last executing test programs: 27.581610034s ago: executing program 0 (id=2179): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000280)=0x1) 27.443389067s ago: executing program 0 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001800250127bd7000fedbdf258020"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) close_range(r0, r0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, 0x0) socket$igmp(0x2, 0x3, 0x2) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) r7 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x7bd0, 0x10100, 0x7, 0x1ea}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000500)={{0x8, 0xcdc}, 0x100, './file0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) 24.590665564s ago: executing program 0 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x20000, 0x0, 0xf, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0xfffffffb, 0x2, 0x8ed7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4003, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1], [0x10, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UI_DEV_CREATE(r3, 0x5501) 24.335753249s ago: executing program 3 (id=2201): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000020000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x80) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) umount2(0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc4140) semctl$SETVAL(0x0, 0x2, 0x8, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x4, 0x0) 24.24800858s ago: executing program 0 (id=2203): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000140)={0x908, r9}, 0x0) io_setup(0x7, &(0x7f0000000880)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x4}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0xc810) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x68}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xb}, @device_a, @device_b, @random="92ef58130224", {0xc, 0x2}}, 0x23, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ef}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x5d032, 0xffffffffffffffff, 0x0) getpid() r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xc, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfc, 0x7c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r12}}) syz_usb_connect$cdc_ncm(0x6, 0x184, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x172, 0x2, 0x1, 0x3, 0xb0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "3cec"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2f, 0x6, 0x3, 0x3f}, {0x6, 0x24, 0x1a, 0x5, 0x41}, [@mdlm_detail={0xf0, 0x24, 0x13, 0x8, "44b874455c2815be2d08f718100672c9f1174549744566aeae463e6d76b32f2513e477615091d2600a1630cf2b89bc0cac5a30c491e79a610eddfdff4d25a14e19b6167d0eb73e6174df53043d1c7baba5e2f69e86bae65763b2b02fdcbfa481408be85dea1c0187f3992c13ee3db52a9dc851ce1293b14243c04f1be5b7366c2b2bb8fb94d70f99c6d70e2a3424c75256088b4b949b4fc4db264b2fc0ee9b3401799f81e644bb09d6f880809563cafa02043cf268b7d3ff97f92681b835382eee1c06434a1e0bbb0df4d5e82538afd92a8f9d81a4c24a5163df8def22ab862bb905056e23cb0daf3fe3fd2b"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x3800}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x80, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x2, 0x3, [0x7f44, 0x6, 0x0, 0x5]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x3, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x59, 0x1, 0x27}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x4, 0x5, 0x0, 0x20, 0xd}, 0x95, &(0x7f0000000240)={0x5, 0xf, 0x95, 0x2, [@generic={0x7c, 0x10, 0xb, "7841dc8cb3ae22f31b3608970760d07dd09c864829abd64c5e61b545bf436a78f67262c87dfcdfc52b474b49797bc81c555dad1ed35090cf15b5d8fac8e281d45525f1be8ebc9190f81616c61ac6350bd8a88f6009169a5973f7a2145cfc472ff8af2f13d792186cc20a4fde8d7d1b17c76099f62ccbe815e6"}, @ssp_cap={0x14, 0x10, 0xa, 0x29, 0x2, 0x8, 0xf00, 0x2, [0xc0, 0xa000]}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0xf0, &(0x7f0000000340)=@string={0xf0, 0x3, "f0d06650307b29d7d332747db22071d767226a4c09b6cf2a517b587fcaeb8fd091ae3a352a0fd923232306d20cf07c27970dbdfacfc8ecfe67f0bddc179b24f6dd7a312ba5a3f708bf5ae24962af354aa66cad20fcbbe9894a64f9dbf38cbc8f6ec6755cc1f0f4f17dd104c336b25c18e98b77fb290613d1d71bbb3a33b2e462b41632577304440d52d7b51b35bc48087457226bbe64465d7dd199314c3ded4faa2cc4f98fb647000af114aea10fe09f79645475fcde06c4b41a2e90a8559590c8519bb1265521d89c26d2d5546ede510498ef11dd779698bbfc70fd981beb121118e8797b0b1c1d5653b3550754"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x421}}, {0x82, &(0x7f0000000540)=ANY=[@ANYBLOB="41c712aeca04b96b52d3b4b1eaf23910204f14bd0f040ba22810e5eb005e1ea6b2c6fe341be8a6fd4d693ba4900c0dd49582449845c7c56f33c0adc9370010249785692da455595fdc6abd45c604bfd26d0c608e265a114b4245380af071e6b6c1f4c3fff61375beffeb0f43c663cc919716177dda8e9af7cbbbb7ecd7c609bbbb22"]}, {0x12, &(0x7f0000000600)=@string={0x12, 0x3, "5826527455f498e6fa9fd0e9f4f18380"}}]}) 23.433949251s ago: executing program 3 (id=2208): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x619) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'vcan0\x00'}}, 0x1e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x84042, 0x0) socket(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e2, &(0x7f0000000500)="b52500c13d0e3b6180392168bd5483b4ec8027f330338118f57f7d08e60d279316535ed79bfe69c9d2a95067990d0f7ddd31c78ae8ab7a1ed6a37dd61f291260d6f2b96e915477e9a8b8bdb00a68b0e6110889cff733a30a1dfed4c2524c2cb4a023d9881d94b2e8a67fde1b708f0b838735a2fe34fc634c53e38243c22e62908eece0911fa6ae9ec30f11aa9a2748561d88b2f6289fd151896d26f6a51822aa97725b487776c0cd30aa62cd3488f66fd8ca3d4e94c2af06c270f032385aae88a7a4555736ac1082eb7342a7") r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r8, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306af01000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 22.243736084s ago: executing program 3 (id=2213): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x20000, 0x0, 0xf, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0xfffffffb, 0x2, 0x8ed7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4003, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1], [0x10, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UI_DEV_CREATE(r3, 0x5501) 21.1867422s ago: executing program 3 (id=2217): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 32) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xa4, 0x0, 0x1}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) (async, rerun: 64) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7495e166642c720000000000000000", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 21.152107592s ago: executing program 4 (id=2218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r7, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 20.233960372s ago: executing program 4 (id=2222): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x18}, {}, {}, {0x85, 0x0, 0x0, 0xb5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) 19.89569452s ago: executing program 4 (id=2224): r0 = fanotify_init(0x200, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r2, r1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, r0, 0x3425000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) 19.349835786s ago: executing program 3 (id=2225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 19.345524733s ago: executing program 0 (id=2226): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0xd18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b000061109f0000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) 19.264248363s ago: executing program 1 (id=2227): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x20000, 0x0, 0xf, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0xfffffffb, 0x2, 0x8ed7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4003, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1], [0x10, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UI_DEV_CREATE(r3, 0x5501) 19.059616643s ago: executing program 3 (id=2228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) syz_usb_ep_write(r2, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 18.842872862s ago: executing program 1 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="b4000013000000006110880000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fanotify_init(0x0, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x414}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, &(0x7f0000000000)={0x1}) 17.956631618s ago: executing program 1 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) r3 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7eee5a9a, @private2, 0x7fffffff}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x4, '\x00', r2, r3, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r3, &(0x7f0000001600)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010101}, 0x0, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="0210dce45274ceecdc5ad290978366271bb5a39ab3144d33", 