7fafcd6885d1617c98fd052435ce79fdc8c9f3fe34dc76e5706e1f23d0fa78c801eb6a62c5d487915b2642317d8b0af108a3640f1e0809f69e0b76f76d69a38d78620aad7ff6e14c4f8728e44f7bb68ea136da1ffd5c2dc17eef4f37ed8604d3069a0005e767fcc0e518105b590271aa12512c78f41c88a1f93f0a387c124cccba7b1433547b930b959c02264df57fa113f32c1229c1ea6c2c15d8bcb061309ef3a6c5a8baa0338f716e9700eacc252d6ae73a06a4a5f5baa33d1c8788fc571b749dc34b731565ddcd949bf6c25f10fc15114c923228ea48e1fa64a96185cb02cfc4b6cd8a9a0d5e7d370592e7f50292ab04831487e6116bb02cd179505ac867578cf18a415a8dd78469d461ca329e10b68a74b7b0c73a4f210fa3eddf15fb08f7d432aaef6f4569e2d7280ad1678206db6c28ebd8cfd94b9935f440f23473d412a713a17a52582868ea3fd70e8c42e88911fe54ddcfc69596a7b4be610ce51075d70c9a65688f9e6ec08c45265934dca0704c4eaa69fb1eafd1d26045b5aa0dee9ea3f462118a4b7344d6617135b7faeeecb3a7b61d5c6510f2c529a6939ee53ccc604f992c12871b68c192e52bed3f21b50b1cddbeacd1b048133f082e9762d527c6b06ffd18ab458d3b4a25ad7ea51a315ababd2cb8baae73bc14b35dfbfcc04749c8667eae34aaeecdecbd7653b980acf6a3deb455f4199aa3fa11a3e2875facf06017bd97c13411c0a190e621260500fd8f76e8e295beab63e656045bc6efe191a514558b8e6a83e093e090f70f812941dcb82e24747b775a9c30d5c3c929f8f16ff1462b517ceafad319dbd3985f034f683c9cf8f34f9a472f5952d7b298468a84264f3c6f92abcbea7ceb0aadda79d53166dc4e0ffc8df46d4faf1146b80ad31213220b5644e2035feb40a6a2b152adc20c7c081846fa3c43db14c3306cf99a239e9769abfc49d714a56d12301c16dc5dabb6ed91765aa0af28e9fee3d931baf274ca8f81f9c0936c3179d8b9b3f190badce89f01ea4fb5a75c627a39202e74af3650285e56b0aa0a1a330f0ffffc69738a50daca4a83ab7e4dfe0547504655b1440243c762a09b8eb636c15d6e99b3a5061d683afe4099599df7f1a5c3c85c7094dcc6b03a4aa2263576f060d83c83c3ce0e9e7d78df2d4219bb93c6d437e6dc76c58c91ab811a329143786eddbd0d795602a1db8e4e545b3dd2332b15409d90b2ba648d5d13fc1151f7638e3d0d0e4b4b608e5d6f46899b0067e3f2821d14c4a0bc4620d72488c5c4c1a5eca2e0e6bbd1fc7da49c393305845f14c949c504282454a4710286d13ad01e0d4c525b4e67f3653cf043b0f848219a7d881728b141c63b555c6202afd6f86db69f541580556c7fe92f53cc30d911db77b74867f602cc57241246c0b126ed146d6915d3d62acc82c549411bda409da9184bdc503bf29face7f6330c2680aa2b2d370c6b63237fe0e3f40f75ef93bd5d99a675355a23922eb8bdc8299acf070c9d1be71e73099d5d977523e66f65743163c0b821f4ea426c33395c46bbdac87d652463caebc580ccc9962c5f7b2bd683cad81bde1d1536edd3e5fd5eeff5316ef8483c12d00479a5502338b0fa5225bdbe537fdea22290d6eee8e14fea7a2c0777652bd3f9dce2c520b1a821b0c9ab989adfd59450e7f20d5dea8f871c4cd167f773dc993d40b51d47e41b59b62a8da7d09592ecdf74b73fc4df9c0fab75232c3857f1fc5a181e043b41da566fef8609a47eaa3737a38767c62e11671c1c29c87e2919e639f27ed47f7b0c83048c4ba054ca52a00764c2263eb19328308fadafe93452b8bdd7b98d4e5e50e3bb4f7aa91f0678b75de7edff72ddc492e2110d86075d9815f0370c312092fd7dd0f7317145bd4a5bcdb959c5abee25cde07998834153bd11958f4b1d368dbd07b509d8ddc4c57ab98c3fd7d4942c46c7ee3162a7d13971df732332af28c23696a87ded3304bc00888374d140558a6dead73fc9261e969ff39260213f4467c81e920425cfce4bad02a070926f66cc32c254520d2407688ce31da6eaa3e8ec38e3d24a1f14930cc46a29fffb19aaa4f8176b1821f1261da291282ad5359d3416259aabed171eca6516b10ac454351266632c34a12bf6476f90e30990050c5267447ca06b4e91c7fe1e0e5e5713458201ddcde4aa48fca72591180ac9ff1672629b60621a2b38005d03fa74130ed9b050f0caa3bd3148732bf91cba57d71ed6a9f57c03fc854d5fc59e18cc9e30437763bea4be0b9eda5b9120768a4c1f1eed0a001e8e22a0cf1db3f914353c23137999d3985f24f614c120dded0c20bbd8a392266b9b8f0c4e567ecbf31541eb5ce0fbc155af8a8a5eebda839220c278b57970dd405b712ce6c6b884edd4dc5478a0ae73f95a719af4321688d8314d5c05932bbdfe3ad5d7fc2336aa084494ce99d63b18e913b9175cdf1f946ea3955b3cd355f26990c5e054a5ec44b3c8f1c41e8e73f09fc6a3548c4a9e6ee3a3cfe515dd44273cd7cd3c0bdbebb078e516fdff9be983814e1862b26e512b5ec36baf0760dbc8084b8c7aee8f840505cf4a9edeb2720e00938e527339fca72c18785e50b416c0d040bd61bfe2aa53ac94121e05204db61195dc7aae6735ff9097910dbb500a783af06e50693d0b988538a07ad0a2054a8fbc3e0be521c661c0ddb27a71646d452302f8340c9d888eb5dafba399ad36844779218659e67c6ef30f46728e5a6eccb88720c0379937a83cfbf66e56eb475156e8deb280a3d85e1428f212d235a8638dc23846506efba2c8a005d1784c5b09ef50d2b7016df2b9cd3ae3bd80c06ce396c646bdd36d67a3094ff3eae5aabe2d3222b6e476e4998eb4e508462be69d15f4c59661a0294d4edf861326b158afa87939fbc4a488bef9576398ffda288fcbdd9052ab6f76c88b2b59dd1643ff7846d03a4cb2888120bc2feb04d7c2e4e81cb9edaaad1ce840ada1e06cbd60c71732f5817cb3b91f739d6d4c991e606c64ba668ce46e32ac85444de7bae68fcd2dc85cd5395b078ede23a35f37c6ed333d75aca9e7661c3235b0d5e3ec8c2ad25527e8e03430a7289695391da21a8a3392b28833fe7ee62f74952b913f99e9f209138ac425fb2bc8b9be22790b055b50eb55ef7999adc0449cfc83404c059c6c1930c2a2c84d17813cd8aee96bde751a72c6a56e5d211d8039e5cf0f2630ae8c91c283214095a9ade0f9c3cbb8a96456780e88a35fadab2f797753913970e6da6a867076608aa3c6b225701cd218c9dd069dd35f01f7e7eb22c73dfc2222c6154168df86b7bf7a8f1b272eb0b519e999f1d1d7a61a915874d5e48521af135646e587d36d4236e7bb47344171d5828aa4fe441ab2cd788f94dfec82743a98aa49fff6087eef96cc93d7d407b996b2476b853613d95027da8b93d3e2edfe16896f414e092b0c5a9008e951c95e323d3031932578a651e423518c33395b2bb74ac7f9b45854ae9ce62c1f152ccc9efae9f46a3403e9148f3827614ef6d2e3dbb7509b7b121d857edf96a66dc"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x40, 0x1, "ae6c4da900ff2a3aa8d058bbb9eba3fd6f4b70789ef3ce50571b48b1d494a59b3e1883ed1462de5ba3a0f94abb7dee76755e051838d8da055b41ba69"}}]}]}, 0x1064}, 0x1, 0x0, 0x0, 0x4000}, 0xa6e0f1619ef0ec0b) 49.281238531s ago: executing program 2 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) r8 = syz_usb_connect$cdc_ecm(0x3, 0x78, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x3, 0x180, 0x3, [{{0x9, 0x4, 0x0, 0xf8, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "869f37"}, {0x5, 0x24, 0x0, 0xca2}, {0xd, 0x24, 0xf, 0x1, 0xf, 0xe8, 0x7, 0x2}, [@acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xf, 0xbf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf0, 0x7f, 0x5}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x9, 0x4, 0x2, 0x40, 0x6}, 0x8, &(0x7f0000000780)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x78, &(0x7f0000000880)=@string={0x78, 0x3, "d3985dee4654d8c9dccc5c26a565a741371ead0da91b092f99138e7382c1dc47d99c0f426b00b84f4929497a0a845a5901648689a26007982dd5248b0ebe8e47b3988c07317f9ff48e1f8d31f4ce33b416f1de197b65c0286e61716276499a3ab7eeca1e9f6f46776e5e08451311707a6ce85ceab926"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="9d038a0100000002d1bedb90d36c394da68d406765a23033df5d567139cf70dca850ab0cdb4e8cbdc81ce77336b0346c9615d4bd7c1c14f9c1d83a51f6115d0083298da73f57ee4138b7568b934249a5e9eb98ec3c4e88ce9ca08311491ed4bf218576b23c2d4a90521be1118e2b0b81385fb3544e254848878dcd40fcb34c90b0da885fa1ad768702cd70dbc168497cd00592cd639c3383d7f4172b3c"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000e40)={0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="200d5f0000005f03fabf8056a224cc0c4ebb0be31318387407f5846dd9bd2adaa1b108e4c3fdab8d7504242d137bb661e2e2d59b2bd24f44f4721ebbb5526adc0b3d470f1b5059e1cb67058abc8ab9d07a54f8b5d0286731ab69a5ceec74c8e3a808639560"], &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x1c, &(0x7f0000000f00)={0x0, 0xb616150921080032, 0x97, "d806bfa714783a6c1d1a73590bc44d269c365dae818adc9d7f1bdfbd48865084673cf1c2695eed70e99713a7af96450e435ba47fc39b5defd14b1cb3e37c6108405a1f7b61ac954eefdb28d43bf5212fc198779853f8f437dabb06ff09cc5063b5af4e3315e124aa79b2843717e4a514f3740dc3dca1571f70664aaafefa9cd9b33247ec529001ea72bd55f3a33e61c368445a1445951f"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0xf7}}) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002100)=ANY=[@ANYRES16=r8, @ANYRESHEX=r2], 0xb0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0904000000000000000002000003300004802c000180090001007866726d000000001c0002800800024000000003050003000200000008000140000000020900010073797a300000000900020073797a3200000000140000001100010000000000000000000000000a00"], 0x84}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x2}}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 48.813726965s ago: executing program 3 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}], 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffc, 0xffffffffffffffff, &(0x7f0000000340)}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x4401b, 0xffffffffffffffff, 0x2b73a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={[{@dyn}]}) r3 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x80, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') getpid() 42.936671088s ago: executing program 1 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000a000000e40000000100000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000d94800"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000200)="c28b", &(0x7f0000000100)=""/18, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) getresgid(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) sendto$inet6(r0, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0xfffffffe}, 0x1c) syz_usb_connect(0x5, 0x34, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRESDEC, @ANYRES8=r1], 0x0) 39.630569274s ago: executing program 4 (id=712): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1801880021850000006d85f50000000000500000009500000000000000000000001bc33238093d11792909c75116b81820c6411b28ef1d7930cf652eb447df90559e6a5a513901ae7ba73a94dd5fed03588e51b72cf1f4856dffc1c302c2af780cc8fadacbcee02b28e66a72c95787c17913477a5207df7afea8afd60dcb14bd2c903048c27ab85abd5a6ac1a6b2e1f4802809f82e850542dd793da828b4bbafc391a483420a386ae34300715cef161ffe9e49d4ac0559315f27ddb976ae9cc09cad4e4411d62dad85d7c3c9f6783bda879d35a639619ca558bb754e8821a9cfe300bb57332a29a9a612c57752de833ea3f7"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x5, 0x8480) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0xa}]}, {0x0, [0x2e, 0x3]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000300)=0x500) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = socket(0xa, 0x2, 0x3a) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000600)={0x100, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x38200, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000440)="dfd4b42397a98175253299954084fc0752b1a3f19075811c970f34385952a6111fdea97aa16eb9e8b64c9e29388e8a5c62b38dd2388fa81843422c2ae72c280526cedc51f64f4ff4dd43f809f770c2cb609def051e2e97a0be90262a7c332b5a7d10a538b8e5e9d1af7126c67705c68c2cdd36a00e29fa21ff003b007cdc39e89bdde7ac8717ca9a604dcf70373a45b4a48e", 0x92}, {&(0x7f0000000380)="4b53531f", 0x4}], 0x2, 0x0, 0x0, 0x20000810}}], 0x1, 0x8dee) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r6, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x80800) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a387, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0xd, 0x6, 0x1102, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000015}, 0x8040) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=rdma']) 37.123914673s ago: executing program 3 (id=713): io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/950], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0xe6a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xffff1000, 0xeeee8000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002400)={0x2000000a}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x6007) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r6, r6, 0x0, 0x40008) r7 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000000200)=""/115, 0x73}], 0x2, &(0x7f0000000300)=""/149, 0x95}, 0x2106) 36.904728576s ago: executing program 0 (id=714): clock_settime(0xfffffffffffffffb, &(0x7f0000000000)={0x77359400}) mkdir(&(0x7f0000001c00)='./file1\x00', 0x108) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x800000000001, 0x7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 35.965006303s ago: executing program 2 (id=715): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000000000000000000000020010000000000000000000000000001e0000002000000000000000000000000000000000000000000000000f5ffffff486a8b2901da725f02ebb3513a298af552ced7a0dc446d36907de1096441cc02b1850ef1ea8593bca5909e76b08eb90a192149eebdc4680fed897240bfcff17a024e1fb3d250faff09e5bab99bb717de", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/176], 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0) lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'osx.', ']$\x00'}, &(0x7f0000000400)=""/143, 0x8f) 30.331159958s ago: executing program 4 (id=716): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x5, 0x33424752, 0x1, @stepwise={0x2691, 0x7fff, 0xaa79, 0x4, 0x7f, 0x8}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000373260400c2ba871f81846a960b637f5d796bf80683195b584802b0058bbe3764dbddce5f7f33440bae51609d1b366009e2b8eae9b0f4a65dd6ba2c2da0b5eb8226934398b0246a855e0f042e6de63a4a35b7e14454f6bac2a0f0d821270a1b64a8571c4dde727", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf252a0000000600060000000000050037000100000008000200", @ANYRES32=r4, @ANYBLOB="08002f000002000008000200", @ANYRES32=r5, @ANYBLOB="08002f000000000005003700020000000c0005000203aaaaaaaaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x24004880) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 30.280832949s ago: executing program 2 (id=717): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_overlay={0x0, 0x7, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x1, 0x0, 0x6, 0x10, 0x7, 0x7f, "412f853b"}, 0x3, 0x3, {0x0}}) 30.041606357s ago: executing program 2 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x194e, &(0x7f0000000340)={0x0, 0xd3d5, 0x40, 0x101, 0xf1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r2, r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r5, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r5, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000500)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 25.030582123s ago: executing program 32 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000a000000e40000000100000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000d94800"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000200)="c28b", &(0x7f0000000100)=""/18, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) getresgid(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) sendto$inet6(r0, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0xfffffffe}, 0x1c) syz_usb_connect(0x5, 0x34, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRESDEC, @ANYRES8=r1], 0x0) 15.654059199s ago: executing program 33 (id=714): clock_settime(0xfffffffffffffffb, &(0x7f0000000000)={0x77359400}) mkdir(&(0x7f0000001c00)='./file1\x00', 0x108) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x800000000001, 0x7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 15.119434068s ago: executing program 34 (id=713): io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000003803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a713f0ab0c430d3be27df3e34068c42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13dddef0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409eb1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cabea2af9d7ebe668177304c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f40b032107b8a3e100908f61640000006f00fcc0ffff00000000000000ff0bc0fe000010000000000002000002d9a0274500040000000013eaf4000000145e14f0e74d2d42cfb3f2d3afb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed00"/950], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0xe6a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xffff1000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002400)={0x2000000a}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x6007) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r6, r6, 0x0, 0x40008) r7 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f0000000200)=""/115, 0x73}], 0x2, &(0x7f0000000300)=""/149, 0x95}, 0x2106) 15.073211236s ago: executing program 4 (id=722): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) recvfrom$inet(r1, &(0x7f00000010c0)=""/4096, 0x1000, 0x20, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f6ff0012000000000010000000000000000000000000006180a2937ac3a80b6952d8db16993ff2fd227974e2774c7d7aa797ae8bbf49aa30f777f89d1b7e63435927418882c5d1efa4d721934b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 14.752126517s ago: executing program 35 (id=718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x194e, &(0x7f0000000340)={0x0, 0xd3d5, 0x40, 0x101, 0xf1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r2, r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r5, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r5, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000500)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) 0s ago: executing program 36 (id=722): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) recvfrom$inet(r1, &(0x7f00000010c0)=""/4096, 0x1000, 0x20, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000140)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f6ff0012000000000010000000000000000000000000006180a2937ac3a80b6952d8db16993ff2fd227974e2774c7d7aa797ae8bbf49aa30f777f89d1b7e63435927418882c5d1efa4d721934b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) kernel console output (not intermixed with test programs): ? ksys_write+0x1f0/0x250 [ 208.448351][ T6962] ? rcu_is_watching+0x15/0xb0 [ 208.448390][ T6962] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.448419][ T6962] do_syscall_64+0xf6/0x210 [ 208.448446][ T6962] ? clear_bhb_loop+0x60/0xb0 [ 208.448470][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.448489][ T6962] RIP: 0033:0x7f37dad8e969 [ 208.448506][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.448522][ T6962] RSP: 002b:00007f37dbcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.448542][ T6962] RAX: ffffffffffffffda RBX: 00007f37dafb5fa0 RCX: 00007f37dad8e969 [ 208.448557][ T6962] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 208.448569][ T6962] RBP: 00007f37dbcd1090 R08: 0000000000000000 R09: 0000000000000000 [ 208.448580][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.448591][ T6962] R13: 0000000000000000 R14: 00007f37dafb5fa0 R15: 00007ffeca422c98 [ 208.448621][ T6962] [ 208.951821][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.428613][ T6971] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 209.436651][ T6971] netlink: 224 bytes leftover after parsing attributes in process `syz.3.255'. [ 210.446444][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.215691][ T5814] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 211.305188][ T6986] fuse: Bad value for 'fd' [ 211.506411][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 211.526603][ T5837] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.557050][ T5814] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.580747][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.597231][ T5814] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.631660][ T5814] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.667576][ T5814] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.702650][ T5814] usb 4-1: Product: syz [ 211.715605][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 211.723336][ T5837] usb 5-1: config 1 has an invalid interface number: 133 but max is 0 [ 211.734869][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 211.746991][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.753146][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 211.753202][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 211.759959][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 211.785485][ T5837] usb 5-1: config 1 has no interface number 0 [ 211.788927][ T5814] usb 4-1: Manufacturer: syz [ 211.847615][ T5837] usb 5-1: config 1 interface 133 has no altsetting 0 [ 211.881732][ T5837] usb 5-1: language id specifier not provided by device, defaulting to English [ 211.914754][ T5814] hub 4-1:4.0: USB hub found [ 211.916201][ T5837] usb 5-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 211.935383][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.964671][ T5837] usb 5-1: Product: syz [ 211.990192][ T5837] usb 5-1: SerialNumber: syz [ 212.086192][ T5843] udevd[5843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.099739][ T5814] hub 4-1:4.0: 4 ports detected [ 213.601475][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.667209][ T5814] hub 4-1:4.0: insufficient power available to use all downstream ports [ 213.788204][ T5837] sierra 5-1:1.133: Sierra USB modem converter detected [ 213.824074][ T5837] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 213.918254][ T5837] usb 5-1: USB disconnect, device number 7 [ 213.988230][ T5837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 214.009737][ T5837] sierra 5-1:1.133: device disconnected [ 214.295841][ T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.498287][ T47] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 214.515006][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.590973][ T47] usb 3-1: config 0 has no interface number 0 [ 214.632503][ T47] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 214.654049][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.664142][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.720937][ T47] usb 3-1: config 0 descriptor?? [ 214.747187][ T47] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 214.761602][ T47] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 214.784769][ T5814] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 214.787343][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.971097][ T30] audit: type=1804 audit(1748117827.684:8): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.266" name="/newroot/55/file0/file0" dev="ramfs" ino=11917 res=1 errno=0 [ 215.003792][ T5814] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 215.019531][ T47] usb 3-1: USB disconnect, device number 11 [ 215.068921][ T7019] FAULT_INJECTION: forcing a failure. [ 215.068921][ T7019] name failslab, interval 1, probability 0, space 0, times 0 [ 215.118728][ T5814] usb 4-1: USB disconnect, device number 13 [ 215.145178][ T7019] CPU: 0 UID: 0 PID: 7019 Comm: syz.3.267 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 215.145208][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.145220][ T7019] Call Trace: [ 215.145226][ T7019] [ 215.145235][ T7019] dump_stack_lvl+0x189/0x250 [ 215.145269][ T7019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.145295][ T7019] ? __pfx__printk+0x10/0x10 [ 215.145331][ T7019] ? __pfx___might_resched+0x10/0x10 [ 215.145360][ T7019] ? fs_reclaim_acquire+0x7d/0x100 [ 215.145386][ T7019] should_fail_ex+0x414/0x560 [ 215.145411][ T7019] should_failslab+0xa8/0x100 [ 215.145432][ T7019] __kmalloc_cache_noprof+0x70/0x3d0 [ 215.145460][ T7019] ? nft_trans_table_add+0x56/0x430 [ 215.145490][ T7019] nft_trans_table_add+0x56/0x430 [ 215.145522][ T7019] nf_tables_newtable+0xce3/0x1890 [ 215.145566][ T7019] nfnetlink_rcv+0x113f/0x2530 [ 215.145625][ T7019] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 215.145711][ T7019] ? skb_clone+0x246/0x3a0 [ 215.145756][ T7019] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.145777][ T7019] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.145805][ T7019] netlink_unicast+0x75b/0x8d0 [ 215.145835][ T7019] netlink_sendmsg+0x805/0xb30 [ 215.145854][ T7019] ? is_bpf_text_address+0x26/0x2b0 [ 215.145889][ T7019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.145921][ T7019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.145952][ T7019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.145975][ T7019] __sock_sendmsg+0x21c/0x270 [ 215.145996][ T7019] ____sys_sendmsg+0x505/0x830 [ 215.146026][ T7019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.146078][ T7019] ? import_iovec+0x74/0xa0 [ 215.146108][ T7019] ___sys_sendmsg+0x21f/0x2a0 [ 215.146136][ T7019] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.146200][ T7019] ? __fget_files+0x2a/0x420 [ 215.146217][ T7019] ? __fget_files+0x3a0/0x420 [ 215.146254][ T7019] __x64_sys_sendmsg+0x19b/0x260 [ 215.146281][ T7019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.146321][ T7019] ? do_syscall_64+0xba/0x210 [ 215.146347][ T7019] do_syscall_64+0xf6/0x210 [ 215.146369][ T7019] ? clear_bhb_loop+0x60/0xb0 [ 215.146390][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.146407][ T7019] RIP: 0033:0x7f680ed8e969 [ 215.146441][ T7019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.146457][ T7019] RSP: 002b:00007f680fbea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.146477][ T7019] RAX: ffffffffffffffda RBX: 00007f680efb5fa0 RCX: 00007f680ed8e969 [ 215.146490][ T7019] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 215.146502][ T7019] RBP: 00007f680fbea090 R08: 0000000000000000 R09: 0000000000000000 [ 215.146513][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.146524][ T7019] R13: 0000000000000000 R14: 00007f680efb5fa0 R15: 00007ffd597c6178 [ 215.146553][ T7019] [ 215.482870][ T9] IPVS: starting estimator thread 0... [ 215.577618][ T7022] IPVS: using max 29 ests per chain, 69600 per kthread [ 215.915488][ T5837] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 216.266923][ T7031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.271'. [ 216.330138][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.348496][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 216.375245][ T5837] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 216.425546][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.447807][ T5837] usb 5-1: Product: syz [ 216.475521][ T5837] usb 5-1: Manufacturer: syz [ 216.507585][ T5837] usb 5-1: SerialNumber: syz [ 216.547079][ T5837] r8152-cfgselector 5-1: Unknown version 0x0000 [ 216.565085][ T5837] r8152-cfgselector 5-1: config 0 descriptor?? [ 216.880599][ T7038] fuse: Bad value for 'fd' [ 217.322895][ T5837] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 217.341381][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.350497][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.388165][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.602865][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.019917][ T7061] netlink: 224 bytes leftover after parsing attributes in process `syz.4.278'. [ 220.593273][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.784981][ T7071] fuse: Bad value for 'fd' [ 221.866985][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.476984][ T7089] 9pnet_fd: Insufficient options for proto=fd [ 223.110478][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.206407][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.413166][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.421356][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.435189][ T7105] overlayfs: failed to resolve './file1': -2 [ 224.933237][ T7107] netlink: 224 bytes leftover after parsing attributes in process `syz.3.289'. [ 225.162467][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.486222][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.567878][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.885640][ T5837] usb 3-1: device descriptor read/64, error -71 [ 226.365567][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.575876][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 226.606174][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.865885][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 226.888054][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.904054][ T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.918206][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.927525][ T24] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.936239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.945058][ T24] usb 5-1: Product: syz [ 227.057600][ T24] usb 5-1: Manufacturer: syz [ 227.101526][ T24] hub 5-1:4.0: USB hub found [ 227.278067][ T7128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.317208][ T24] hub 5-1:4.0: 4 ports detected [ 227.327963][ T24] hub 5-1:4.0: insufficient power available to use all downstream ports [ 228.747556][ T24] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 228.754057][ T24] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 228.803960][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.828599][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.887702][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.048335][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.137786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.235911][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 230.275892][ T47] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 230.284138][ T47] usb 1-1: config 1 has no interface number 0 [ 230.309205][ T47] usb 1-1: config 1 interface 133 has no altsetting 0 [ 230.375217][ T47] usb 1-1: language id specifier not provided by device, defaulting to English [ 230.400511][ T7155] netlink: 224 bytes leftover after parsing attributes in process `syz.3.300'. [ 231.222111][ T7156] Bluetooth: MGMT ver 1.23 [ 231.227841][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.314542][ T5837] usb 5-1: USB disconnect, device number 9 [ 231.396367][ T47] usb 1-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 231.424599][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.455868][ T47] usb 1-1: can't set config #1, error -71 [ 231.492641][ T47] usb 1-1: USB disconnect, device number 6 [ 231.805472][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.035587][ T5837] usb 3-1: device descriptor read/64, error -71 [ 232.797742][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.027206][ T5837] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 233.195807][ T5837] usb 3-1: device descriptor read/64, error -71 [ 233.316211][ T5837] usb usb3-port1: attempt power cycle [ 233.715148][ T5837] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.775908][ T5837] usb 3-1: device descriptor read/8, error -71 [ 233.828441][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.868102][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 234.299806][ T7193] fuse: Bad value for 'fd' [ 234.619428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.022761][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.360942][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.420140][ T7207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.460221][ T5843] udevd[5843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 235.535788][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 235.697806][ T24] IPVS: starting estimator thread 0... [ 235.705479][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 236.214428][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.241978][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.253642][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.262781][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.274544][ T5814] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 236.286486][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.297105][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.307763][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.323791][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.346616][ T7216] IPVS: using max 26 ests per chain, 62400 per kthread [ 236.376880][ T5814] usb 1-1: config 0 descriptor?? [ 236.535987][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.585783][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.633693][ T47] IPVS: starting estimator thread 0... [ 236.755900][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 236.761444][ T7226] IPVS: using max 28 ests per chain, 67200 per kthread [ 236.779570][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.808110][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.825613][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 236.839972][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 236.845747][ T5837] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 236.852434][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.869036][ T24] usb 2-1: Product: syz [ 236.873364][ T24] usb 2-1: Manufacturer: syz [ 236.879493][ T24] usb 2-1: SerialNumber: syz [ 236.894398][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.917467][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 236.928075][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 236.930866][ T5837] usb 3-1: config 0 descriptor?? [ 236.945550][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 237.106267][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 237.616357][ T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 237.808573][ T7231] net_ratelimit: 650 callbacks suppressed [ 237.808596][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.823728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.837843][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.846372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.863231][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.872010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.883922][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.892477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.901735][ T7231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.910318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.024292][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.033873][ T24] r8152-cfgselector 2-1: Unknown version 0x38e0 [ 238.196337][ T24] r8152-cfgselector 2-1: bad CDC descriptors [ 238.207264][ T47] usb 4-1: Product: syz [ 238.222131][ T47] usb 4-1: Manufacturer: syz [ 238.261136][ T47] usb 4-1: SerialNumber: syz [ 238.310066][ T24] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 238.873051][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 238.919986][ T47] r8152-cfgselector 4-1: Unknown version 0x0000 [ 238.928163][ T5814] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 238.957823][ T47] r8152-cfgselector 4-1: config 0 descriptor?? [ 239.924260][ T5837] usbhid 3-1:0.0: can't add hid device: -71 [ 239.926887][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 239.939207][ T5837] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 239.946114][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 239.959757][ T5837] usb 3-1: USB disconnect, device number 18 [ 240.365571][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 240.378829][ T47] r8152-cfgselector 4-1: Unknown version 0x0000 [ 240.408398][ T47] r8152-cfgselector 4-1: bad CDC descriptors [ 240.780049][ T7244] 9pnet_fd: Insufficient options for proto=fd [ 241.363050][ T5814] usb 1-1: USB disconnect, device number 7 [ 241.374707][ T47] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 241.385480][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 241.831131][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 241.976685][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 242.819158][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 243.540798][ T24] net_ratelimit: 1145 callbacks suppressed [ 243.540819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.585612][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 243.617100][ T7252] netlink: 252 bytes leftover after parsing attributes in process `syz.1.327'. [ 243.686738][ T9] usb 5-1: string descriptor 0 read error: -71 [ 243.713233][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.891792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.918300][ T9] usb 5-1: can't set config #1, error -71 [ 243.936077][ T9] usb 5-1: USB disconnect, device number 10 [ 244.660500][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.058360][ T7270] fuse: Bad value for 'fd' [ 245.066040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.499313][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.575538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.939325][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.086009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.166654][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.287532][ T5836] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 247.109947][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.999143][ T7290] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 248.182402][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.220438][ T30] audit: type=1804 audit(1748117860.964:9): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.340" name="/newroot/68/file0/file0" dev="ramfs" ino=14396 res=1 errno=0 [ 248.853231][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.058488][ T30] audit: type=1804 audit(1748117861.794:10): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.333" name="/newroot/69/file0/file0" dev="ramfs" ino=13583 res=1 errno=0 [ 249.115596][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 249.147457][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.197294][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.270889][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.271923][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.288864][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.311879][ T9] usb 3-1: Product: syz [ 249.337268][ T9] usb 3-1: Manufacturer: syz [ 249.372470][ T9] hub 3-1:4.0: USB hub found [ 249.582408][ T9] hub 3-1:4.0: 4 ports detected [ 249.595809][ T9] hub 3-1:4.0: insufficient power available to use all downstream ports [ 250.039016][ T7311] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 250.684128][ T7311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.342'. [ 250.700631][ T9] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 250.704424][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.735014][ T9] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 251.615585][ T5921] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.739092][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 251.773841][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.816004][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 251.841438][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.880228][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.899477][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.063816][ T7331] netlink: 224 bytes leftover after parsing attributes in process `syz.3.346'. [ 252.108745][ T5837] usb 3-1: USB disconnect, device number 19 [ 252.241598][ T5921] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 252.268462][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.603519][ T5921] usb 2-1: config 0 descriptor?? [ 253.096052][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.318403][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.760045][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 254.770934][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.783077][ T5921] usb 2-1: USB disconnect, device number 6 [ 255.266858][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.305881][ T30] audit: type=1804 audit(1748117868.044:11): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.343" name="/newroot/63/file0/file0" dev="ramfs" ino=14575 res=1 errno=0 [ 255.487689][ T5836] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 255.487812][ T5836] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 255.508238][ T5836] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 255.776469][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.953610][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.993318][ T7353] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 256.485620][ T30] audit: type=1804 audit(1748117869.234:12): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.356" name="/newroot/64/file0/file0" dev="ramfs" ino=13760 res=1 errno=0 [ 256.997212][ T5836] Bluetooth: hci4: link tx timeout [ 257.012646][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 257.450744][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.655785][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.895549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.901950][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.100484][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 259.775819][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.046647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.068008][ T7403] fuse: Bad value for 'fd' [ 260.218322][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.243836][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.275536][ T5814] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 260.315625][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.336527][ T5814] usb 1-1: config 0 descriptor?? [ 261.311428][ T5814] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 261.353005][ T7420] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 261.422133][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.450347][ T5814] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 261.533213][ T5814] cp2112 0003:10C4:EA90.0001: error requesting version [ 261.588331][ T5814] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 261.625770][ T5814] usb 1-1: USB disconnect, device number 8 [ 261.903971][ T7430] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'. [ 262.458211][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.466680][ T30] audit: type=1804 audit(1748117875.204:13): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.373" name="/newroot/67/file0/file0" dev="ramfs" ino=13831 