0x18}, {&(0x7f0000000340)="01dd97af6ecf888e0bf5206c9bf367bcda39fdf772fd16f8c542bc2bd3f41f1dae8cebe296e4ba82bf5a3601b07edf28857ae6df4eba13ed58e72d32f829c4584a431f9e8e0aa10ceff7a8d69df6171735c2edae4338e56ff71ffd6bf783671a415fab1931b8e133c315a1c8b342333c38cdbf484e4efc2200a6167500843406a28cc253a9069e185745ce42a788cd3d5f1f61cdd33bb353b20806f4e04bf7d4626d49dc1d3e6fd69defd325e339", 0xae}], 0x2, &(0x7f0000000440)=[{0x98, 0x3a, 0x1, "f30a9eb06f070faba2bf1db4142c473b2cd4b348257988a5e659b03cf9c591c0b9a1b468f110b45677c4d605fdb92ff47ef60842bd99a75dd87c341f31cbd6d145a55a5f310cd892d8841ba297d2f8134b0ab8a50e8966bf97eb8ee63199177846304bac2b57a1efd2bec61bcfddea86f8fe300d2c79e1e23e8c12e6bb0877319b8fe1"}, {0x50, 0x84, 0x7, "131d30555e3c621a21e2fdb1de3c70c7a3bec8b72efe3a9c0bcf9fda0d0e6d237d96bddf9dbfe6738d65828659628017880e69752fae3f0572f71f74"}, {0x18, 0x84, 0x1, "0928e39966594f50"}, {0x1010, 0x0, 0x9, "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"}, {0x98, 0x11, 0x5, "f4a643dc7ecfdcf552063c058d3e90ceaab0c2664e8313e0ceac522f1f8609195b03302d09e2d4c5fd8b20f63df27dfd3777a2670aa5e5757c8678ded5b096e77c0df907141641bad4a664edfe9261c35c109be22538cd0a59aa62f1685e391ac1963f7c26bb602f2a790a7dbf73453ea30493c3fcb8e0d2e7e60187a9218a306c8af37da83e5259"}], 0x11a8}, 0x8000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004811}, 0x24008010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000018c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000001900)={0x28, 0x1, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x7c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d4}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffffc]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x254}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x4c, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) r10 = getpgrp(r0) syz_open_procfs$namespace(r10, &(0x7f0000001c80)='ns/time_for_children\x00') ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000001cc0)={r10}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x38}}, 0x20000090) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r4) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, r11, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7064, 0x75}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, r12, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040081) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002080), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000020c0)={'wlan0\x00'}) landlock_restrict_self(r3, 0x4) 17.23980401s ago: executing program 2 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x88200) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 17.190423159s ago: executing program 2 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17.138864902s ago: executing program 2 (id=2239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@initdev}, {@loopback}, {@broadcast}, {@remote}]}}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) poll(&(0x7f0000001680)=[{r1, 0x1000}, {r1, 0x4000}, {r0, 0x400}, {r0, 0x4021}, {r1, 0x3000}, {r3}, {r1, 0x140}], 0x7, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x4298}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/149, 0x95}], 0x7, &(0x7f0000000880)=""/8, 0x8}, 0x8}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/116, 0x74}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000980)=""/64, 0x40}], 0x3, &(0x7f0000000a00)=""/239, 0xef}, 0x4}, {{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f0000000c00)=""/101, 0x65}], 0x2, &(0x7f0000000cc0)=""/84, 0x54}, 0x3}, {{&(0x7f0000000d40)=@isdn, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/245, 0xf5}, {&(0x7f0000000ec0)=""/3, 0x3}, {&(0x7f0000000f00)=""/72, 0x48}, {&(0x7f0000000f80)=""/100, 0x64}, {&(0x7f0000001000)=""/32, 0x20}], 0x5}, 0x1}, {{&(0x7f00000010c0)=@generic, 0x80, &(0x7f0000001340)=[{&(0x7f0000001140)=""/199, 0xc7}, {&(0x7f0000001240)=""/93, 0x5d}, {&(0x7f00000012c0)=""/102, 0x66}], 0x3}, 0x17e3}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001380)=""/41, 0x29}], 0x1, &(0x7f0000001400)=""/145, 0x91}, 0xffffffff}], 0x6, 0x2, &(0x7f0000001640)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0xffffba2a}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 16.207871282s ago: executing program 4 (id=2240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="afaaefd080cab0f25f2400000000000007000800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001a801800058014000580080002"], 0x3c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100006800c"], 0x34}}, 0x0) 16.205902023s ago: executing program 2 (id=2241): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, [@bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 16.177506441s ago: executing program 4 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000104000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r2], 0x54}}, 0x0) 16.075239221s ago: executing program 4 (id=2243): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0xb}, @host, 0x3, 0x4, 0x6, 0x4, 0x0, 0x9, 0x8}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xca) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x31, 0x1}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x80) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) getdents64(r5, 0xfffffffffffffffe, 0x29) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x5, 0x6, 0x1}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000001c0)=0x2, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, &(0x7f0000000240)) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) 15.287685389s ago: executing program 2 (id=2244): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0xffffffbffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x3e00000000, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x80, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x2e, 0x2, [0x0, 0xf]}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @private=0xa010100}, 0x12e, 0x0, 0x0, 0x0, 0x800, 0x0, 0x81, 0x8, 0x2}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0x10ec, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x98, 0xc5, "3a48e7b7f078c4f9aaeffd514536637c4919ad868a17b6ff26a48cb06870279df45d0ed8f484bd97781ccefa866c69cb57c7d65b500f3c69041b6a8f62bf7908618839ea08bcb6f4098860f7cb0782cc7d7e7c8b593936fa6b48dc57d8311b8f4b403d1688ac0658841db26705886b6aad0d8cf5625fae987259294517ce5a12d92b74b5362ff3e3c400c05f209dfbac657c74e0"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x324}, @NL80211_ATTR_VENDOR_DATA={0x12, 0xc5, "70277ceea27abde6b271a9a70e47"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x400e800}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) (async) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r10 = fcntl$dupfd(r8, 0x0, r8) getsockname$netrom(r10, 0x0, 0x0) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) (async) syz_clone3(&(0x7f00000002c0)={0x40400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x36}, &(0x7f0000000100)=""/48, 0x30, &(0x7f0000000140)=""/159, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) 3.5284605s ago: executing program 32 (id=2226): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0xd18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b000061109f0000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) 3.473824546s ago: executing program 33 (id=2228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) syz_usb_ep_write(r2, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 2.00101991s ago: executing program 34 (id=2236): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x7eee5a9a, @private2, 0x7fffffff}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x4, '\x00', r2, r3, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(r3, &(0x7f0000001600)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010101}, 0x0, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="0210dce45274ceecdc5ad290978366271bb5a39ab3144d33", 0x18}, {&(0x7f0000000340)="01dd97af6ecf888e0bf5206c9bf367bcda39fdf772fd16f8c542bc2bd3f41f1dae8cebe296e4ba82bf5a3601b07edf28857ae6df4eba13ed58e72d32f829c4584a431f9e8e0aa10ceff7a8d69df6171735c2edae4338e56ff71ffd6bf783671a415fab1931b8e133c315a1c8b342333c38cdbf484e4efc2200a6167500843406a28cc253a9069e185745ce42a788cd3d5f1f61cdd33bb353b20806f4e04bf7d4626d49dc1d3e6fd69defd325e339", 0xae}], 0x2, &(0x7f0000000440)=[{0x98, 0x3a, 0x1, "f30a9eb06f070faba2bf1db4142c473b2cd4b348257988a5e659b03cf9c591c0b9a1b468f110b45677c4d605fdb92ff47ef60842bd99a75dd87c341f31cbd6d145a55a5f310cd892d8841ba297d2f8134b0ab8a50e8966bf97eb8ee63199177846304bac2b57a1efd2bec61bcfddea86f8fe300d2c79e1e23e8c12e6bb0877319b8fe1"}, {0x50, 0x84, 0x7, "131d30555e3c621a21e2fdb1de3c70c7a3bec8b72efe3a9c0bcf9fda0d0e6d237d96bddf9dbfe6738d65828659628017880e69752fae3f0572f71f74"}, {0x18, 0x84, 0x1, "0928e39966594f50"}, {0x1010, 0x0, 0x9, "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"}, {0x98, 0x11, 0x5, "f4a643dc7ecfdcf552063c058d3e90ceaab0c2664e8313e0ceac522f1f8609195b03302d09e2d4c5fd8b20f63df27dfd3777a2670aa5e5757c8678ded5b096e77c0df907141641bad4a664edfe9261c35c109be22538cd0a59aa62f1685e391ac1963f7c26bb602f2a790a7dbf73453ea30493c3fcb8e0d2e7e60187a9218a306c8af37da83e5259"}], 0x11a8}, 0x8000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xb8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004811}, 0x24008010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000018c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000001900)={0x28, 0x1, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x7c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d4}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffffc]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x254}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x4c, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) r10 = getpgrp(r0) syz_open_procfs$namespace(r10, &(0x7f0000001c80)='ns/time_for_children\x00') ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000001cc0)={r10}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x38}}, 0x20000090) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r4) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, r11, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7064, 0x75}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, r12, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040081) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002080), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000020c0)={'wlan0\x00'}) landlock_restrict_self(r3, 0x4) 520.123898ms ago: executing program 35 (id=2243): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0xb}, @host, 0x3, 0x4, 0x6, 0x4, 0x0, 0x9, 0x8}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xca) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x31, 0x1}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x80) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/82, 0x52) getdents64(r5, 0xfffffffffffffffe, 0x29) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x5, 0x6, 0x1}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000001c0)=0x2, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, &(0x7f0000000240)) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) 0s ago: executing program 36 (id=2244): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000000000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0xffffffbffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000, 0x767e, 0x3e00000000, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x80, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x2e, 0x2, [0x0, 0xf]}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @private=0xa010100}, 0x12e, 0x0, 0x0, 0x0, 0x800, 0x0, 0x81, 0x8, 0x2}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0x10ec, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x98, 0xc5, "3a48e7b7f078c4f9aaeffd514536637c4919ad868a17b6ff26a48cb06870279df45d0ed8f484bd97781ccefa866c69cb57c7d65b500f3c69041b6a8f62bf7908618839ea08bcb6f4098860f7cb0782cc7d7e7c8b593936fa6b48dc57d8311b8f4b403d1688ac0658841db26705886b6aad0d8cf5625fae987259294517ce5a12d92b74b5362ff3e3c400c05f209dfbac657c74e0"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x324}, @NL80211_ATTR_VENDOR_DATA={0x12, 0xc5, "70277ceea27abde6b271a9a70e47"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x400e800}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) (async) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r10 = fcntl$dupfd(r8, 0x0, r8) getsockname$netrom(r10, 0x0, 0x0) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) (async) syz_clone3(&(0x7f00000002c0)={0x40400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x36}, &(0x7f0000000100)=""/48, 0x30, &(0x7f0000000140)=""/159, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) kernel console output (not intermixed with test programs): 779.586614][ T972] usb 2-1: Failed to submit usb control message: -71 [ 779.599574][ T972] usb 2-1: unable to send the bmi data to the device: -71 [ 779.615020][ T972] usb 2-1: unable to get target info from device [ 779.621552][ T972] usb 2-1: could not get target info (-71) [ 779.629855][ T5886] usb 2-1: USB disconnect, device number 31 [ 779.640542][ T972] usb 2-1: could not probe fw (-71) [ 779.729283][T12411] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1844'. [ 780.390203][T12417] sock: sock_timestamping_bind_phc: sock not bind to device [ 780.397545][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 780.397585][T12415] ksmbd: Daemon and kernel module version mismatch. ksmbd: 214, kernel module: 1. User-space ksmbd should terminate. [ 780.603519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.612026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.620470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.708320][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 781.565078][ T5883] usb 3-1: too many configurations: 127, using maximum allowed: 8 [ 781.639888][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 781.666524][ T5883] usb 3-1: can't read configurations, error -61 [ 781.796831][T12383] syz.0.1829 (12383): drop_caches: 2 [ 781.833620][ T5883] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 781.866370][T12434] can: request_module (can-proto-0) failed. [ 782.239533][ T5883] usb 3-1: too many configurations: 127, using maximum allowed: 8 [ 782.301827][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 782.330334][ T5883] usb 3-1: can't read configurations, error -61 [ 782.481454][ T5883] usb usb3-port1: attempt power cycle [ 782.769446][T12449] netlink: 'syz.1.1857': attribute type 5 has an invalid length. [ 782.833756][ T5883] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 782.915249][ T5883] usb 3-1: too many configurations: 127, using maximum allowed: 8 [ 782.972936][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 783.279087][ T5883] usb 3-1: can't read configurations, error -61 [ 783.322270][T12456] sctp: [Deprecated]: syz.3.1861 (pid 12456) Use of int in max_burst socket option deprecated. [ 783.322270][T12456] Use struct sctp_assoc_value instead [ 783.466279][T12458] input: syz0 as /devices/virtual/input/input62 [ 783.477621][ T5883] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 783.973631][ T5883] usb 3-1: device descriptor read/8, error -71 [ 784.204084][ T5883] usb usb3-port1: unable to enumerate USB device [ 785.822381][T12477] program syz.0.1867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.363531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.372079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.380541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.563694][T12482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.379828][T12485] FAULT_INJECTION: forcing a failure. [ 787.379828][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.605629][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.3.1870 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 787.605662][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 787.605675][T12485] Call Trace: [ 787.605683][T12485] [ 787.605692][T12485] dump_stack_lvl+0x241/0x360 [ 787.605729][T12485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.605756][T12485] ? __pfx__printk+0x10/0x10 [ 787.605796][T12485] should_fail_ex+0x424/0x570 [ 787.605833][T12485] _copy_to_user+0x31/0xb0 [ 787.605864][T12485] simple_read_from_buffer+0xc4/0x170 [ 787.605892][T12485] proc_fail_nth_read+0x1ef/0x260 [ 787.605920][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.605948][T12485] ? rw_verify_area+0x246/0x630 [ 787.605967][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.605993][T12485] vfs_read+0x21f/0xb90 [ 787.606018][T12485] ? __pfx___mutex_lock+0x10/0x10 [ 787.606041][T12485] ? __pfx_vfs_read+0x10/0x10 [ 787.606062][T12485] ? __fget_files+0x2a/0x420 [ 787.606087][T12485] ? __fget_files+0x39d/0x420 [ 787.606110][T12485] ? __fget_files+0x2a/0x420 [ 787.606142][T12485] ksys_read+0x19d/0x2d0 [ 787.606163][T12485] ? __pfx_ksys_read+0x10/0x10 [ 787.606188][T12485] ? do_syscall_64+0xb6/0x210 [ 787.606211][T12485] do_syscall_64+0xf3/0x210 [ 787.606232][T12485] ? clear_bhb_loop+0x45/0xa0 [ 787.606255][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.606275][T12485] RIP: 0033:0x7fc55038cb7c [ 787.606294][T12485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 787.606310][T12485] RSP: 002b:00007fc551293030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.606332][T12485] RAX: ffffffffffffffda RBX: 00007fc5505b5fa0 RCX: 00007fc55038cb7c [ 787.606347][T12485] RDX: 000000000000000f RSI: 00007fc5512930a0 RDI: 0000000000000005 [ 787.606359][T12485] RBP: 00007fc551293090 R08: 0000000000000000 R09: 0000000000000000 [ 787.606371][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.606383][T12485] R13: 0000000000000000 R14: 00007fc5505b5fa0 R15: 00007ffd70941618 [ 787.606416][T12485] [ 788.213808][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1873'. [ 788.328492][T12497] FAULT_INJECTION: forcing a failure. [ 788.328492][T12497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.445852][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.1.1874 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 788.445884][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 788.445897][T12497] Call Trace: [ 788.445906][T12497] [ 788.445915][T12497] dump_stack_lvl+0x241/0x360 [ 788.445953][T12497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.445983][T12497] ? __pfx__printk+0x10/0x10 [ 788.446024][T12497] should_fail_ex+0x424/0x570 [ 788.446066][T12497] _copy_from_user+0x2d/0xb0 [ 788.446096][T12497] sctp_setsockopt+0xc9/0x11e0 [ 788.446128][T12497] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 788.446155][T12497] do_sock_setsockopt+0x3b1/0x710 [ 788.446193][T12497] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 788.446222][T12497] ? __fget_files+0x2a/0x420 [ 788.446250][T12497] ? __fget_files+0x39d/0x420 [ 788.446273][T12497] ? __fget_files+0x2a/0x420 [ 788.446308][T12497] __x64_sys_setsockopt+0x187/0x210 [ 788.446346][T12497] do_syscall_64+0xf3/0x210 [ 788.446369][T12497] ? clear_bhb_loop+0x45/0xa0 [ 788.446395][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.446415][T12497] RIP: 0033:0x7f71ae78e169 [ 788.446434][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.446453][T12497] RSP: 002b:00007f71af5bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 788.446476][T12497] RAX: ffffffffffffffda RBX: 00007f71ae9b5fa0 RCX: 00007f71ae78e169 [ 788.446492][T12497] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 788.446504][T12497] RBP: 00007f71af5bb090 R08: 0000000000000004 R09: 0000000000000000 [ 788.446517][T12497] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 788.446530][T12497] R13: 0000000000000000 R14: 00007f71ae9b5fa0 R15: 00007ffc3a69a758 [ 788.446570][T12497] [ 789.835658][ T5886] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 790.038155][T12521] fuse: Bad value for 'group_id' [ 790.044048][T12521] fuse: Bad value for 'group_id' [ 790.173443][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 790.190519][ T5886] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 790.206854][ T5886] usb 5-1: config 0 has no interface number 0 [ 790.311184][T12523] mkiss: ax0: crc mode is auto. [ 790.436148][T12526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.471569][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 790.471880][ T5886] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 790.502336][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.510881][ T5886] usb 5-1: Product: syz [ 790.517555][ T5886] usb 5-1: Manufacturer: syz [ 790.522274][ T5886] usb 5-1: SerialNumber: syz [ 790.536795][ T5886] usb 5-1: config 0 descriptor?? [ 790.549513][ T5886] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 790.765123][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 790.820752][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 790.863942][ T5883] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 791.087597][ T5883] usb 3-1: device descriptor read/all, error -61 [ 791.224998][ T5883] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 791.240218][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 791.264457][ T5884] usb 5-1: USB disconnect, device number 22 [ 791.294096][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 791.372775][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 791.382240][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'. [ 791.391620][T12547] tipc: Enabling of bearer rejected, already enabled [ 791.727898][ T5883] usb 3-1: device descriptor read/64, error -71 [ 791.863948][ T5883] usb usb3-port1: attempt power cycle [ 791.925755][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 791.976462][ T5884] quatech2 5-1:0.51: device disconnected [ 792.203674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.212189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.220614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.229914][ T5883] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 792.254336][ T5883] usb 3-1: device descriptor read/8, error -71 [ 793.384281][ T5883] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 793.411504][ T5883] usb 3-1: device descriptor read/8, error -71 [ 793.865735][ T5883] usb usb3-port1: unable to enumerate USB device [ 794.031085][T12564] input: syz0 as /devices/virtual/input/input63 [ 794.946035][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 794.955546][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1898'. [ 794.964779][T12579] tipc: Enabling of bearer rejected, already enabled [ 795.509164][T12582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.525013][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 795.774542][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 795.783744][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 795.793244][T12587] tipc: Enabling of bearer rejected, already enabled [ 796.313454][ T976] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 797.215773][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 797.275644][ T976] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 797.450011][ T976] usb 1-1: config 0 has no interface number 0 [ 797.883510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.892021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.900486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.216438][ T976] usb 1-1: config 0 interface 12 has no altsetting 0 [ 798.313494][ T976] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 798.322589][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.616470][T12611] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 798.635212][T12611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.190039][ T976] usb 1-1: Product: syz [ 799.194396][ T976] usb 1-1: Manufacturer: syz [ 799.199853][ T976] usb 1-1: SerialNumber: syz [ 799.399206][ T976] usb 1-1: config 0 descriptor?? [ 800.114870][T12621] netlink: 'syz.3.1911': attribute type 29 has an invalid length. [ 800.130160][T12621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1911'. [ 800.407234][ T5846] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 800.433417][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 800.635282][ T972] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 801.904028][ T976] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 801.915245][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 801.933442][ T976] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 801.941018][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.951369][ T976] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 801.974152][ T9] usb 3-1: config 0 descriptor?? [ 801.979678][ T976] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 801.989708][ T9] cp210x 3-1:0.0: cp210x converter detected [ 802.005864][ T976] usb 1-1: USB disconnect, device number 30 [ 803.375769][T12658] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 803.384397][T12658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1913'. [ 803.723533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.732054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.740547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.923536][ T9758] Bluetooth: hci4: command 0x0406 tx timeout [ 805.881222][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 806.263839][T12671] FAULT_INJECTION: forcing a failure. [ 806.263839][T12671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.277441][T12671] CPU: 1 UID: 0 PID: 12671 Comm: syz.4.1926 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 806.277471][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 806.277485][T12671] Call Trace: [ 806.277494][T12671] [ 806.277502][T12671] dump_stack_lvl+0x241/0x360 [ 806.277539][T12671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.277569][T12671] ? __pfx__printk+0x10/0x10 [ 806.277611][T12671] should_fail_ex+0x424/0x570 [ 806.277649][T12671] _copy_from_user+0x2d/0xb0 [ 806.277677][T12671] generic_map_update_batch+0x53b/0x8e0 [ 806.277725][T12671] ? __pfx_generic_map_update_batch+0x10/0x10 [ 806.277760][T12671] ? __fget_files+0x39d/0x420 [ 806.277785][T12671] ? __fget_files+0x2a/0x420 [ 806.277819][T12671] ? __pfx_generic_map_update_batch+0x10/0x10 [ 806.277850][T12671] bpf_map_do_batch+0x39a/0x660 [ 806.277885][T12671] __sys_bpf+0x3c1/0x8b0 [ 806.277913][T12671] ? __pfx___sys_bpf+0x10/0x10 [ 806.277953][T12671] ? ksys_write+0x275/0x2d0 [ 806.277990][T12671] __x64_sys_bpf+0x7c/0x90 [ 806.278014][T12671] do_syscall_64+0xf3/0x210 [ 806.278037][T12671] ? clear_bhb_loop+0x45/0xa0 [ 806.278063][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.278083][T12671] RIP: 0033:0x7f6d9cb8e169 [ 806.278101][T12671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.278119][T12671] RSP: 002b:00007f6d9d918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 806.278141][T12671] RAX: ffffffffffffffda RBX: 00007f6d9cdb6160 RCX: 00007f6d9cb8e169 [ 806.278158][T12671] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 806.278171][T12671] RBP: 00007f6d9d918090 R08: 0000000000000000 R09: 0000000000000000 [ 806.278185][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.278197][T12671] R13: 0000000000000000 R14: 00007f6d9cdb6160 R15: 00007fff4f0d6208 [ 806.278231][T12671] [ 807.689110][T12683] KVM: debugfs: duplicate directory 12683-4 [ 807.701264][T12681] input: syz0 as /devices/virtual/input/input64 [ 808.223057][ T9] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 808.230892][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 808.278701][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 808.294438][ T976] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 808.368621][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1932'. [ 809.277574][ T9] usb 3-1: USB disconnect, device number 42 [ 809.390767][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 809.408387][T12694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 809.421740][T12694] tipc: Enabling of bearer rejected, already enabled [ 809.816094][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 809.843464][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 809.853953][ T9] cp210x 3-1:0.0: device disconnected [ 809.876283][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.923689][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.971612][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 810.044048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.053084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.062306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.071411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.110374][ T976] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 810.146737][T12705] netlink: 'syz.0.1936': attribute type 4 has an invalid length. [ 810.546265][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.573434][ T5846] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 810.581573][ T976] usb 4-1: config 0 descriptor?? [ 810.700271][ T976] usbhid 4-1:0.0: can't add hid device: -71 [ 810.856097][ T976] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 811.528785][ T976] usb 4-1: USB disconnect, device number 43 [ 811.703940][T12718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 811.716512][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.795870][T12724] sctp: [Deprecated]: syz.1.1941 (pid 12724) Use of int in max_burst socket option. [ 811.795870][T12724] Use struct sctp_assoc_value instead [ 811.811372][T12721] sctp: [Deprecated]: syz.1.1941 (pid 12721) Use of int in max_burst socket option. [ 811.811372][T12721] Use struct sctp_assoc_value instead [ 813.333980][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.772227][T12718] program syz.3.1940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.797739][T12753] netlink: 'syz.4.1949': attribute type 5 has an invalid length. [ 815.163528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.172209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.180599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.293439][ T5883] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 815.375673][T12770] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 815.473595][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 815.485774][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 815.518085][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 815.555924][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.574084][ T5883] usb 5-1: Product: syz [ 815.578362][ T5883] usb 5-1: Manufacturer: syz [ 815.583047][ T5883] usb 5-1: SerialNumber: syz [ 815.635859][ T976] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 815.852506][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 815.866935][T12775] input: syz0 as /devices/virtual/input/input65 [ 816.027704][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.133032][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.157132][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.222955][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.276604][ T976] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 816.354569][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.424709][ T976] usb 2-1: config 0 descriptor?? [ 817.116110][ T976] logitech 0003:046D:C20A.000C: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.1-1/input0 [ 817.133398][ T976] logitech 0003:046D:C20A.000C: no inputs found [ 817.162688][ T976] usb 2-1: USB disconnect, device number 32 [ 817.362949][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1958'. [ 817.527553][ T5883] usb 5-1: found format II with max.bitrate = 5, frame size=8 [ 817.546193][ T5883] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 817.607725][ T5883] usb 5-1: USB disconnect, device number 23 [ 817.688401][T12796] netlink: 'syz.2.1961': attribute type 4 has an invalid length. [ 818.290573][T12802] FAULT_INJECTION: forcing a failure. [ 818.290573][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 818.334927][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.2.1963 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 818.334957][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 818.334969][T12802] Call Trace: [ 818.334977][T12802] [ 818.334986][T12802] dump_stack_lvl+0x241/0x360 [ 818.335021][T12802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.335048][T12802] ? __pfx__printk+0x10/0x10 [ 818.335072][T12802] ? __lock_acquire+0xad5/0xd80 [ 818.335110][T12802] should_fail_ex+0x424/0x570 [ 818.335147][T12802] should_failslab+0xac/0x100 [ 818.335174][T12802] kmem_cache_alloc_noprof+0x78/0x390 [ 818.335198][T12802] ? skb_clone+0x20c/0x390 [ 818.335222][T12802] skb_clone+0x20c/0x390 [ 818.335245][T12802] __netlink_deliver_tap+0x3c4/0x7f0 [ 818.335282][T12802] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.335306][T12802] netlink_deliver_tap+0x19d/0x1b0 [ 818.335332][T12802] netlink_unicast+0x7c6/0x9a0 [ 818.335364][T12802] ? __pfx_netlink_unicast+0x10/0x10 [ 818.335388][T12802] ? skb_put+0x114/0x1f0 [ 818.335421][T12802] netlink_sendmsg+0x8c3/0xcd0 [ 818.335461][T12802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.335501][T12802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.335524][T12802] __sock_sendmsg+0x221/0x270 [ 818.335561][T12802] ____sys_sendmsg+0x523/0x860 [ 818.335604][T12802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.335633][T12802] ? __fget_files+0x2a/0x420 [ 818.335661][T12802] ? __fget_files+0x2a/0x420 [ 818.335697][T12802] __sys_sendmsg+0x271/0x360 [ 818.335735][T12802] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.335828][T12802] ? do_syscall_64+0xb6/0x210 [ 818.335855][T12802] do_syscall_64+0xf3/0x210 [ 818.335878][T12802] ? clear_bhb_loop+0x45/0xa0 [ 818.335902][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.335921][T12802] RIP: 0033:0x7f3cba98e169 [ 818.335940][T12802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.335956][T12802] RSP: 002b:00007f3cbb86a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.335978][T12802] RAX: ffffffffffffffda RBX: 00007f3cbabb5fa0 RCX: 00007f3cba98e169 [ 818.335993][T12802] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 818.336006][T12802] RBP: 00007f3cbb86a090 R08: 0000000000000000 R09: 0000000000000000 [ 818.336018][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.336030][T12802] R13: 0000000000000000 R14: 00007f3cbabb5fa0 R15: 00007ffeabe70538 [ 818.336062][T12802] [ 818.734917][ T5914] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 818.903871][ T5883] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 818.957868][ T5914] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 819.373867][ T5914] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 819.397354][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.415202][ T5883] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 819.443398][ T5914] usb 1-1: Product: syz [ 819.453735][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.462048][ T5914] usb 1-1: Manufacturer: syz [ 819.474055][ T5914] usb 1-1: SerialNumber: syz [ 819.499811][ T5883] usb 4-1: config 0 descriptor?? [ 819.520837][ T5883] sisusb 4-1:0.0: Invalid USB2VGA device [ 819.522231][T12822] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 819.527075][ T5883] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 819.641479][T12822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.683124][T12822] veth7: entered promiscuous mode [ 819.694489][T12822] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 819.740068][T11343] usb 4-1: USB disconnect, device number 44 [ 819.804096][ T5883] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 819.813793][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 819.913184][ T5914] usb 1-1: selecting invalid altsetting 1 [ 819.963563][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 819.965126][ T9] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 819.978696][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.990238][ T5883] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 819.996156][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 819.999679][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.015815][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.025044][ T5883] usb 2-1: config 0 descriptor?? [ 820.029986][ T9] usb 5-1: Product: syz [ 820.030007][ T9] usb 5-1: Manufacturer: syz [ 820.030024][ T9] usb 5-1: SerialNumber: syz [ 