res=1 errno=0 [ 262.482303][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.500351][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.513755][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.459690][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.577081][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.724158][ T7441] xt_l2tp: v2 doesn't support IP mode [ 263.733510][ T7441] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 264.859205][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.867378][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.630771][ T5840] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 265.685889][ T7466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.594930][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.855931][ T7476] overlayfs: failed to resolve './file1': -2 [ 266.959692][ T5837] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 267.145957][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 267.367968][ T5837] usb 3-1: config 1 has an invalid interface number: 133 but max is 0 [ 267.483149][ T7480] overlayfs: failed to resolve './file1': -2 [ 267.508894][ T5837] usb 3-1: config 1 has no interface number 0 [ 267.656841][ T5837] usb 3-1: config 1 interface 133 has no altsetting 0 [ 267.690636][ T5837] usb 3-1: language id specifier not provided by device, defaulting to English [ 267.720306][ T7470] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 267.743227][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.913081][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.955486][ T5837] usb 3-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 268.253852][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.325372][ T5837] usb 3-1: Product: syz [ 268.329598][ T5837] usb 3-1: SerialNumber: syz [ 268.337170][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.355489][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.014616][ T5837] sierra 3-1:1.133: Sierra USB modem converter detected [ 269.050664][ T5837] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 269.096780][ T5837] usb 3-1: USB disconnect, device number 20 [ 269.165533][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.179170][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.194443][ T5837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 269.217123][ T30] audit: type=1804 audit(1748117881.964:14): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.391" name="/newroot/78/file0/file0" dev="ramfs" ino=14931 res=1 errno=0 [ 269.250771][ T5814] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.256699][ T5837] sierra 3-1:1.133: device disconnected [ 269.405717][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 269.416057][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.416201][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.455649][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 269.474482][ T5814] usb 5-1: config 1 has an invalid interface number: 133 but max is 0 [ 269.486827][ T5814] usb 5-1: config 1 has no interface number 0 [ 269.493700][ T5814] usb 5-1: config 1 interface 133 has no altsetting 0 [ 269.503849][ T5814] usb 5-1: language id specifier not provided by device, defaulting to English [ 269.505759][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.522072][ T5814] usb 5-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 269.536885][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.549775][ T5814] usb 5-1: Product: syz [ 269.554312][ T5814] usb 5-1: SerialNumber: syz [ 269.578012][ T10] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 269.600430][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.618979][ T10] usb 1-1: config 0 descriptor?? [ 270.152038][ T5814] sierra 5-1:1.133: Sierra USB modem converter detected [ 270.168303][ T5814] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 270.182383][ T5814] usb 5-1: USB disconnect, device number 11 [ 270.678504][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.760429][ T5814] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 271.005116][ T5814] sierra 5-1:1.133: device disconnected [ 271.425179][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 271.442111][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.484204][ T10] usb 1-1: USB disconnect, device number 9 [ 271.714052][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.782000][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.512270][ T7518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.842473][ T7520] overlayfs: failed to resolve './file1': -2 [ 272.886638][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.105437][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 273.245778][ T24] usb 3-1: device descriptor read/64, error -71 [ 273.508291][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 273.715949][ T24] usb 3-1: device descriptor read/64, error -71 [ 273.835976][ T24] usb usb3-port1: attempt power cycle [ 273.846836][ T7529] program syz.4.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.896573][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.026711][ T7534] netlink: 'syz.0.406': attribute type 11 has an invalid length. [ 274.225813][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 274.298356][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.318843][ T24] usb 3-1: device descriptor read/8, error -71 [ 274.507842][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.574324][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.625738][ T24] usb 3-1: device descriptor read/8, error -71 [ 274.908797][ T24] usb usb3-port1: unable to enumerate USB device [ 274.936794][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.944951][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.924843][ T7553] fuse: Bad value for 'fd' [ 275.945590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.976159][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.055611][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 276.063349][ T30] audit: type=1804 audit(1748117888.794:15): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.412" name="/newroot/81/file0/file0" dev="ramfs" ino=14130 res=1 errno=0 [ 276.125058][ T7562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.145798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.196297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.141788][ T977] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.207547][ T5921] net_ratelimit: 1 callbacks suppressed [ 277.207565][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.438902][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 277.461486][ T977] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 277.472369][ T977] usb 5-1: config 1 has no interface number 0 [ 277.518332][ T977] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 277.557530][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.592131][ T977] usb 5-1: Product: syz [ 277.608482][ T977] usb 5-1: Manufacturer: syz [ 277.624029][ T977] usb 5-1: SerialNumber: syz [ 278.604827][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.199736][ T977] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 279.258455][ T977] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 279.296017][ T977] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 279.347246][ T977] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 279.413879][ T977] usb 5-1: USB disconnect, device number 12 [ 279.464267][ T977] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 279.523536][ T7593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.534292][ T977] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 279.574492][ T977] visor 5-1:1.6: device disconnected [ 279.658035][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.696188][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.704351][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.746235][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.311766][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.899649][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.413969][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 284.425533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.486077][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.495516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.632936][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.687736][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 284.829077][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.961759][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.015569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.153382][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.268132][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 285.379938][ T24] usb 2-1: Product: syz [ 285.438490][ T24] usb 2-1: Manufacturer: syz [ 285.504540][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.698671][ T24] hub 2-1:4.0: USB hub found [ 285.917249][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.938751][ T7645] macvlan1: entered promiscuous mode [ 285.962949][ T7645] ipvlan0: entered promiscuous mode [ 286.394837][ T24] hub 2-1:4.0: 4 ports detected [ 286.402553][ T24] hub 2-1:4.0: insufficient power available to use all downstream ports [ 286.610030][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.503261][ T7645] ipvlan0: left promiscuous mode [ 287.577658][ T7645] macvlan1: left promiscuous mode [ 287.763073][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.003388][ T24] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 288.106849][ T24] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 288.777428][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.193239][ T7670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.201979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.439085][ T30] audit: type=1804 audit(1748117902.044:16): pid=7671 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.440" name="/newroot/85/file0/file0" dev="ramfs" ino=15188 res=1 errno=0 [ 289.480076][ T24] usb 2-1: USB disconnect, device number 7 [ 289.775453][ T977] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 289.895193][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.146871][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 290.552019][ T977] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 290.583904][ T977] usb 1-1: config 1 has no interface number 0 [ 290.600620][ T977] usb 1-1: config 1 interface 133 has no altsetting 0 [ 290.631150][ T977] usb 1-1: language id specifier not provided by device, defaulting to English [ 290.695898][ T977] usb 1-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 290.712727][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.731989][ T977] usb 1-1: Product: syz [ 290.738113][ T977] usb 1-1: SerialNumber: syz [ 290.947652][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.953904][ T7688] syz.3.445 uses obsolete (PF_INET,SOCK_PACKET) [ 291.091667][ T977] sierra 1-1:1.133: Sierra USB modem converter detected [ 291.166646][ T977] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 291.246510][ T977] usb 1-1: USB disconnect, device number 10 [ 291.296625][ T977] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 291.348426][ T977] sierra 1-1:1.133: device disconnected [ 291.721487][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.429180][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.694856][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.706648][ T7708] overlayfs: failed to resolve './file1': -2 [ 293.817516][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.373843][ T5840] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 294.599977][ T7715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.454'. [ 294.929032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.204825][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.629837][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.809902][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.109071][ T7746] 9pnet_fd: Insufficient options for proto=fd [ 299.015673][ T5840] Bluetooth: hci1: unexpected event 0x3e length: 262 > 260 [ 299.015712][ T5840] Bluetooth: hci1: unexpected subevent 0x0d length: 261 > 260 [ 299.030896][ T5840] Bluetooth: hci1: Unknown advertising packet type: 0x11 [ 299.037264][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.504215][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.734021][ T30] audit: type=1804 audit(1748117913.464:17): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.465" name="/newroot/97/file0/file0" dev="ramfs" ino=16442 res=1 errno=0 [ 301.715621][ T5836] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 301.795414][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.776984][ T5837] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 302.959024][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.113368][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.293268][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 303.302695][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.320749][ T5837] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 303.721379][ T5837] usb 1-1: config 1 has no interface number 0 [ 303.751912][ T5837] usb 1-1: config 1 interface 133 has no altsetting 0 [ 303.762817][ T5837] usb 1-1: language id specifier not provided by device, defaulting to English [ 303.863027][ T5837] usb 1-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 303.882181][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.895447][ T5837] usb 1-1: Product: syz [ 303.923074][ T5837] usb 1-1: SerialNumber: syz [ 304.799017][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.818104][ T5836] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 304.905011][ T7791] overlayfs: failed to resolve './file1': -2 [ 305.556380][ T5837] sierra 1-1:1.133: Sierra USB modem converter detected [ 305.599958][ T5837] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 305.644569][ T5837] usb 1-1: USB disconnect, device number 11 [ 305.716638][ T5837] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 306.178890][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.228678][ T5837] sierra 1-1:1.133: device disconnected [ 307.195526][ T977] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 307.879297][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.106186][ T977] usb 3-1: device descriptor read/64, error -71 [ 308.494847][ T977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 309.009410][ T977] usb 3-1: device descriptor read/64, error -71 [ 309.131573][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.231093][ T977] usb usb3-port1: attempt power cycle [ 309.435433][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.519282][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.285428][ T9] usb 2-1: device descriptor read/64, error -71 [ 310.293193][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.832198][ T7816] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 311.080316][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 311.483861][ T9] usb 2-1: device descriptor read/64, error -71 [ 311.526937][ T7826] fuse: Bad value for 'fd' [ 311.806284][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.876425][ T9] usb usb2-port1: attempt power cycle [ 312.897071][ T7840] No control pipe specified [ 313.189815][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.198003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.515990][ T977] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 314.025159][ T30] audit: type=1804 audit(1748117926.764:18): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.491" name="/newroot/95/file0/file0" dev="ramfs" ino=15777 res=1 errno=0 [ 314.226230][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 314.239949][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.264040][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.268804][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.337312][ T977] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 314.404477][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.480117][ T7860] fuse: Bad value for 'fd' [ 315.380821][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.392021][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.457747][ T977] usb 3-1: config 0 descriptor?? [ 315.532390][ T977] usb 3-1: can't set config #0, error -71 [ 315.573574][ T977] usb 3-1: USB disconnect, device number 28 [ 316.619332][ T7875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.493'. [ 317.546250][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.580009][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.380425][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.391221][ T7889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.497'. [ 318.639117][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.181969][ T7904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.501'. [ 319.705728][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.755674][ T977] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 319.935512][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 320.789729][ T977] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 320.799004][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.825800][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.828212][ T977] usb 4-1: Product: syz [ 320.845420][ T977] usb 4-1: Manufacturer: syz [ 320.850142][ T977] usb 4-1: SerialNumber: syz [ 320.865212][ T977] r8152-cfgselector 4-1: Unknown version 0x0000 [ 320.875119][ T977] r8152-cfgselector 4-1: config 0 descriptor?? [ 321.205613][ T30] audit: type=1804 audit(1748117933.874:19): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.502" name="/newroot/103/file0/file0" dev="ramfs" ino=16903 res=1 errno=0 [ 321.386260][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.298121][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.358345][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.647818][ T5880] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 322.772631][ T7922] fuse: Bad value for 'fd' [ 323.478833][ T7928] vivid-007: kernel_thread() failed [ 323.643630][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.850533][ T7942] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 325.863349][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.884441][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.095642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.155253][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.419056][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.219456][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.261566][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.314157][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.725888][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 331.352111][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.136520][ T7986] overlayfs: failed to resolve './file1': -2 [ 332.292700][ T5840] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 332.292736][ T5840] Bluetooth: hci2: unexpected subevent 0x0d length: 261 > 260 [ 332.307802][ T5840] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 332.375926][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.045436][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 333.225536][ T9] usb 2-1: device descriptor read/64, error -71 [ 333.333941][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.475201][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.485474][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 334.045499][ T9] usb 2-1: device descriptor read/64, error -71 [ 334.165761][ T9] usb usb2-port1: attempt power cycle [ 334.992791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.071265][ T8008] overlayfs: failed to resolve './file1': -2 [ 335.248305][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 335.684775][ T9] usb 2-1: device descriptor read/8, error -71 [ 335.727110][ T8013] ======================================================= [ 335.727110][ T8013] WARNING: The mand mount option has been deprecated and [ 335.727110][ T8013] and is ignored by this kernel. Remove the mand [ 335.727110][ T8013] option from the mount to silence this warning. [ 335.727110][ T8013] ======================================================= [ 335.834889][ T8013] No control pipe specified [ 