820.047862][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 820.131486][ T5914] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 820.131643][ T5914] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 820.156809][ T976] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 820.283512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.292091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.418371][T12843] netlink: 'syz.3.1978': attribute type 29 has an invalid length. [ 820.429065][T12843] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1978'. [ 820.472361][ T5883] pantherlord 0003:0E8F:0003.000D: item fetching failed at offset 4/5 [ 820.530183][ T5883] pantherlord 0003:0E8F:0003.000D: parse failed [ 820.546249][ T5883] pantherlord 0003:0E8F:0003.000D: probe with driver pantherlord failed with error -22 [ 820.633200][ T5883] usb 2-1: USB disconnect, device number 33 [ 820.671930][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 820.681318][T12821] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1969'. [ 821.217805][T12821] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 821.264595][ T976] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 821.277536][ T976] ath9k_htc: Failed to initialize the device [ 821.324755][ T976] usb 5-1: ath9k_htc: USB layer deinitialized [ 821.389524][ T5914] usb 5-1: USB disconnect, device number 24 [ 821.404054][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1979'. [ 822.006836][ T5914] usb 1-1: USB disconnect, device number 32 [ 822.045415][T12864] netlink: 'syz.1.1983': attribute type 30 has an invalid length. [ 822.320583][T12866] program syz.0.1984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.330203][T12866] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 822.625519][T12884] FAULT_INJECTION: forcing a failure. [ 822.625519][T12884] name failslab, interval 1, probability 0, space 0, times 0 [ 822.715911][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1987'. [ 822.728941][T12884] CPU: 1 UID: 0 PID: 12884 Comm: syz.3.1989 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 822.728971][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 822.728986][T12884] Call Trace: [ 822.728995][T12884] [ 822.729004][T12884] dump_stack_lvl+0x241/0x360 [ 822.729041][T12884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.729070][T12884] ? __pfx__printk+0x10/0x10 [ 822.729107][T12884] ? __pfx___might_resched+0x10/0x10 [ 822.729145][T12884] should_fail_ex+0x424/0x570 [ 822.729183][T12884] should_failslab+0xac/0x100 [ 822.729212][T12884] __kmalloc_noprof+0xdf/0x4d0 [ 822.729238][T12884] ? snd_pcm_hw_refine+0x978/0x1b80 [ 822.729264][T12884] snd_pcm_hw_refine+0x978/0x1b80 [ 822.729283][T12884] ? __kmalloc_cache_noprof+0x236/0x370 [ 822.729315][T12884] ? snd_pcm_oss_change_params_locked+0x1e8/0x4150 [ 822.729342][T12884] ? snd_pcm_oss_read+0x22f/0x8a0 [ 822.729381][T12884] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 822.729400][T12884] ? trace_irq_disable+0x3b/0x120 [ 822.729424][T12884] ? preempt_schedule_irq+0x145/0x1c0 [ 822.729456][T12884] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 822.729498][T12884] ? irqentry_exit+0x63/0x90 [ 822.729516][T12884] ? lockdep_hardirqs_on+0x9d/0x150 [ 822.729556][T12884] ? __asan_memset+0x23/0x50 [ 822.729587][T12884] ? snd_pcm_oss_change_params_locked+0x780/0x4150 [ 822.729621][T12884] snd_pcm_oss_change_params_locked+0xab4/0x4150 [ 822.729661][T12884] ? rcu_is_watching+0x15/0xb0 [ 822.729685][T12884] ? __mutex_lock+0x380/0x10c0 [ 822.729717][T12884] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 822.729746][T12884] ? snd_pcm_oss_read+0x1c3/0x8a0 [ 822.729785][T12884] ? __pfx___schedule+0x10/0x10 [ 822.729818][T12884] ? rcu_read_lock_any_held+0xbb/0x160 [ 822.729844][T12884] snd_pcm_oss_read+0x22f/0x8a0 [ 822.729878][T12884] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 822.729906][T12884] vfs_read+0x21f/0xb90 [ 822.729937][T12884] ? __pfx_vfs_read+0x10/0x10 [ 822.729957][T12884] ? irqentry_exit+0x63/0x90 [ 822.729975][T12884] ? lockdep_hardirqs_on+0x9d/0x150 [ 822.730018][T12884] ksys_read+0x19d/0x2d0 [ 822.730042][T12884] ? __pfx_ksys_read+0x10/0x10 [ 822.730070][T12884] ? do_syscall_64+0xb6/0x210 [ 822.730095][T12884] do_syscall_64+0xf3/0x210 [ 822.730117][T12884] ? clear_bhb_loop+0x45/0xa0 [ 822.730143][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.730163][T12884] RIP: 0033:0x7fc55038e169 [ 822.730182][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.730200][T12884] RSP: 002b:00007fc551293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 822.730244][T12884] RAX: ffffffffffffffda RBX: 00007fc5505b5fa0 RCX: 00007fc55038e169 [ 822.730260][T12884] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000003 [ 822.730273][T12884] RBP: 00007fc551293090 R08: 0000000000000000 R09: 0000000000000000 [ 822.730292][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.730304][T12884] R13: 0000000000000000 R14: 00007fc5505b5fa0 R15: 00007ffd70941618 [ 822.730338][T12884] [ 823.075662][T12864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.083995][T12864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 823.099093][T12864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.105661][T12864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 823.276096][T12877] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 823.563490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.581015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.798553][T12894] netlink: 'syz.0.1991': attribute type 29 has an invalid length. [ 823.807907][T12894] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1991'. [ 825.126065][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 825.164081][ T976] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 825.175182][ T9758] Bluetooth: hci2: command 0x0406 tx timeout [ 825.183822][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 825.190176][ T9758] Bluetooth: hci0: command 0x0406 tx timeout [ 825.836494][T12905] FAULT_INJECTION: forcing a failure. [ 825.836494][T12905] name failslab, interval 1, probability 0, space 0, times 0 [ 825.849174][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.0.1994 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 825.849194][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 825.849204][T12905] Call Trace: [ 825.849211][T12905] [ 825.849217][T12905] dump_stack_lvl+0x241/0x360 [ 825.849244][T12905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 825.849265][T12905] ? __pfx__printk+0x10/0x10 [ 825.849297][T12905] ? down_read+0x813/0xa50 [ 825.849318][T12905] ? __pfx___might_resched+0x10/0x10 [ 825.849343][T12905] should_fail_ex+0x424/0x570 [ 825.849370][T12905] should_failslab+0xac/0x100 [ 825.849390][T12905] __kmalloc_cache_noprof+0x73/0x370 [ 825.849409][T12905] ? crypto_larval_alloc+0x59/0x290 [ 825.849436][T12905] crypto_larval_alloc+0x59/0x290 [ 825.849460][T12905] crypto_alg_mod_lookup+0x198/0x640 [ 825.849478][T12905] crypto_add_alg+0x22b/0x380 [ 825.849494][T12905] ? __pfx_crypto_add_alg+0x10/0x10 [ 825.849513][T12905] crypto_user_rcv_msg+0x570/0x690 [ 825.849532][T12905] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 825.849565][T12905] ? __mutex_trylock_common+0x184/0x2e0 [ 825.849584][T12905] ? __pfx___mutex_trylock_common+0x10/0x10 [ 825.849607][T12905] netlink_rcv_skb+0x208/0x480 [ 825.849626][T12905] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 825.849645][T12905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.849679][T12905] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.849702][T12905] crypto_netlink_rcv+0x2a/0x40 [ 825.849718][T12905] netlink_unicast+0x7f8/0x9a0 [ 825.849745][T12905] ? __pfx_netlink_unicast+0x10/0x10 [ 825.849769][T12905] ? skb_put+0x114/0x1f0 [ 825.849801][T12905] netlink_sendmsg+0x8c3/0xcd0 [ 825.849829][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.849857][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.849874][T12905] __sock_sendmsg+0x221/0x270 [ 825.849894][T12905] ____sys_sendmsg+0x523/0x860 [ 825.849925][T12905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.849945][T12905] ? __fget_files+0x2a/0x420 [ 825.849966][T12905] ? __fget_files+0x2a/0x420 [ 825.849990][T12905] __sys_sendmsg+0x271/0x360 [ 825.850033][T12905] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.850120][T12905] ? do_syscall_64+0xb6/0x210 [ 825.850139][T12905] do_syscall_64+0xf3/0x210 [ 825.850154][T12905] ? clear_bhb_loop+0x45/0xa0 [ 825.850172][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.850186][T12905] RIP: 0033:0x7f1614f8e169 [ 825.850201][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.850213][T12905] RSP: 002b:00007f1615e50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.850229][T12905] RAX: ffffffffffffffda RBX: 00007f16151b6160 RCX: 00007f1614f8e169 [ 825.850241][T12905] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000007 [ 825.850250][T12905] RBP: 00007f1615e50090 R08: 0000000000000000 R09: 0000000000000000 [ 825.850259][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.850268][T12905] R13: 0000000000000000 R14: 00007f16151b6160 R15: 00007ffd5f7d41d8 [ 825.850291][T12905] [ 826.412755][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 826.684774][ T976] usb 3-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.721913][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 826.763525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.771947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.840639][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.00 [ 827.373589][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.434390][ T976] usb 3-1: config 0 descriptor?? [ 827.473513][ T976] usb 3-1: can't set config #0, error -71 [ 827.500285][ T976] usb 3-1: USB disconnect, device number 43 [ 829.361929][T12937] netlink: 'syz.2.2004': attribute type 29 has an invalid length. [ 829.435358][T12937] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2004'. [ 830.883814][ T5883] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 831.927227][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.938498][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.995663][T12950] kvm: kvm [12948]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x859 [ 832.013474][ T5883] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 832.022323][T12950] kvm: kvm [12948]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x859 [ 832.032525][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.059802][ T5883] usb 5-1: config 0 descriptor?? [ 832.090229][T12950] kvm: kvm [12948]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x859 [ 832.203489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.212156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.220625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.252289][T12968] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2015'. [ 832.288620][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 832.305249][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 832.332443][ T5883] usb 5-1: USB disconnect, device number 25 [ 832.474649][T12976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2018'. [ 832.477568][T12973] kvm: user requested TSC rate below hardware speed [ 832.484758][T12976] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 832.511200][T12976] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 832.520083][T12976] netlink: 'syz.0.2018': attribute type 2 has an invalid length. [ 832.529952][T12976] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 832.542332][T12976] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 832.548673][T12973] syzkaller1: entered promiscuous mode [ 832.562727][T12973] syzkaller1: entered allmulticast mode [ 832.700837][T12980] netlink: 'syz.3.2019': attribute type 29 has an invalid length. [ 832.710938][T12980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2019'. [ 832.795566][ T976] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 833.048028][T12983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.188823][ T976] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.384767][ T976] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 833.395401][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.422690][ T976] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 833.463477][ T976] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 833.502780][ T976] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.513147][ T976] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.539514][ T976] usb 1-1: Product: syz [ 833.551065][ T976] usb 1-1: Manufacturer: syz [ 833.576987][ T976] cdc_wdm 1-1:1.0: skipping garbage [ 833.594705][ T976] cdc_wdm 1-1:1.0: skipping garbage [ 833.619137][ T976] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 833.631581][T12991] netlink: 432 bytes leftover after parsing attributes in process `syz.3.2023'. [ 833.642108][ T976] cdc_wdm 1-1:1.0: Unknown control protocol [ 834.276463][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.301233][T12994] FAULT_INJECTION: forcing a failure. [ 834.301233][T12994] name failslab, interval 1, probability 0, space 0, times 0 [ 834.323671][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.331700][T12994] CPU: 1 UID: 0 PID: 12994 Comm: syz.3.2024 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 834.331739][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 834.331753][T12994] Call Trace: [ 834.331761][T12994] [ 834.331770][T12994] dump_stack_lvl+0x241/0x360 [ 834.331806][T12994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.331835][T12994] ? __pfx__printk+0x10/0x10 [ 834.331869][T12994] ? __pfx___might_resched+0x10/0x10 [ 834.331905][T12994] should_fail_ex+0x424/0x570 [ 834.331943][T12994] should_failslab+0xac/0x100 [ 834.331973][T12994] __kmalloc_noprof+0xdf/0x4d0 [ 834.331999][T12994] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 834.332030][T12994] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 834.332068][T12994] tomoyo_realpath_from_path+0xcf/0x5e0 [ 834.332115][T12994] tomoyo_path_number_perm+0x245/0x790 [ 834.332146][T12994] ? tomoyo_path_number_perm+0x215/0x790 [ 834.332175][T12994] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 834.332210][T12994] ? ksys_write+0x24e/0x2d0 [ 834.332240][T12994] ? __lock_acquire+0xad5/0xd80 [ 834.332288][T12994] ? __fget_files+0x2a/0x420 [ 834.332313][T12994] ? __fget_files+0x2a/0x420 [ 834.332340][T12994] ? __fget_files+0x2a/0x420 [ 834.332372][T12994] security_file_ioctl+0xc6/0x2a0 [ 834.332402][T12994] __se_sys_ioctl+0x46/0x160 [ 834.332436][T12994] do_syscall_64+0xf3/0x210 [ 834.332458][T12994] ? clear_bhb_loop+0x45/0xa0 [ 834.332483][T12994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.332502][T12994] RIP: 0033:0x7fc55038e169 [ 834.332519][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.332535][T12994] RSP: 002b:00007fc551293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.332557][T12994] RAX: ffffffffffffffda RBX: 00007fc5505b5fa0 RCX: 00007fc55038e169 [ 834.332573][T12994] RDX: 00002000000000c0 RSI: 000000008038550a RDI: 0000000000000003 [ 834.332587][T12994] RBP: 00007fc551293090 R08: 0000000000000000 R09: 0000000000000000 [ 834.332600][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.332612][T12994] R13: 0000000000000000 R14: 00007fc5505b5fa0 R15: 00007ffd70941618 [ 834.332644][T12994] [ 834.332677][T12994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 834.449417][ T976] usb 1-1: USB disconnect, device number 33 [ 834.556610][T12999] usb usb8: usbfs: process 12999 (syz.1.2026) did not claim interface 0 before use [ 834.714528][T12994] usb usb8: usbfs: process 12994 (syz.3.2024) did not claim interface 0 before use [ 835.335035][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 835.372286][T13004] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 835.410450][T13004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.595634][T13012] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aabb::, load rds_tcp or rds_rdma? [ 835.667774][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 835.746788][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 835.836321][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.857369][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.876851][ T5914] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.894444][T13023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2035'. [ 835.932574][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.950317][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.977837][ T5914] usb 2-1: Product: syz [ 835.982135][ T5914] usb 2-1: Manufacturer: syz [ 835.990000][ T5914] usb 2-1: SerialNumber: syz [ 836.010277][ T5914] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 836.021881][ T5914] cdc_ncm 2-1:1.0: bind() failure [ 836.243868][ T976] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 836.313697][ T5886] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 836.426787][ T976] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 836.806346][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.829855][ T5886] usb 5-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 836.844782][ T976] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 836.861341][ T5886] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 836.875644][ T9] usb 2-1: USB disconnect, device number 34 [ 836.888228][ T976] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 836.908374][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.930393][ T5886] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 836.942357][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.958760][ T5886] usb 5-1: Product: syz [ 836.965822][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 836.975334][ T5886] usb 5-1: Manufacturer: syz [ 836.979978][ T5886] usb 5-1: SerialNumber: syz [ 836.984725][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.005177][ T5886] usb 5-1: config 0 descriptor?? [ 837.010419][ T976] usb 3-1: Product: syz [ 837.017911][ T976] usb 3-1: Manufacturer: syz [ 837.022562][ T976] usb 3-1: SerialNumber: syz [ 