337.625726][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.743637][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.836867][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.903679][ T8030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.534'. [ 339.339001][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.427001][ T8029] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 339.573776][ T8038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.536'. [ 339.870410][ T5840] Bluetooth: hci0: unexpected event 0x3e length: 262 > 260 [ 339.870541][ T5840] Bluetooth: hci0: unexpected subevent 0x0d length: 261 > 260 [ 339.885867][ T5840] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 340.576701][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.285751][ T8057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.542'. [ 341.742246][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.413520][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.431758][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.787582][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'. [ 343.796652][ T8081] openvswitch: netlink: Flow key attr not present in new flow. [ 344.465368][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.511343][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.630744][ T8098] fuse: Bad value for 'fd' [ 346.683165][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.775822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.892291][ T8102] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 347.257127][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.770057][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.232049][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.730563][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.785327][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.927947][ T8138] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 350.938872][ T8138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.561'. [ 351.457651][ T5880] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 352.206763][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.355570][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 352.364163][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.381643][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.393007][ T5880] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 352.406910][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.424664][ T5880] usb 5-1: config 0 descriptor?? [ 352.666846][ T8146] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 353.015772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.283332][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.995236][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.192566][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 354.596102][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.645648][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 354.727388][ T5880] usb 5-1: USB disconnect, device number 13 [ 355.721825][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.035423][ T5840] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 356.561755][ T8174] netlink: 'syz.4.576': attribute type 11 has an invalid length. [ 357.116064][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 357.282186][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.413985][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.585664][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 357.811397][ T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 357.820909][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.829069][ T47] usb 4-1: Product: syz [ 357.833366][ T47] usb 4-1: Manufacturer: syz [ 357.838351][ T47] usb 4-1: SerialNumber: syz [ 358.489973][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.540488][ T47] r8152-cfgselector 4-1: Unknown version 0x0000 [ 358.646224][ T47] r8152-cfgselector 4-1: config 0 descriptor?? [ 358.671605][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.012279][ T30] audit: type=1804 audit(1748117971.754:20): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.573" name="/newroot/116/file0/file0" dev="ramfs" ino=18541 res=1 errno=0 [ 359.612798][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.116626][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.555943][ T8202] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 360.624674][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.669566][ T24] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 360.702061][ T8212] netlink: 'syz.1.585': attribute type 11 has an invalid length. [ 361.913943][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 362.011862][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.685582][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 362.885583][ T977] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.894694][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.024811][ T977] usb 5-1: Product: syz [ 363.035344][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.037947][ T977] usb 5-1: Manufacturer: syz [ 363.338252][ T977] usb 5-1: SerialNumber: syz [ 363.997137][ T5840] Bluetooth: hci4: unexpected event 0x3e length: 262 > 260 [ 363.997270][ T5840] Bluetooth: hci4: unexpected subevent 0x0d length: 261 > 260 [ 364.012647][ T5840] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 364.501225][ T977] r8152-cfgselector 5-1: Unknown version 0x0000 [ 364.553622][ T977] r8152-cfgselector 5-1: config 0 descriptor?? [ 364.566489][ T977] r8152-cfgselector 5-1: can't set config #0, error -71 [ 364.636436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.659856][ T977] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 365.913198][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.942850][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.025970][ T8267] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.055457][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 366.236486][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.148773][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 367.159715][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.171034][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.196860][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.215867][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 367.230467][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 367.233826][ T24] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 367.252393][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 367.283433][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.299541][ T977] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 367.320900][ T24] usb 2-1: config 0 descriptor?? [ 367.337362][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.404242][ T977] usb 1-1: config 0 descriptor?? [ 367.621125][ T8282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.736839][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.817772][ T5880] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 367.985923][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 368.422748][ T977] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 368.474707][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.486653][ T5880] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 368.528320][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.574292][ T977] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 368.586211][ T5880] usb 3-1: Product: syz [ 368.600997][ T5880] usb 3-1: Manufacturer: syz [ 368.627293][ T5880] usb 3-1: SerialNumber: syz [ 368.648884][ T977] usb 1-1: USB disconnect, device number 12 [ 368.702271][ T5880] r8152-cfgselector 3-1: Unknown version 0x0000 [ 368.735963][ T5880] r8152-cfgselector 3-1: config 0 descriptor?? [ 368.785473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.924122][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 368.965848][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 369.015031][ T24] usb 2-1: USB disconnect, device number 15 [ 369.054405][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.069579][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.078653][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.090276][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.154153][ T5840] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 369.154307][ T5840] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 369.169803][ T5840] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 369.625223][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.597318][ T977] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 370.729889][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.824114][ T8309] overlayfs: failed to resolve './file1': -2 [ 371.035557][ T5880] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 371.470695][ T5880] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 371.484302][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.520744][ T5880] usb 2-1: config 0 descriptor?? [ 371.552618][ T5880] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 371.574923][ T5880] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 372.514162][ T47] net_ratelimit: 1 callbacks suppressed [ 372.514180][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.785605][ T977] usb 2-1: USB disconnect, device number 16 [ 373.036090][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 373.821081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.155525][ T8327] fuse: Bad value for 'fd' [ 374.175353][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 374.223419][ T9] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 374.253328][ T9] usb 1-1: config 1 has no interface number 0 [ 374.268483][ T9] usb 1-1: config 1 interface 133 has no altsetting 0 [ 374.468681][ T30] audit: type=1804 audit(1748117987.204:21): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.618" name="/newroot/126/file0/file0" dev="ramfs" ino=18975 res=1 errno=0 [ 374.817093][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 374.846277][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 374.998397][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.045333][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.053513][ T9] usb 1-1: Product: syz [ 375.070699][ T9] usb 1-1: SerialNumber: syz [ 375.768409][ T9] sierra 1-1:1.133: Sierra USB modem converter detected [ 375.875389][ T5814] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 376.408591][ T9] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 376.428738][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.449263][ T9] usb 1-1: USB disconnect, device number 13 [ 376.468965][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 376.481208][ T9] sierra 1-1:1.133: device disconnected [ 376.588686][ T8349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 376.616113][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 376.638104][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.843631][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.854228][ T5814] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 376.863843][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.338405][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.480777][ T5882] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 377.489590][ T5814] usb 2-1: config 0 descriptor?? [ 377.673648][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.746366][ T8356] process 'syz.2.626' launched '/dev/fd/3' with NULL argv: empty string added [ 377.787357][ T5840] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 377.805433][ T5882] usb 4-1: device descriptor read/64, error -71 [ 378.084578][ T5882] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 378.388085][ T5882] usb 4-1: device descriptor read/64, error -71 [ 378.619008][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621436][ T5882] usb usb4-port1: attempt power cycle [ 378.625764][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.959181][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.018836][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 379.030084][ T5814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 379.055949][ T5814] usb 2-1: USB disconnect, device number 17 [ 379.385412][ T5882] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 380.168274][ T5840] Bluetooth: hci0: unexpected event 0x3e length: 262 > 260 [ 380.168577][ T5840] Bluetooth: hci0: unexpected subevent 0x0d length: 261 > 260 [ 380.191449][ T5840] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 380.752707][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.772877][ T5882] usb 4-1: device descriptor read/8, error -71 [ 381.131434][ T8390] fuse: Bad value for 'fd' [ 381.445630][ T5814] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 381.507276][ T30] audit: type=1804 audit(1748117994.254:22): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.631" name="/newroot/121/file0/file0" dev="ramfs" ino=19079 res=1 errno=0 [ 381.715577][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 382.136788][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.180220][ T5814] usb 3-1: config 1 has an invalid interface number: 133 but max is 0 [ 382.200106][ T5814] usb 3-1: config 1 has no interface number 0 [ 382.225632][ T5814] usb 3-1: config 1 interface 133 has no altsetting 0 [ 382.253689][ T5814] usb 3-1: language id specifier not provided by device, defaulting to English [ 382.288006][ T5814] usb 3-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 382.302539][ T8400] overlayfs: failed to resolve './file1': -2 [ 382.308683][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.317522][ T5814] usb 3-1: Product: syz [ 382.321744][ T5814] usb 3-1: SerialNumber: syz [ 383.100269][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.172275][ T8398] 9pnet: Could not find request transport: rdmaÏp7:E´¤Ž [ 383.194482][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.232970][ T5814] sierra 3-1:1.133: Sierra USB modem converter detected [ 383.266397][ T5814] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 383.514841][ T5814] usb 3-1: USB disconnect, device number 30 [ 383.524626][ T5814] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 383.534135][ T5814] sierra 3-1:1.133: device disconnected [ 383.562292][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.442195][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.750835][ T30] audit: type=1804 audit(1748117998.444:23): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.645" name="/newroot/133/file0/file0" dev="ramfs" ino=17965 res=1 errno=0 [ 385.813057][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 386.109780][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.330296][ T8438] fuse: Bad value for 'fd' [ 386.455379][ T9] usb 1-1: device descriptor read/64, error -71 [ 387.136342][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 387.398505][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.536341][ T9] usb 1-1: device descriptor read/64, error -71 [ 387.767988][ T9] usb usb1-port1: attempt power cycle [ 388.444572][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.542678][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.673604][ T5840] Bluetooth: hci4: link tx timeout [ 388.679029][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 388.978100][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.620316][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.780031][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 390.806422][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.507510][ T5814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 391.880290][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.025334][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 392.050987][ T5814] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 392.210098][ T5814] usb 1-1: config 1 has no interface number 0 [ 392.230866][ T5814] usb 1-1: config 1 interface 133 has no altsetting 0 [ 392.240244][ T5814] usb 1-1: language id specifier not provided by device, defaulting to English [ 392.261557][ T5814] usb 1-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 392.275781][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.294236][ T5814] usb 1-1: Product: syz [ 392.300761][ T5814] usb 1-1: SerialNumber: syz [ 393.498234][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.835101][ T8506] netlink: 'syz.2.663': attribute type 39 has an invalid length. [ 394.018768][ T5814] sierra 1-1:1.133: Sierra USB modem converter detected [ 394.039249][ T5814] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 394.595639][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.617209][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.626530][ T5814] usb 1-1: USB disconnect, device number 17 [ 394.686556][ T5814] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 394.726983][ T5814] sierra 1-1:1.133: device disconnected [ 395.400478][ T5837] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 395.915842][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.026824][ T5837] usb 4-1: device descriptor read/64, error -71 [ 396.446141][ T30] audit: type=1804 audit(1748118009.194:24): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.668" name="/newroot/130/file0/file0" dev="ramfs" ino=19392 res=1 errno=0 [ 396.686291][ T8522] netlink: 224 bytes leftover after parsing attributes in process `syz.2.667'. [ 396.710245][ T5837] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 396.885381][ T5837] usb 4-1: device descriptor read/64, error -71 [ 396.995420][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.772570][ T5837] usb usb4-port1: attempt power cycle [ 397.831934][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.595768][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.709248][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 398.751135][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 399.170385][ T8549] capability: warning: `syz.1.672' uses deprecated v2 capabilities in a way that may be insecure [ 399.189646][ T8549] netlink: 72 bytes leftover after parsing attributes in process `syz.1.672'. [ 399.827421][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.942428][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.522263][ T30] audit: type=1804 audit(1748118013.264:25): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.673" name="/newroot/131/file0/file0" dev="ramfs" ino=19496 res=1 errno=0 [ 401.189460][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.361803][ T8555] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 401.405838][ T5880] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 401.615412][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 401.680119][ T5880] usb 3-1: config 1 has an invalid interface number: 133 but max is 0 [ 401.693741][ T5880] usb 3-1: config 1 has no interface number 0 [ 401.703927][ T5880] usb 3-1: config 1 interface 133 has no altsetting 0 [ 401.774184][ T8571] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 401.783720][ T8571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.679'. [ 401.877067][ T5837] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 402.175379][ T5880] usb 3-1: language id specifier not provided by device, defaulting to English [ 402.221103][ T5880] usb 3-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=7a.33 [ 402.221498][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.235529][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.279970][ T5880] usb 3-1: Product: syz [ 402.295366][ T5880] usb 3-1: SerialNumber: syz [ 402.507374][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.517255][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 402.520608][ T47] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 402.548047][ T5837] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 402.558307][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.176310][ T5837] usb 4-1: config 0 descriptor?? [ 403.339501][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.347516][ T5880] sierra 3-1:1.133: Sierra USB modem converter detected [ 403.491727][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 403.499580][ T5837] ath6kl: Failed to submit usb control message: -71 [ 403.509507][ T47] usb 5-1: not running at top speed; connect to a high speed hub [ 403.529525][ T47] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 403.538000][ T47] usb 5-1: config 0 has no interface number 0 [ 403.545465][ T47] usb 5-1: config 0 interface 182 has no altsetting 0 [ 403.550054][ T5837] ath6kl: unable to send the bmi data to the device: -71 [ 403.568598][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=5590, bcdDevice=54.72 [ 403.579441][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.591577][ T47] usb 5-1: Product: syz [ 403.598289][ T47] usb 5-1: Manufacturer: syz [ 403.602907][ T47] usb 5-1: SerialNumber: syz [ 404.293216][ T5880] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 404.321245][ T5837] ath6kl: Unable to send get target info: -71 [ 404.338314][ T5880] usb 3-1: USB disconnect, device number 31 [ 404.345847][ T5837] ath6kl: Failed to init ath6kl core: -71 [ 404.353040][ T5837] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 404.365065][ T5880] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 404.375946][ T5880] sierra 3-1:1.133: device disconnected [ 404.381782][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.389782][ T5837] usb 4-1: USB disconnect, device number 24 [ 404.555215][ T47] usb 5-1: config 0 descriptor?? [ 405.253019][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.261983][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.364013][ T47] hub 5-1:0.182: bad descriptor, ignoring hub [ 405.387602][ T47] hub 5-1:0.182: probe with driver hub failed with error -5 [ 405.470259][ T47] smsusb:smsusb_probe: board id=8, interface number 182 [ 405.608501][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.461908][ T47] usb 5-1: USB disconnect, device number 15 [ 406.585652][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.793516][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.573315][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.896569][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.993034][ T8606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.687'. [ 408.627584][ T5921] kernel write not supported for file /snd/seq (pid: 5921 comm: kworker/1:6) [ 408.653694][ T5837] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 408.815997][ T5837] usb 1-1: device descriptor read/64, error -71 [ 408.941480][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.135308][ T5837] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 409.135693][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 409.476221][ T47] usb 5-1: device descriptor read/64, error -71 [ 409.635355][ T5837] usb 1-1: device descriptor read/64, error -71 [ 409.983340][ T5837] usb usb1-port1: attempt power cycle [ 410.617037][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.895814][ T47] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 411.057345][ T47] usb 5-1: device descriptor read/64, error -71 [ 411.271219][ T47] usb usb5-port1: attempt power cycle [ 411.500161][ T5837] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 411.639027][ T5837] usb 1-1: device descriptor read/8, error -71 [ 411.985969][ T5836] Bluetooth: hci4: unexpected event 0x3e length: 262 > 260 [ 411.986009][ T5836] Bluetooth: hci4: unexpected subevent 0x0d length: 261 > 260 [ 412.000876][ T5836] Bluetooth: hci4: Unknown advertising packet type: 0x11 [ 412.015639][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.105383][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 412.929536][ T8664] fuse: Bad value for 'fd' [ 413.039548][ T8651] netlink: 224 bytes leftover after parsing attributes in process `syz.0.697'. [ 413.383773][ T5880] usb 4-1: too many configurations: 253, using maximum allowed: 8 [ 413.404578][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.412882][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.484510][ T8667] FAULT_INJECTION: forcing a failure. [ 413.484510][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.629894][ T8667] CPU: 1 UID: 0 PID: 8667 Comm: syz.2.702 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 413.629938][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.629960][ T8667] Call Trace: [ 413.629968][ T8667] [ 413.629981][ T8667] dump_stack_lvl+0x189/0x250 [ 413.630015][ T8667] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.630041][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.630084][ T8667] should_fail_ex+0x414/0x560 [ 413.630109][ T8667] _copy_to_user+0x31/0xb0 [ 413.630138][ T8667] simple_read_from_buffer+0xe1/0x170 [ 413.630172][ T8667] proc_fail_nth_read+0x1df/0x250 [ 413.630196][ T8667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.630220][ T8667] ? rw_verify_area+0x258/0x650 [ 413.630248][ T8667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.630270][ T8667] vfs_read+0x200/0x980 [ 413.630313][ T8667] ? __pfx___mutex_lock+0x10/0x10 [ 413.630338][ T8667] ? __pfx_vfs_read+0x10/0x10 [ 413.630367][ T8667] ? __fget_files+0x2a/0x420 [ 413.630390][ T8667] ? __fget_files+0x3a0/0x420 [ 413.630407][ T8667] ? __fget_files+0x2a/0x420 [ 413.630435][ T8667] ksys_read+0x145/0x250 [ 413.630460][ T8667] ? rcu_is_watching+0x15/0xb0 [ 413.630491][ T8667] ? __pfx_ksys_read+0x10/0x10 [ 413.630521][ T8667] ? do_syscall_64+0xba/0x210 [ 413.630549][ T8667] do_syscall_64+0xf6/0x210 [ 413.630574][ T8667] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.630594][ T8667] ? clear_bhb_loop+0x60/0xb0 [ 413.630618][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.630636][ T8667] RIP: 0033:0x7ff4a478d37c [ 413.630655][ T8667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.630673][ T8667] RSP: 002b:00007ff4a556b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.630694][ T8667] RAX: ffffffffffffffda RBX: 00007ff4a49b5fa0 RCX: 00007ff4a478d37c [ 413.630708][ T8667] RDX: 000000000000000f RSI: 00007ff4a556b0a0 RDI: 0000000000000005 [ 413.630721][ T8667] RBP: 00007ff4a556b090 R08: 0000000000000000 R09: 0000000000000000 [ 413.630733][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.630744][ T8667] R13: 0000000000000000 R14: 00007ff4a49b5fa0 R15: 00007ffcfcd49128 [ 413.630776][ T8667] [ 414.483311][ T5880] usb 4-1: string descriptor 0 read error: -71 [ 414.496900][ T5880] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.912238][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.265776][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.345373][ T5880] usb 4-1: can't set config #1, error -71 [ 416.061192][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.387991][ T5880] usb 4-1: USB disconnect, device number 25 [ 416.931223][ T8679] dns_resolver: Unsupported server list version (0) [ 417.087185][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.538747][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.175424][ T8678] FAULT_INJECTION: forcing a failure. [ 418.175424][ T8678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.614068][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.744968][ T8679] trusted_key: encrypted_key: insufficient parameters specified [ 419.143090][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.310890][ T8683] vivid-007: kernel_thread() failed [ 419.348432][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.4.704 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 419.348462][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.348475][ T8678] Call Trace: [ 419.348483][ T8678] [ 419.348492][ T8678] dump_stack_lvl+0x189/0x250 [ 419.348536][ T8678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.348564][ T8678] ? __pfx__printk+0x10/0x10 [ 419.348609][ T8678] should_fail_ex+0x414/0x560 [ 419.348636][ T8678] _copy_to_user+0x31/0xb0 [ 419.348667][ T8678] syslog_print+0x431/0x590 [ 419.348701][ T8678] ? __pfx_syslog_print+0x10/0x10 [ 419.348738][ T8678] ? smack_privileged_cred+0xb7/0x380 [ 419.348776][ T8678] ? smack_privileged_cred+0xb7/0x380 [ 419.348807][ T8678] ? __pfx_autoremove_wake_function+0x10/0x10 [ 419.348833][ T8678] ? smack_privileged_cred+0x33d/0x380 [ 419.348867][ T8678] ? smack_syslog+0x96/0xf0 [ 419.348900][ T8678] do_syslog+0x544/0x760 [ 419.348932][ T8678] ? __pfx_do_syslog+0x10/0x10 [ 419.348961][ T8678] ? __fget_files+0x3a0/0x420 [ 419.348988][ T8678] ? fput+0xa0/0xd0 [ 419.349011][ T8678] ? ksys_write+0x1f0/0x250 [ 419.349037][ T8678] ? rcu_is_watching+0x15/0xb0 [ 419.349078][ T8678] __x64_sys_syslog+0x7c/0x90 [ 419.349109][ T8678] do_syscall_64+0xf6/0x210 [ 419.349136][ T8678] ? clear_bhb_loop+0x60/0xb0 [ 419.349161][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.349180][ T8678] RIP: 0033:0x7fcff0f8e969 [ 419.349198][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.349216][ T8678] RSP: 002b:00007fcff1e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 419.349238][ T8678] RAX: ffffffffffffffda RBX: 00007fcff11b5fa0 RCX: 00007fcff0f8e969 [ 419.349253][ T8678] RDX: 0000000000000ff6 RSI: 0000200000001100 RDI: 0000000000000002 [ 419.349266][ T8678] RBP: 00007fcff1e07090 R08: 0000000000000000 R09: 0000000000000000 [ 419.349279][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.349291][ T8678] R13: 0000000000000000 R14: 00007fcff11b5fa0 R15: 00007ffe3bb48078 [ 419.349322][ T8678] [ 419.656928][ T8689] overlayfs: failed to resolve './file1': -2 [ 419.725367][ T8691] overlayfs: missing 'workdir' [ 420.019402][ T5913] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 420.285343][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 421.807594][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.168530][ T5913] usb 2-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 1024 [ 423.076681][ T5913] usb 2-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 16 [ 423.103405][ T5913] usb 2-1: config 1 interface 0 has no altsetting 0 [ 423.252922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.402318][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.165892][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.306793][ T5913] usb 2-1: string descriptor 0 read error: -71 [ 425.339028][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.402479][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.458632][ T5913] usb 2-1: can't set config #1, error -71 [ 425.493955][ T5913] usb 2-1: USB disconnect, device number 18 [ 425.544353][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.615681][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.109796][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.161059][ T0] sched: DL replenish lagged too much [ 429.621044][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.165742][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.515712][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.602985][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.655153][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.973718][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.992718][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.148651][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.264400][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.072747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.423119][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.443894][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.928396][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.326653][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.414599][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.472069][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.490235][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.312093][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.712532][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.722575][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.732148][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.740259][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.931789][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.944830][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.953951][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.968832][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.977683][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.036741][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.190554][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.205559][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.219271][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.227881][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.249411][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.372987][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.384760][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.394155][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 456.410561][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 456.432319][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.216523][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.371802][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 457.537812][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.644579][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.795857][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 457.895645][ T5836] Bluetooth: hci5: command tx timeout [ 457.977114][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.055718][ T5836] Bluetooth: hci6: command tx timeout [ 458.295467][ T5836] Bluetooth: hci7: command tx timeout [ 458.456697][ T5836] Bluetooth: hci2: command tx timeout [ 459.149200][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.160974][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.184631][ T8749] bridge_slave_0: entered allmulticast mode [ 459.194558][ T8749] bridge_slave_0: entered promiscuous mode [ 459.233509][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 459.265905][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 459.285353][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.292924][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.306627][ T8749] bridge_slave_1: entered allmulticast mode [ 459.314660][ T8749] bridge_slave_1: entered promiscuous mode [ 459.728658][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.762366][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.975623][ T5836] Bluetooth: hci5: command tx timeout [ 460.034363][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.049552][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.061452][ T8744] bridge_slave_0: entered allmulticast mode [ 460.073782][ T8744] bridge_slave_0: entered promiscuous mode [ 460.096918][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.104109][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.124350][ T8744] bridge_slave_1: entered allmulticast mode [ 460.142063][ T5836] Bluetooth: hci6: command tx timeout [ 460.151293][ T8744] bridge_slave_1: entered promiscuous mode [ 460.228629][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.375541][ T5836] Bluetooth: hci7: command tx timeout [ 460.535687][ T5836] Bluetooth: hci2: command tx timeout [ 460.574240][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.016616][ T8749] team0: Port device team_slave_0 added [ 461.190501][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.211818][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.227879][ T8749] team0: Port device team_slave_1 added [ 461.474574][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.493753][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.507242][ T8754] bridge_slave_0: entered allmulticast mode [ 461.523877][ T8754] bridge_slave_0: entered promiscuous mode [ 461.674138][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.683299][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.695535][ T8752] bridge_slave_0: entered allmulticast mode [ 461.718104][ T8752] bridge_slave_0: entered promiscuous mode [ 461.732232][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.742138][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.758088][ T8754] bridge_slave_1: entered allmulticast mode [ 461.774111][ T8754] bridge_slave_1: entered promiscuous mode [ 461.863375][ T8744] team0: Port device team_slave_0 added [ 461.870852][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.894042][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.905083][ T8752] bridge_slave_1: entered allmulticast mode [ 461.921616][ T8752] bridge_slave_1: entered promiscuous mode [ 462.065804][ T55] Bluetooth: hci5: command tx timeout [ 462.081142][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.095306][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.133147][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.155339][ T8744] team0: Port device team_slave_1 added [ 462.163744][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.186394][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.220919][ T55] Bluetooth: hci6: command tx timeout [ 462.230590][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.465814][ T55] Bluetooth: hci7: command tx timeout [ 462.513829][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.615804][ T55] Bluetooth: hci2: command tx timeout [ 462.714587][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.743830][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.758455][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.771220][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.808077][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.074677][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.146781][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.419867][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.434132][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.475676][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.662393][ T8752] team0: Port device team_slave_0 added [ 463.741148][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.792289][ T8754] team0: Port device team_slave_0 added [ 463.814838][ T8749] hsr_slave_0: entered promiscuous mode [ 463.831044][ T8749] hsr_slave_1: entered promiscuous mode [ 463.849617][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.861669][ T8749] Cannot create hsr debugfs directory [ 463.879788][ T8752] team0: Port device team_slave_1 added [ 464.100395][ T8754] team0: Port device team_slave_1 added [ 464.137167][ T55] Bluetooth: hci5: command tx timeout [ 464.295539][ T55] Bluetooth: hci6: command tx timeout [ 464.535454][ T55] Bluetooth: hci7: command tx timeout [ 464.695917][ T55] Bluetooth: hci2: command tx timeout [ 465.858568][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.871748][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.880044][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.909164][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.952178][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.962573][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.998494][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.034117][ T8744] hsr_slave_0: entered promiscuous mode [ 466.046950][ T8744] hsr_slave_1: entered promiscuous mode [ 466.060423][ T8744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.074890][ T8744] Cannot create hsr debugfs directory [ 466.090270][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.108803][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.149636][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.226441][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.233449][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.277664][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.039472][ T8754] hsr_slave_0: entered promiscuous mode [ 467.059758][ T8754] hsr_slave_1: entered promiscuous mode [ 467.082263][ T8754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.094940][ T8754] Cannot create hsr debugfs directory [ 467.141602][ T8752] hsr_slave_0: entered promiscuous mode [ 467.159665][ T8752] hsr_slave_1: entered promiscuous mode [ 467.174530][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.192782][ T8752] Cannot create hsr debugfs directory [ 467.698236][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.786954][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.105101][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.152793][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 469.167301][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 469.176367][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 469.187321][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 469.205369][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 470.386587][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.255580][ T5836] Bluetooth: hci8: command tx timeout [ 472.229927][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.336877][ T5836] Bluetooth: hci8: command tx timeout [ 474.041807][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.616109][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.415530][ T5836] Bluetooth: hci8: command tx timeout [ 477.495647][ T5836] Bluetooth: hci8: command tx timeout [ 478.144858][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.062910][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.376226][ T3502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.993882][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.452796][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.496066][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.167682][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.277975][ T3502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.164431][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.189071][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.365319][ T8749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.411275][ T8749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.511161][ T8749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.588469][ T8749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.759382][ T8744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.878222][ T8744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.911636][ T8744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.999763][ T8744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.281406][ T8754] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 493.434075][ T8754] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 493.543304][ T8754] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 493.584476][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 493.641329][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.692892][ T8754] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.864967][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.972989][ T8752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 494.044231][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.087829][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.095025][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.113437][ T8752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 494.161572][ T8752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 494.196125][ T8752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 494.264802][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.272034][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.381371][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.616051][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.623874][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.644445][ T8782] bridge_slave_0: entered allmulticast mode [ 494.654765][ T8782] bridge_slave_0: entered promiscuous mode [ 494.713585][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.733616][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.754139][ T8782] bridge_slave_1: entered allmulticast mode [ 494.764483][ T8782] bridge_slave_1: entered promiscuous mode [ 494.872584][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.025405][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.079363][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.111821][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.226252][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.233494][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.514037][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.521232][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.521920][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.558573][ T8782] team0: Port device team_slave_0 added [ 495.599573][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.739945][ T8782] team0: Port device team_slave_1 added [ 497.022224][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.626382][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.736433][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.668648][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.236259][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.777603][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.822738][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.877254][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.089902][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.105625][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.153743][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.388673][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.193153][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.540715][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.294799][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.152512][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.663680][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.411978][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.232116][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.265629][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.299971][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.314570][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.324150][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.529899][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.590599][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.599495][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.607968][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.618971][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.659586][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.746085][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.755012][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.776532][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.785515][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.793840][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.177864][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 516.186612][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 516.197078][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 516.233996][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 516.241956][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 517.415909][ T55] Bluetooth: hci0: command tx timeout [ 517.736124][ T55] Bluetooth: hci1: command tx timeout [ 517.897814][ T55] Bluetooth: hci3: command tx timeout [ 518.295648][ T55] Bluetooth: hci9: command tx timeout [ 518.539155][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.424808][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.495611][ T55] Bluetooth: hci0: command tx timeout [ 519.816072][ T55] Bluetooth: hci1: command tx timeout [ 519.975514][ T55] Bluetooth: hci3: command tx timeout [ 520.375667][ T55] Bluetooth: hci9: command tx timeout [ 521.171564][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.575515][ T55] Bluetooth: hci0: command tx timeout [ 521.896357][ T55] Bluetooth: hci1: command tx timeout [ 522.058435][ T55] Bluetooth: hci3: command tx timeout [ 522.455715][ T55] Bluetooth: hci9: command tx timeout [ 523.418909][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.655724][ T55] Bluetooth: hci0: command tx timeout [ 523.976154][ T55] Bluetooth: hci1: command tx timeout [ 524.135407][ T55] Bluetooth: hci3: command tx timeout [ 524.536595][ T55] Bluetooth: hci9: command tx timeout [ 525.176439][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.411407][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.764584][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.264052][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.298825][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 530.307885][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 530.315865][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 530.327448][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 530.335572][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 530.944770][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.385899][ T55] Bluetooth: hci10: command tx timeout [ 533.105366][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.455623][ T55] Bluetooth: hci10: command tx timeout [ 534.963134][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.056103][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.535734][ T55] Bluetooth: hci10: command tx timeout [ 537.357873][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.615842][ T55] Bluetooth: hci10: command tx timeout [ 539.296972][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.189810][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.939343][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.958315][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.616171][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.840653][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.018319][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.700897][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.804245][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.672334][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.463666][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.955110][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.043893][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.810565][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.524263][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.439988][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.458083][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.536785][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.808574][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.808205][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.541828][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 575.565410][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 575.573843][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 575.584983][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 575.594669][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 575.646074][ T8841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 575.665500][ T8841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 575.673958][ T8841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 575.697375][ T8841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 575.705851][ T8841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 575.881267][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 575.894770][ T5840] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 575.903798][ T5840] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 575.912463][ T5840] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 575.920800][ T5840] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 576.565948][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 576.577312][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 576.585975][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 576.596439][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 576.604301][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 577.663154][ T8841] Bluetooth: hci11: command tx timeout [ 577.815634][ T8841] Bluetooth: hci12: command tx timeout [ 577.975775][ T8841] Bluetooth: hci13: command tx timeout [ 578.091007][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.299047][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.695414][ T8851] Bluetooth: hci14: command tx timeout [ 579.258961][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.743188][ T8851] Bluetooth: hci11: command tx timeout [ 579.895483][ T8851] Bluetooth: hci12: command tx timeout [ 580.056104][ T8851] Bluetooth: hci13: command tx timeout [ 580.387392][ T8851] Bluetooth: hci7: command 0x0406 tx timeout [ 580.393481][ T8851] Bluetooth: hci5: command 0x0406 tx timeout [ 580.401074][ T8851] Bluetooth: hci6: command 0x0406 tx timeout [ 580.407870][ T8850] Bluetooth: hci2: command 0x0406 tx timeout [ 580.775586][ T8851] Bluetooth: hci14: command tx timeout [ 581.595212][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.815616][ T5836] Bluetooth: hci11: command tx timeout [ 581.975589][ T5836] Bluetooth: hci12: command tx timeout [ 582.135791][ T5836] Bluetooth: hci13: command tx timeout [ 582.855477][ T5836] Bluetooth: hci14: command tx timeout [ 583.895856][ T5836] Bluetooth: hci11: command tx timeout [ 584.066780][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.083810][ T5836] Bluetooth: hci12: command tx timeout [ 584.215730][ T5836] Bluetooth: hci13: command tx timeout [ 584.939716][ T5836] Bluetooth: hci14: command tx timeout [ 586.483759][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.203656][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.816400][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.909610][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 590.919341][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 590.928229][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 590.944489][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 590.954398][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 591.584418][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.016374][ T5840] Bluetooth: hci15: command tx timeout [ 593.264944][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.583694][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.095521][ T5836] Bluetooth: hci15: command tx timeout [ 595.584761][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.735875][ T5836] Bluetooth: hci8: command 0x0406 tx timeout [ 597.181349][ T5836] Bluetooth: hci15: command tx timeout [ 597.574802][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.255670][ T5836] Bluetooth: hci15: command tx timeout [ 599.583734][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.701662][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.725069][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.402270][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.470300][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.277777][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.104908][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.577040][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.338186][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.163691][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.260576][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.269866][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.304041][ T8795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.097313][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.402931][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.453283][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.566895][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.216035][ T71] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.047345][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.772721][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.976321][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.678436][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.804385][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.605883][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 637.617094][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 637.634686][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 637.656728][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 637.664731][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 637.781292][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 637.791000][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 637.800025][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 637.856880][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 637.864910][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 637.991606][ T5836] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 638.002845][ T5836] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 638.013545][ T5836] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 638.028602][ T5836] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 638.039160][ T5836] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 638.159876][ T5840] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 638.177694][ T5840] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 638.193777][ T5840] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 638.227276][ T5840] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 638.242137][ T5840] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 639.755462][ T55] Bluetooth: hci16: command tx timeout [ 639.797669][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.895950][ T8851] Bluetooth: hci17: command tx timeout [ 639.948130][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.138528][ T8851] Bluetooth: hci18: command tx timeout [ 640.295801][ T8851] Bluetooth: hci19: command tx timeout [ 641.828043][ T8854] Bluetooth: hci9: command 0x0406 tx timeout [ 641.834226][ T8854] Bluetooth: hci0: command 0x0406 tx timeout [ 641.842054][ T8854] Bluetooth: hci3: command 0x0406 tx timeout [ 641.849843][ T8851] Bluetooth: hci1: command 0x0406 tx timeout [ 641.856457][ T8854] Bluetooth: hci16: command tx timeout [ 641.975777][ T8850] Bluetooth: hci17: command tx timeout [ 642.037835][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.215624][ T5840] Bluetooth: hci18: command tx timeout [ 642.375726][ T5836] Bluetooth: hci19: command tx timeout [ 643.249291][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.896013][ T5836] Bluetooth: hci16: command tx timeout [ 644.055731][ T5836] Bluetooth: hci17: command tx timeout [ 644.299660][ T5836] Bluetooth: hci18: command tx timeout [ 644.455650][ T5836] Bluetooth: hci19: command tx timeout [ 645.496674][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.902544][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.975611][ T5836] Bluetooth: hci16: command tx timeout [ 646.135913][ T5836] Bluetooth: hci17: command tx timeout [ 646.375735][ T5840] Bluetooth: hci18: command tx timeout [ 646.535884][ T5840] Bluetooth: hci19: command tx timeout [ 647.062853][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.533718][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.256908][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.491896][ T5836] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 651.521272][ T5836] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 651.536714][ T5836] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 651.545716][ T5836] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 651.554941][ T5836] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 652.014591][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.655558][ T5836] Bluetooth: hci20: command tx timeout [ 654.114705][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.735830][ T5836] Bluetooth: hci20: command tx timeout [ 656.553341][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.028967][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.180920][ T5836] Bluetooth: hci10: command 0x0406 tx timeout [ 657.815772][ T5836] Bluetooth: hci20: command tx timeout [ 658.239809][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.936101][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 658.944473][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 658.975937][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.984675][ T31] task:kworker/u8:1 state:D stack:22936 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 659.065251][ T31] Workqueue: events_unbound linkwatch_event [ 659.071398][ T31] Call Trace: [ 659.074708][ T31] [ 659.195863][ T31] __schedule+0x168f/0x4c70 [ 659.200558][ T31] ? schedule+0x165/0x360 [ 659.204927][ T31] ? __pfx___schedule+0x10/0x10 [ 659.285514][ T31] ? schedule+0x91/0x360 [ 659.289852][ T31] schedule+0x165/0x360 [ 659.294048][ T31] schedule_preempt_disabled+0x13/0x30 [ 659.335455][ T31] __mutex_lock+0x724/0xe80 [ 659.340050][ T31] ? __mutex_lock+0x51b/0xe80 [ 659.356308][ T31] ? linkwatch_event+0xe/0x60 [ 659.361076][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 659.375406][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.380687][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 659.394825][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 659.401440][ T31] linkwatch_event+0xe/0x60 [ 659.414448][ T31] process_scheduled_works+0xade/0x17a0 [ 659.421604][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.440537][ T31] worker_thread+0x8a0/0xda0 [ 659.449866][ T31] kthread+0x711/0x8a0 [ 659.464371][ T31] ? __pfx_worker_thread+0x10/0x10 [ 659.473398][ T31] ? __pfx_kthread+0x10/0x10 [ 659.483653][ T31] ? __pfx_kthread+0x10/0x10 [ 659.491844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.503234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.511966][ T31] ? __pfx_kthread+0x10/0x10 [ 659.521822][ T31] ret_from_fork+0x4b/0x80 [ 659.533793][ T31] ? __pfx_kthread+0x10/0x10 [ 659.543780][ T31] ret_from_fork_asm+0x1a/0x30 [ 659.563869][ T31] [ 659.571320][ T31] INFO: task kworker/u8:10:3502 blocked for more than 143 seconds. [ 659.591916][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 659.602325][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.615422][ T31] task:kworker/u8:10 state:D stack:22936 pid:3502 tgid:3502 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 659.635480][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 659.642973][ T31] Call Trace: [ 659.654202][ T31] [ 659.665499][ T31] __schedule+0x168f/0x4c70 [ 659.670100][ T31] ? schedule+0x165/0x360 [ 659.674487][ T31] ? __pfx___schedule+0x10/0x10 [ 659.695020][ T31] ? schedule+0x91/0x360 [ 659.704625][ T31] schedule+0x165/0x360 [ 659.717346][ T31] schedule_preempt_disabled+0x13/0x30 [ 659.722883][ T31] __mutex_lock+0x724/0xe80 [ 659.734118][ T31] ? __mutex_lock+0x51b/0xe80 [ 659.745415][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 659.750689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 659.764309][ T31] ? do_raw_spin_lock+0x121/0x290 [ 659.774667][ T31] ? look_up_lock_class+0x74/0x170 [ 659.790851][ T31] addrconf_dad_work+0x112/0x14b0 [ 659.804687][ T31] ? __lock_acquire+0xaac/0xd20 [ 659.810130][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 659.823819][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 659.830180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.844073][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 659.851425][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 659.865493][ T31] process_scheduled_works+0xade/0x17a0 [ 659.871150][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.892239][ T31] worker_thread+0x8a0/0xda0 [ 659.897625][ T5836] Bluetooth: hci20: command tx timeout [ 659.916153][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 659.922585][ T31] ? __kthread_parkme+0x7b/0x200 [ 659.935612][ T31] kthread+0x711/0x8a0 [ 659.939760][ T31] ? __pfx_worker_thread+0x10/0x10 [ 659.944903][ T31] ? __pfx_kthread+0x10/0x10 [ 659.959551][ T31] ? __pfx_kthread+0x10/0x10 [ 659.970262][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 659.979206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.984482][ T31] ? __pfx_kthread+0x10/0x10 [ 659.996928][ T31] ret_from_fork+0x4b/0x80 [ 660.001424][ T31] ? __pfx_kthread+0x10/0x10 [ 660.013445][ T31] ret_from_fork_asm+0x1a/0x30 [ 660.024649][ T31] [ 660.035717][ T31] INFO: task syz.0.714:8710 blocked for more than 144 seconds. [ 660.043318][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 660.062782][ T31] Blocked by coredump. [ 660.072478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.089181][ T31] task:syz.0.714 state:D stack:25640 pid:8710 tgid:8706 ppid:5820 task_flags:0x40054c flags:0x00004006 [ 660.115085][ T31] Call Trace: [ 660.119772][ T31] [ 660.122756][ T31] __schedule+0x168f/0x4c70 [ 660.138539][ T31] ? schedule+0x165/0x360 [ 660.142949][ T31] ? __pfx___schedule+0x10/0x10 [ 660.155687][ T31] ? schedule+0x91/0x360 [ 660.160016][ T31] schedule+0x165/0x360 [ 660.164208][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.180793][ T31] __mutex_lock+0x724/0xe80 [ 660.188085][ T31] ? __mutex_lock+0x51b/0xe80 [ 660.192844][ T31] ? tun_chr_close+0x3e/0x1c0 [ 660.203367][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.219816][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 660.225020][ T31] tun_chr_close+0x3e/0x1c0 [ 660.243999][ T31] __fput+0x449/0xa70 [ 660.258400][ T31] task_work_run+0x1d4/0x260 [ 660.270227][ T31] ? __pfx_task_work_run+0x10/0x10 [ 660.284825][ T31] ? kmem_cache_free+0x192/0x3f0 [ 660.294816][ T31] do_exit+0x8d6/0x2550 [ 660.302453][ T31] ? do_raw_spin_lock+0x121/0x290 [ 660.312438][ T31] ? __pfx_do_exit+0x10/0x10 [ 660.322791][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 660.334435][ T31] do_group_exit+0x21c/0x2d0 [ 660.342499][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.356594][ T31] get_signal+0x125e/0x1310 [ 660.361255][ T31] arch_do_signal_or_restart+0x95/0x780 [ 660.375262][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 660.381522][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 660.398669][ T31] irqentry_exit_to_user_mode+0x81/0x120 [ 660.404377][ T31] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 660.414972][ T31] RIP: 0033:0x7f4f83a50250 [ 660.422818][ T31] RSP: 002b:00007f4f84960028 EFLAGS: 00000216 [ 660.436371][ T31] RAX: 00007f4f83a50250 RBX: 00007f4f83db5fa0 RCX: 0000000000000000 [ 660.444413][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 660.462358][ T31] RBP: 00007f4f83c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 660.485286][ T31] R10: 00002000000001c0 R11: 0000000000000000 R12: 0000000000000000 [ 660.493336][ T31] R13: 0000000000000000 R14: 00007f4f83db5fa0 R15: 00007ffc381ae0a8 [ 660.510902][ T31] [ 660.579664][ T31] INFO: task syz-executor:8744 blocked for more than 145 seconds. [ 660.604573][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 660.620965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 660.640852][ T31] task:syz-executor state:D stack:22424 pid:8744 tgid:8744 ppid:1 task_flags:0x400140 flags:0x00000004 [ 660.662946][ T31] Call Trace: [ 660.670196][ T31] [ 660.673177][ T31] __schedule+0x168f/0x4c70 [ 660.683723][ T31] ? schedule+0x165/0x360 [ 660.697957][ T31] ? __pfx___schedule+0x10/0x10 [ 660.702896][ T31] ? schedule+0x91/0x360 [ 660.721461][ T31] schedule+0x165/0x360 [ 660.726249][ T31] schedule_preempt_disabled+0x13/0x30 [ 660.731758][ T31] __mutex_lock+0x724/0xe80 [ 660.745315][ T31] ? __mutex_lock+0x51b/0xe80 [ 660.750083][ T31] ? inet6_rtm_newaddr+0x5b7/0xd20 [ 660.763254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 660.772289][ T31] ? nla_memcmp+0x62/0x90 [ 660.785479][ T31] inet6_rtm_newaddr+0x5b7/0xd20 [ 660.790496][ T31] ? kernel_text_address+0xa5/0xe0 [ 660.808813][ T31] ? __kernel_text_address+0xd/0x40 [ 660.814105][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 660.829656][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 660.839169][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 660.844171][ T31] ? kasan_save_track+0x4f/0x80 [ 660.854117][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 660.865284][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 660.870824][ T31] ? __lock_acquire+0xaac/0xd20 [ 660.887247][ T31] netlink_rcv_skb+0x219/0x490 [ 660.892096][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 660.910056][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.921241][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.931278][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.942505][ T31] netlink_unicast+0x75b/0x8d0 [ 660.950348][ T31] netlink_sendmsg+0x805/0xb30 [ 660.960919][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.968882][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.974315][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.988860][ T31] __sock_sendmsg+0x21c/0x270 [ 660.993661][ T31] __sys_sendto+0x3bd/0x520 [ 661.009813][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 661.014938][ T31] ? fput_close_sync+0x119/0x200 [ 661.028180][ T31] ? dnotify_flush+0x1db/0x5e0 [ 661.033009][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 661.045791][ T31] __x64_sys_sendto+0xde/0x100 [ 661.050655][ T31] do_syscall_64+0xf6/0x210 [ 661.063906][ T31] ? clear_bhb_loop+0x60/0xb0 [ 661.072512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.087531][ T31] RIP: 0033:0x7f33e0f907fc [ 661.093137][ T31] RSP: 002b:00007fff808e9e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 661.116654][ T31] RAX: ffffffffffffffda RBX: 00007f33e1ce4620 RCX: 00007f33e0f907fc [ 661.124706][ T31] RDX: 0000000000000040 RSI: 00007f33e1ce4670 RDI: 0000000000000003 [ 661.144135][ T31] RBP: 0000000000000000 R08: 00007fff808e9ee4 R09: 000000000000000c [ 661.162709][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 661.172484][ T31] R13: 0000000000000000 R14: 00007f33e1ce4670 R15: 0000000000000000 [ 661.185566][ T31] [ 661.191798][ T31] INFO: task syz-executor:8749 blocked for more than 145 seconds. [ 661.209447][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 661.223958][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.240250][ T31] task:syz-executor state:D stack:22040 pid:8749 tgid:8749 ppid:1 task_flags:0x400140 flags:0x00000004 [ 661.269481][ T31] Call Trace: [ 661.272915][ T31] [ 661.288141][ T31] __schedule+0x168f/0x4c70 [ 661.292746][ T31] ? schedule+0x165/0x360 [ 661.303100][ T31] ? __pfx___schedule+0x10/0x10 [ 661.312758][ T31] ? schedule+0x91/0x360 [ 661.322090][ T31] schedule+0x165/0x360 [ 661.331790][ T31] schedule_preempt_disabled+0x13/0x30 [ 661.342388][ T31] __mutex_lock+0x724/0xe80 [ 661.351551][ T31] ? __mutex_lock+0x51b/0xe80 [ 661.362454][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 661.381099][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 661.391869][ T31] ? ns_capable+0x8a/0xf0 [ 661.403489][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 661.412797][ T31] rtnl_newlink+0x8db/0x1c70 [ 661.424955][ T31] ? kasan_save_track+0x3e/0x80 [ 661.433375][ T31] ? __sys_sendto+0x3bd/0x520 [ 661.448235][ T31] ? do_syscall_64+0xf6/0x210 [ 661.453004][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.464437][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 661.474687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.490061][ T31] ? nlmon_xmit+0xb0/0x100 [ 661.497777][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.500545][ T31] ? kmem_cache_free+0x192/0x3f0 [ 661.515817][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 661.521267][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.535024][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 661.540914][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 661.555604][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 661.560796][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 661.575024][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 661.596439][ T31] ? __lock_acquire+0xaac/0xd20 [ 661.601414][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 661.615732][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 661.620768][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 661.633257][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.640040][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 661.652472][ T31] ? __copy_skb_header+0xa7/0x550 [ 661.663640][ T31] netlink_rcv_skb+0x219/0x490 [ 661.676724][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 661.682256][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.704108][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.719757][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.725040][ T31] netlink_unicast+0x75b/0x8d0 [ 661.734944][ T31] netlink_sendmsg+0x805/0xb30 [ 661.751292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.758520][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.763862][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.775074][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.775221][ T31] __sock_sendmsg+0x21c/0x270 [ 661.799632][ T31] __sys_sendto+0x3bd/0x520 [ 661.804215][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 661.826905][ T31] ? fput_close_sync+0x119/0x200 [ 661.831936][ T31] ? dnotify_flush+0x1db/0x5e0 [ 661.844898][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 661.850739][ T31] __x64_sys_sendto+0xde/0x100 [ 661.863428][ T31] do_syscall_64+0xf6/0x210 [ 661.868521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 661.873251][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.885180][ T31] RIP: 0033:0x7fa8847907fc [ 661.895606][ T31] RSP: 002b:00007ffcd624f9f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 661.904098][ T31] RAX: ffffffffffffffda RBX: 00007fa8854e4620 RCX: 00007fa8847907fc [ 661.924476][ T31] RDX: 0000000000000020 RSI: 00007fa8854e4670 RDI: 0000000000000003 [ 661.937671][ T31] RBP: 0000000000000000 R08: 00007ffcd624fa44 R09: 000000000000000c [ 661.955618][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 661.964148][ T31] R13: 0000000000000000 R14: 00007fa8854e4670 R15: 0000000000000000 [ 661.979660][ T31] [ 661.982817][ T31] INFO: task syz-executor:8752 blocked for more than 146 seconds. [ 662.005227][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 662.021744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.033918][ T31] task:syz-executor state:D stack:21416 pid:8752 tgid:8752 ppid:1 task_flags:0x400140 flags:0x00000004 [ 662.056820][ T31] Call Trace: [ 662.060170][ T31] [ 662.063133][ T31] __schedule+0x168f/0x4c70 [ 662.077188][ T31] ? schedule+0x165/0x360 [ 662.081602][ T31] ? __pfx___schedule+0x10/0x10 [ 662.094261][ T31] ? schedule+0x91/0x360 [ 662.099817][ T31] schedule+0x165/0x360 [ 662.116165][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.121699][ T31] __mutex_lock+0x724/0xe80 [ 662.133891][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.145103][ T31] ? __mutex_lock+0x51b/0xe80 [ 662.161268][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.180717][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 662.193285][ T31] ? __nla_parse+0x40/0x60 [ 662.198160][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 662.203159][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.220540][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.233937][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.239918][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.244912][ T31] ? kasan_save_track+0x4f/0x80 [ 662.255187][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.260379][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.280320][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.290969][ T31] netlink_rcv_skb+0x219/0x490 [ 662.300801][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.312057][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.321696][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.334719][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.342675][ T31] netlink_unicast+0x75b/0x8d0 [ 662.353371][ T31] netlink_sendmsg+0x805/0xb30 [ 662.363298][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.374597][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.389735][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.395114][ T31] __sock_sendmsg+0x21c/0x270 [ 662.407969][ T31] __sys_sendto+0x3bd/0x520 [ 662.412528][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 662.425235][ T31] ? fput_close_sync+0x119/0x200 [ 662.430261][ T31] ? dnotify_flush+0x1db/0x5e0 [ 662.435056][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 662.450737][ T31] __x64_sys_sendto+0xde/0x100 [ 662.462431][ T31] do_syscall_64+0xf6/0x210 [ 662.474657][ T31] ? clear_bhb_loop+0x60/0xb0 [ 662.483647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.496926][ T31] RIP: 0033:0x7f3039f907fc [ 662.501423][ T31] RSP: 002b:00007ffd4abb3090 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 662.518787][ T31] RAX: ffffffffffffffda RBX: 00007f303ace4620 RCX: 00007f3039f907fc [ 662.532359][ T31] RDX: 0000000000000028 RSI: 00007f303ace4670 RDI: 0000000000000003 [ 662.552083][ T31] RBP: 0000000000000000 R08: 00007ffd4abb30e4 R09: 000000000000000c [ 662.563550][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 662.582153][ T31] R13: 0000000000000000 R14: 00007f303ace4670 R15: 0000000000000000 [ 662.607173][ T31] [ 662.610346][ T31] INFO: task syz-executor:8754 blocked for more than 147 seconds. [ 662.629779][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 662.641708][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.654713][ T31] task:syz-executor state:D stack:22040 pid:8754 tgid:8754 ppid:1 task_flags:0x400140 flags:0x00000004 [ 662.680557][ T31] Call Trace: [ 662.683922][ T31] [ 662.693208][ T31] __schedule+0x168f/0x4c70 [ 662.713003][ T31] ? schedule+0x165/0x360 [ 662.724355][ T31] ? __pfx___schedule+0x10/0x10 [ 662.734513][ T31] ? schedule+0x91/0x360 [ 662.743201][ T31] schedule+0x165/0x360 [ 662.751627][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.761298][ T31] __mutex_lock+0x724/0xe80 [ 662.770035][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.774968][ T31] ? __mutex_lock+0x51b/0xe80 [ 662.780715][ T8731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.805533][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.810776][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 662.833121][ T31] ? __nla_parse+0x40/0x60 [ 662.843377][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 662.851158][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.865444][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.870924][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.883753][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.889158][ T31] ? kasan_save_track+0x4f/0x80 [ 662.894079][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.912533][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.921050][ T31] ? __lock_acquire+0xaac/0xd20 [ 662.938742][ T31] netlink_rcv_skb+0x219/0x490 [ 662.943585][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.958704][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.964095][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.977178][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.982479][ T31] netlink_unicast+0x75b/0x8d0 [ 662.992992][ T31] netlink_sendmsg+0x805/0xb30 [ 663.000586][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.013793][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.030649][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.043077][ T31] __sock_sendmsg+0x21c/0x270 [ 663.059160][ T31] __sys_sendto+0x3bd/0x520 [ 663.063755][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.074631][ T31] ? fput_close_sync+0x119/0x200 [ 663.082584][ T31] ? dnotify_flush+0x1db/0x5e0 [ 663.093053][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 663.101267][ T31] __x64_sys_sendto+0xde/0x100 [ 663.111744][ T31] do_syscall_64+0xf6/0x210 [ 663.121013][ T31] ? clear_bhb_loop+0x60/0xb0 [ 663.134820][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.144565][ T31] RIP: 0033:0x7ff8d97907fc [ 663.158591][ T31] RSP: 002b:00007ffef36b8240 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 663.174620][ T31] RAX: ffffffffffffffda RBX: 00007ff8da4e4620 RCX: 00007ff8d97907fc [ 663.183704][ T31] RDX: 0000000000000028 RSI: 00007ff8da4e4670 RDI: 0000000000000003 [ 663.203020][ T31] RBP: 0000000000000000 R08: 00007ffef36b8294 R09: 000000000000000c [ 663.214507][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 663.227732][ T31] R13: 0000000000000000 R14: 00007ff8da4e4670 R15: 0000000000000000 [ 663.252197][ T31] [ 663.255964][ T31] INFO: task syz-executor:8782 blocked for more than 147 seconds. [ 663.263805][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 663.284363][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.294297][ T31] task:syz-executor state:D stack:22776 pid:8782 tgid:8782 ppid:1 task_flags:0x400140 flags:0x00000004 [ 663.314652][ T31] Call Trace: [ 663.319929][ T31] [ 663.323009][ T31] __schedule+0x168f/0x4c70 [ 663.336136][ T31] ? schedule+0x165/0x360 [ 663.340541][ T31] ? __pfx___schedule+0x10/0x10 [ 663.361761][ T31] ? schedule+0x91/0x360 [ 663.368909][ T31] schedule+0x165/0x360 [ 663.373136][ T31] schedule_preempt_disabled+0x13/0x30 [ 663.387880][ T31] __mutex_lock+0x724/0xe80 [ 663.392473][ T31] ? __mutex_lock+0x51b/0xe80 [ 663.404930][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 663.410444][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.425309][ T31] ? ns_capable+0x8a/0xf0 [ 663.429721][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 663.443562][ T31] rtnl_newlink+0x8db/0x1c70 [ 663.453223][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 663.465331][ T31] ? unwind_next_frame+0xa5/0x2390 [ 663.470516][ T31] ? do_syscall_64+0xf6/0x210 [ 663.484128][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.492792][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.499895][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.515434][ T31] ? __lock_acquire+0xaac/0xd20 [ 663.520400][ T31] ? __lock_acquire+0xaac/0xd20 [ 663.533439][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 663.539311][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 663.554341][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 663.560331][ T31] ? kernel_text_address+0xa5/0xe0 [ 663.577077][ T31] ? __kernel_text_address+0xd/0x40 [ 663.585350][ T31] ? __lock_acquire+0xaac/0xd20 [ 663.590298][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 663.606237][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 663.611331][ T31] ? kasan_save_track+0x4f/0x80 [ 663.626343][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 663.631531][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.660184][ T31] ? __lock_acquire+0xaac/0xd20 [ 663.669114][ T31] netlink_rcv_skb+0x219/0x490 [ 663.673950][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.692086][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.697990][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.703249][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.723110][ T31] netlink_unicast+0x75b/0x8d0 [ 663.732951][ T31] netlink_sendmsg+0x805/0xb30 [ 663.745534][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.750898][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.765631][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.770996][ T31] __sock_sendmsg+0x21c/0x270 [ 663.783322][ T31] __sys_sendto+0x3bd/0x520 [ 663.788531][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 663.793633][ T31] ? fput_close_sync+0x119/0x200 [ 663.810583][ T31] ? dnotify_flush+0x1db/0x5e0 [ 663.844491][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 663.850439][ T31] __x64_sys_sendto+0xde/0x100 [ 663.864832][ T31] do_syscall_64+0xf6/0x210 [ 663.870174][ T31] ? clear_bhb_loop+0x60/0xb0 [ 663.874912][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.888820][ T31] RIP: 0033:0x7f772c9907fc [ 663.893301][ T31] RSP: 002b:00007ffcb7ce2380 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 663.915315][ T31] RAX: ffffffffffffffda RBX: 00007f772d6e4620 RCX: 00007f772c9907fc [ 663.923364][ T31] RDX: 0000000000000028 RSI: 00007f772d6e4670 RDI: 0000000000000003 [ 663.941977][ T31] RBP: 0000000000000000 R08: 00007ffcb7ce23d4 R09: 000000000000000c [ 663.958012][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 663.973587][ T31] R13: 0000000000000000 R14: 00007f772d6e4670 R15: 0000000000000000 [ 663.984059][ T31] [ 663.993688][ T31] INFO: task syz-executor:8810 blocked for more than 148 seconds. [ 664.003566][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 664.017919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.036086][ T31] task:syz-executor state:D stack:27096 pid:8810 tgid:8810 ppid:1 task_flags:0x400140 flags:0x00000004 [ 664.069198][ T31] Call Trace: [ 664.072542][ T31] [ 664.083573][ T31] __schedule+0x168f/0x4c70 [ 664.088625][ T31] ? schedule+0x165/0x360 [ 664.093014][ T31] ? __pfx___schedule+0x10/0x10 [ 664.106784][ T31] ? schedule+0x91/0x360 [ 664.111109][ T31] schedule+0x165/0x360 [ 664.122066][ T31] schedule_preempt_disabled+0x13/0x30 [ 664.129700][ T31] __mutex_lock+0x724/0xe80 [ 664.134273][ T31] ? __lock_acquire+0xaac/0xd20 [ 664.151732][ T31] ? __mutex_lock+0x51b/0xe80 [ 664.162852][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 664.175473][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 664.185025][ T31] ? __nla_parse+0x40/0x60 [ 664.195366][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 664.200386][ T31] ? __lock_acquire+0xaac/0xd20 [ 664.213590][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 664.234670][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 664.240516][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 664.255278][ T31] ? kasan_save_track+0x4f/0x80 [ 664.260213][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 664.284038][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 664.294762][ T31] ? __lock_acquire+0xaac/0xd20 [ 664.305017][ T31] netlink_rcv_skb+0x219/0x490 [ 664.314140][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 664.324567][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 664.333449][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.344455][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.353896][ T31] netlink_unicast+0x75b/0x8d0 [ 664.367640][ T31] netlink_sendmsg+0x805/0xb30 [ 664.372489][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.392824][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.405404][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.410765][ T31] __sock_sendmsg+0x21c/0x270 [ 664.423245][ T31] __sys_sendto+0x3bd/0x520 [ 664.428519][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 664.433825][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 664.445833][ T31] __x64_sys_sendto+0xde/0x100 [ 664.450673][ T31] do_syscall_64+0xf6/0x210 [ 664.464400][ T31] ? clear_bhb_loop+0x60/0xb0 [ 664.483293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.490961][ T31] RIP: 0033:0x7f3fb03907fc [ 664.505978][ T31] RSP: 002b:00007ffe41e7abd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 664.514465][ T31] RAX: ffffffffffffffda RBX: 00007f3fb10e4620 RCX: 00007f3fb03907fc [ 664.530564][ T31] RDX: 0000000000000028 RSI: 00007f3fb10e4670 RDI: 0000000000000003 [ 664.544374][ T31] RBP: 0000000000000000 R08: 00007ffe41e7ac24 R09: 000000000000000c [ 664.561900][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 664.572717][ T31] R13: 0000000000000000 R14: 00007f3fb10e4670 R15: 0000000000000000 [ 664.585604][ T31] [ 664.595439][ T31] [ 664.595439][ T31] Showing all locks held in the system: [ 664.603297][ T31] 3 locks held by kworker/u8:1/13: [ 664.622577][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 664.638216][ T31] #1: ffffc90000127c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 664.674438][ T31] #2: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 664.694954][ T31] 1 lock held by khungtaskd/31: [ 664.713576][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 664.735799][ T31] 6 locks held by kworker/u8:3/53: [ 664.740974][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 664.761407][ T31] #1: ffffc90000be7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 664.774912][ T31] #2: ffffffff8f2dbd50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 664.794010][ T31] #3: ffff88805d76f0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 664.810268][ T31] #4: ffff88805d0d0250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 664.826585][ T31] #5: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 664.848380][ T31] 3 locks held by kworker/u8:10/3502: [ 664.853807][ T31] #0: ffff88814a4cb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 664.878247][ T31] #1: ffffc9000c45fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 664.901249][ T31] #2: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 664.912880][ T31] 2 locks held by getty/5582: [ 664.927143][ T31] #0: ffff88814a5750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 664.953019][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 664.974003][ T31] 2 locks held by kworker/1:3/5881: [ 664.980375][ T31] 1 lock held by syz.3.378/7452: [ 664.994665][ T31] 2 locks held by kworker/1:7/8692: [ 665.000269][ T31] 1 lock held by syz.0.714/8710: [ 665.013378][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 665.022880][ T31] 1 lock held by syz-executor/8744: [ 665.035505][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 665.045104][ T31] 1 lock held by syz-executor/8749: [ 665.054729][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 665.072812][ T31] 1 lock held by syz-executor/8752: [ 665.090912][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.110509][ T31] 1 lock held by syz-executor/8754: [ 665.117825][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.134007][ T31] 1 lock held by syz-executor/8782: [ 665.144195][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 665.161434][ T31] 1 lock held by syz-executor/8810: [ 665.169212][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.176534][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.193677][ T31] 1 lock held by syz-executor/8814: [ 665.203016][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.220656][ T31] 1 lock held by syz-executor/8815: [ 665.228601][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.244200][ T31] 1 lock held by syz-executor/8820: [ 665.256230][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.274214][ T31] 1 lock held by syz-executor/8824: [ 665.279921][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.304305][ T31] 1 lock held by syz-executor/8837: [ 665.312522][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.330291][ T31] 1 lock held by syz-executor/8838: [ 665.340864][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.358884][ T31] 1 lock held by syz-executor/8846: [ 665.373037][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.383838][ T31] 1 lock held by syz-executor/8848: [ 665.401111][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.423196][ T31] 1 lock held by syz-executor/8857: [ 665.430483][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.446433][ T31] 2 locks held by kworker/1:11/8863: [ 665.451777][ T31] 1 lock held by syz-executor/8872: [ 665.464145][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.486858][ T31] 1 lock held by syz-executor/8875: [ 665.492125][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.513375][ T31] 1 lock held by syz-executor/8878: [ 665.522767][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.539469][ T31] 1 lock held by syz-executor/8882: [ 665.544731][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.557910][ T31] 1 lock held by syz-executor/8889: [ 665.563161][ T31] #0: ffffffff8f2e8888 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 665.579138][ T31] [ 665.581521][ T31] ============================================= [ 665.581521][ T31] [ 665.605596][ T31] NMI backtrace for cpu 0 [ 665.605616][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 665.605639][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.605651][ T31] Call Trace: [ 665.605658][ T31] [ 665.605665][ T31] dump_stack_lvl+0x189/0x250 [ 665.605693][ T31] ? __wake_up_klogd+0xd9/0x110 [ 665.605717][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.605742][ T31] ? __pfx__printk+0x10/0x10 [ 665.605785][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 665.605807][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 665.605825][ T31] ? _printk+0xcf/0x120 [ 665.605859][ T31] ? __pfx__printk+0x10/0x10 [ 665.605890][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 665.605912][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 665.605935][ T31] watchdog+0xfee/0x1030 [ 665.605962][ T31] ? watchdog+0x1de/0x1030 [ 665.605993][ T31] kthread+0x711/0x8a0 [ 665.606017][ T31] ? __pfx_watchdog+0x10/0x10 [ 665.606040][ T31] ? __pfx_kthread+0x10/0x10 [ 665.606069][ T31] ? __pfx_kthread+0x10/0x10 [ 665.606090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.606111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.606134][ T31] ? __pfx_kthread+0x10/0x10 [ 665.606154][ T31] ret_from_fork+0x4b/0x80 [ 665.606172][ T31] ? __pfx_kthread+0x10/0x10 [ 665.606193][ T31] ret_from_fork_asm+0x1a/0x30 [ 665.606238][ T31] [ 665.606246][ T31] Sending NMI from CPU 0 to CPUs 1: [ 665.755978][ C1] NMI backtrace for cpu 1 [ 665.755997][ C1] CPU: 1 UID: 0 PID: 7452 Comm: syz.3.378 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 665.756018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.756033][ C1] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 665.756062][ C1] Code: 08 65 8b 05 56 fe 22 07 65 8b 0d 4b fe 22 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 2b fe 22 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 51 b5 02 00 cc 48 c7 04 24 00 00 [ 665.756077][ C1] RSP: 0018:ffffc90000a07bc0 EFLAGS: 00000246 [ 665.756099][ C1] RAX: 0000000000000001 RBX: ffffffff900bf501 RCX: 18204310b923f900 [ 665.756111][ C1] RDX: ffffc90000a07d01 RSI: ffffffff8bc122e0 RDI: ffffffff8bc122a0 [ 665.756124][ C1] RBP: dffffc0000000000 R08: ffffc90000a07d38 R09: 0000000000000000 [ 665.756135][ C1] R10: ffffc90000a07d98 R11: fffff52000140fb5 R12: ffffc90000a07d48 [ 665.756147][ C1] R13: ffffc90000a01000 R14: ffffc90000a07d48 R15: ffffffff8171ca05 [ 665.756160][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 665.756173][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.756184][ C1] CR2: 0000200000006000 CR3: 000000007e662000 CR4: 00000000003526f0 [ 665.756199][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.756209][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.756219][ C1] Call Trace: [ 665.756225][ C1] [ 665.756232][ C1] ? unwind_next_frame+0xa5/0x2390 [ 665.756252][ C1] rcu_is_watching+0x15/0xb0 [ 665.756277][ C1] ? unwind_next_frame+0xa5/0x2390 [ 665.756294][ C1] unwind_next_frame+0x1965/0x2390 [ 665.756315][ C1] ? unwind_next_frame+0xa5/0x2390 [ 665.756333][ C1] ? __unwind_start+0xf8/0x760 [ 665.756354][ C1] __unwind_start+0x5b9/0x760 [ 665.756374][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 665.756392][ C1] arch_stack_walk+0xe4/0x150 [ 665.756414][ C1] ? arch_stack_walk+0xe4/0x150 [ 665.756435][ C1] stack_trace_save+0x9c/0xe0 [ 665.756451][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 665.756472][ C1] kasan_save_track+0x3e/0x80 [ 665.756522][ C1] __kasan_slab_alloc+0x6c/0x80 [ 665.756546][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 665.756571][ C1] ? __alloc_skb+0x112/0x2d0 [ 665.756594][ C1] __alloc_skb+0x112/0x2d0 [ 665.756615][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 665.756640][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 665.756658][ C1] ? __pfx_nft_socket_eval+0x10/0x10 [ 665.756677][ C1] ? synproxy_pernet+0x45/0x270 [ 665.756701][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 665.756725][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 665.756745][ C1] ? kasan_record_aux_stack+0xbc/0xd0 [ 665.756765][ C1] ? nf_ip_checksum+0x13c/0x510 [ 665.756788][ C1] nft_synproxy_do_eval+0x345/0x570 [ 665.756808][ C1] ? unregister_netdevice_many_notify+0x15d8/0x2330 [ 665.756834][ C1] ? unregister_netdevice_queue+0x33c/0x380 [ 665.756858][ C1] ? __tun_detach+0xda4/0x1560 [ 665.756875][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 665.756895][ C1] ? do_syscall_64+0x103/0x210 [ 665.756924][ C1] nft_do_chain+0x409/0x1920 [ 665.756952][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 665.756992][ C1] nft_do_chain_inet+0x25d/0x340 [ 665.757012][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 665.757033][ C1] ? ipt_do_table+0x2a3/0x1610 [ 665.757051][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 665.757079][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 665.757105][ C1] nf_hook_slow+0xc2/0x220 [ 665.757124][ C1] NF_HOOK+0x206/0x3a0 [ 665.757141][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 665.757158][ C1] ? NF_HOOK+0x9a/0x3a0 [ 665.757172][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 665.757187][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 665.757205][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 665.757223][ C1] ? skb_dst+0x4f/0xd0 [ 665.757239][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 665.757257][ C1] NF_HOOK+0x30c/0x3a0 [ 665.757273][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 665.757289][ C1] ? NF_HOOK+0x9a/0x3a0 [ 665.757303][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 665.757318][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 665.757334][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 665.757356][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 665.757371][ C1] __netif_receive_skb+0x143/0x380 [ 665.757388][ C1] ? process_backlog+0x2d5/0x14f0 [ 665.757407][ C1] process_backlog+0x60e/0x14f0 [ 665.757433][ C1] ? __pfx_process_backlog+0x10/0x10 [ 665.757455][ C1] __napi_poll+0xc7/0x480 [ 665.757470][ C1] ? net_rx_action+0x447/0xdf0 [ 665.757489][ C1] net_rx_action+0x6ea/0xdf0 [ 665.757505][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.757531][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 665.757567][ C1] handle_softirqs+0x283/0x870 [ 665.757594][ C1] ? do_softirq+0xec/0x180 [ 665.757620][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 665.757647][ C1] ? addrconf_ifdown+0x694/0x1880 [ 665.757664][ C1] do_softirq+0xec/0x180 [ 665.757687][ C1] [ 665.757692][ C1] [ 665.757698][ C1] ? __pfx_do_softirq+0x10/0x10 [ 665.757721][ C1] ? __lock_acquire+0xaac/0xd20 [ 665.757746][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 665.757768][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 665.757792][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 665.757820][ C1] ? addrconf_ifdown+0x694/0x1880 [ 665.757836][ C1] addrconf_ifdown+0x694/0x1880 [ 665.757858][ C1] ? tls_dev_event+0x717/0xec0 [ 665.757881][ C1] ? __pfx_addrconf_ifdown+0x10/0x10 [ 665.757904][ C1] addrconf_notify+0x1bc/0x1010 [ 665.757927][ C1] notifier_call_chain+0x1b3/0x3e0 [ 665.757947][ C1] unregister_netdevice_many_notify+0x15d8/0x2330 [ 665.757980][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 665.758007][ C1] ? stack_depot_save_flags+0x40/0x910 [ 665.758024][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 665.758057][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 665.758079][ C1] unregister_netdevice_queue+0x33c/0x380 [ 665.758111][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 665.758134][ C1] ? linkwatch_urgent_event+0x318/0x3a0 [ 665.758162][ C1] __tun_detach+0xda4/0x1560 [ 665.758182][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 665.758205][ C1] tun_chr_close+0x10a/0x1c0 [ 665.758229][ C1] __fput+0x449/0xa70 [ 665.758252][ C1] task_work_run+0x1d4/0x260 [ 665.758274][ C1] ? __pfx_task_work_run+0x10/0x10 [ 665.758295][ C1] ? kmem_cache_free+0x192/0x3f0 [ 665.758321][ C1] do_exit+0x8d6/0x2550 [ 665.758341][ C1] ? do_raw_spin_lock+0x121/0x290 [ 665.758359][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 665.758375][ C1] ? do_raw_spin_lock+0x121/0x290 [ 665.758392][ C1] ? __pfx_do_exit+0x10/0x10 [ 665.758419][ C1] do_group_exit+0x21c/0x2d0 [ 665.758438][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.758458][ C1] get_signal+0x125e/0x1310 [ 665.758492][ C1] arch_do_signal_or_restart+0x95/0x780 [ 665.758520][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 665.758552][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 665.758576][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 665.758596][ C1] do_syscall_64+0x103/0x210 [ 665.758629][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 665.758646][ C1] ? clear_bhb_loop+0x60/0xb0 [ 665.758664][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.758679][ C1] RIP: 0033:0x7f680edc1225 [ 665.758692][ C1] Code: Unable to access opcode bytes at 0x7f680edc11fb. [ 665.758701][ C1] RSP: 002b:00007f680fba7f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 665.758718][ C1] RAX: fffffffffffffdfc RBX: 00007f680efb6160 RCX: 00007f680edc1225 [ 665.758730][ C1] RDX: 00007f680fba7fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 665.758740][ C1] RBP: 00007f680ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 665.758750][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 665.758760][ C1] R13: 0000000000000001 R14: 00007f680efb6160 R15: 00007ffd597c6178 [ 665.758780][ C1] [ 666.603855][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 666.610791][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 666.622635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.632732][ T31] Call Trace: [ 666.636036][ T31] [ 666.639047][ T31] dump_stack_lvl+0x99/0x250 [ 666.643692][ T31] ? __asan_memcpy+0x40/0x70 [ 666.648335][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.653573][ T31] ? __pfx__printk+0x10/0x10 [ 666.658223][ T31] panic+0x2db/0x790 [ 666.662157][ T31] ? __pfx_panic+0x10/0x10 [ 666.666605][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 666.672024][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 666.677424][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 666.683625][ T31] watchdog+0x102d/0x1030 [ 666.687994][ T31] ? watchdog+0x1de/0x1030 [ 666.692454][ T31] kthread+0x711/0x8a0 [ 666.696558][ T31] ? __pfx_watchdog+0x10/0x10 [ 666.701268][ T31] ? __pfx_kthread+0x10/0x10 [ 666.705895][ T31] ? __pfx_kthread+0x10/0x10 [ 666.710515][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.715744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.720981][ T31] ? __pfx_kthread+0x10/0x10 [ 666.725607][ T31] ret_from_fork+0x4b/0x80 [ 666.730136][ T31] ? __pfx_kthread+0x10/0x10 [ 666.734904][ T31] ret_from_fork_asm+0x1a/0x30 [ 666.739729][ T31] [ 666.743087][ T31] Kernel Offset: disabled [ 666.747419][ T31] Rebooting in 86400 seconds..