837.103799][T12641] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 837.297070][T13052] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 837.563487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.572578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.581494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.632175][ T976] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 837.645519][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 837.659477][ T976] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 837.668684][ T976] usb 3-1: found format II with max.bitrate = 128, frame size=0 [ 837.677207][ T976] usb 3-1: 2:1: All rates were zero [ 837.708758][ T976] usb 3-1: USB disconnect, device number 44 [ 837.733743][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 837.775907][T12641] usb 1-1: Using ep0 maxpacket: 8 [ 837.791451][T12641] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 837.801230][T12641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.810258][T12641] usb 1-1: Product: syz [ 837.814691][T12641] usb 1-1: Manufacturer: syz [ 837.819318][T12641] usb 1-1: SerialNumber: syz [ 837.827425][T12641] usb 1-1: config 0 descriptor?? [ 837.885929][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.903403][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.922158][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 837.932678][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 837.942563][ T9] usb 2-1: SerialNumber: syz [ 837.971674][T13056] FAULT_INJECTION: forcing a failure. [ 837.971674][T13056] name failslab, interval 1, probability 0, space 0, times 0 [ 837.986236][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.3.2046 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 837.986270][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 837.986284][T13056] Call Trace: [ 837.986292][T13056] [ 837.986309][T13056] dump_stack_lvl+0x241/0x360 [ 837.986346][T13056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.986374][T13056] ? __pfx__printk+0x10/0x10 [ 837.986405][T13056] ? __pfx___might_resched+0x10/0x10 [ 837.986441][T13056] should_fail_ex+0x424/0x570 [ 837.986478][T13056] should_failslab+0xac/0x100 [ 837.986505][T13056] __kmalloc_cache_noprof+0x73/0x370 [ 837.986530][T13056] ? tcf_chain_create+0xb2/0x310 [ 837.986561][T13056] tcf_chain_create+0xb2/0x310 [ 837.986594][T13056] __tcf_chain_get+0x117/0x3c0 [ 837.986622][T13056] tc_new_tfilter+0x941/0x1a90 [ 837.986666][T13056] ? is_bpf_text_address+0x288/0x2a0 [ 837.986696][T13056] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 837.986725][T13056] ? __pfx_tc_new_tfilter+0x10/0x10 [ 837.986750][T13056] ? unwind_get_return_address+0x4d/0x90 [ 837.986788][T13056] ? __lock_acquire+0xad5/0xd80 [ 837.986838][T13056] ? __pfx_tc_new_tfilter+0x10/0x10 [ 837.986867][T13056] rtnetlink_rcv_msg+0x80f/0xd70 [ 837.986891][T13056] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 837.986921][T13056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 837.986944][T13056] ? __lock_acquire+0xad5/0xd80 [ 837.986989][T13056] netlink_rcv_skb+0x208/0x480 [ 837.987014][T13056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 837.987042][T13056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.987087][T13056] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.987115][T13056] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.987142][T13056] netlink_unicast+0x7f8/0x9a0 [ 837.987174][T13056] ? __pfx_netlink_unicast+0x10/0x10 [ 837.987199][T13056] ? skb_put+0x114/0x1f0 [ 837.987232][T13056] netlink_sendmsg+0x8c3/0xcd0 [ 837.987271][T13056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.987318][T13056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.987342][T13056] __sock_sendmsg+0x221/0x270 [ 837.987370][T13056] ____sys_sendmsg+0x523/0x860 [ 837.987411][T13056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.987438][T13056] ? __fget_files+0x2a/0x420 [ 837.987466][T13056] ? __fget_files+0x2a/0x420 [ 837.987501][T13056] __sys_sendmsg+0x271/0x360 [ 837.987537][T13056] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.987630][T13056] ? do_syscall_64+0xb6/0x210 [ 837.987655][T13056] do_syscall_64+0xf3/0x210 [ 837.987676][T13056] ? clear_bhb_loop+0x45/0xa0 [ 837.987700][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.987719][T13056] RIP: 0033:0x7fc55038e169 [ 837.987737][T13056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.987755][T13056] RSP: 002b:00007fc551293038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.987776][T13056] RAX: ffffffffffffffda RBX: 00007fc5505b5fa0 RCX: 00007fc55038e169 [ 837.987791][T13056] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 837.987803][T13056] RBP: 00007fc551293090 R08: 0000000000000000 R09: 0000000000000000 [ 837.987816][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.987828][T13056] R13: 0000000000000000 R14: 00007fc5505b5fa0 R15: 00007ffd70941618 [ 837.987861][T13056] [ 838.423846][T12641] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 839.016404][ T5917] usb 5-1: USB disconnect, device number 26 [ 839.303541][T12641] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 839.346787][T12641] usb 1-1: USB disconnect, device number 34 [ 839.530252][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 839.536561][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 839.783225][T13077] netlink: 'syz.3.2051': attribute type 29 has an invalid length. [ 839.806893][T13077] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2051'. [ 839.856669][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 839.881488][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 840.474567][ T9] usb 2-1: 0:2 : does not exist [ 840.492442][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 840.577824][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 840.643901][T12641] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 840.652625][T13082] fuse: Bad value for 'group_id' [ 840.657956][T13082] fuse: Bad value for 'group_id' [ 840.728331][ T9] usb 2-1: USB disconnect, device number 35 [ 841.047701][T12641] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 841.064440][T12641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.436563][T12641] usb 3-1: Product: syz [ 841.441004][T12641] usb 3-1: Manufacturer: syz [ 841.448760][T12641] usb 3-1: SerialNumber: syz [ 841.784160][T12641] usb 3-1: config 0 descriptor?? [ 842.019566][T13084] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 842.152838][T13069] ceph: No mds server is up or the cluster is laggy [ 842.227595][T12641] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 842.366012][T12641] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 842.408988][T12641] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 842.540570][T12641] usb 3-1: USB disconnect, device number 45 [ 843.333540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.342166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.350793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.359337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.824867][T13110] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 843.850869][T13111] netlink: 'syz.2.2063': attribute type 29 has an invalid length. [ 843.861670][T13111] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2063'. [ 844.413113][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 844.451531][T13116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.792786][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 844.802756][T13124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'. [ 844.813910][T13124] tipc: Started in network mode [ 844.821431][T13124] tipc: Node identity ac1414bb, cluster identity 4711 [ 844.831737][T13124] tipc: Enabling of bearer rejected, failed to enable media [ 845.577283][T13134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 847.763427][T12641] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 847.918092][T13156] input: syz0 as /devices/virtual/input/input66 [ 848.510159][T13159] netlink: 'syz.3.2078': attribute type 29 has an invalid length. [ 848.544571][T13159] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2078'. [ 848.990094][T12641] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 849.020662][T12641] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 849.059915][T12641] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 849.088297][T12641] usb 2-1: config 0 interface 0 has no altsetting 0 [ 849.163564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.172019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.180425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.229567][T12641] usb 2-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 849.758653][T12641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.784399][T12641] usb 2-1: config 0 descriptor?? [ 849.790247][T13144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.921377][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 850.029458][T13171] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 851.594341][T12641] usb 2-1: can't set config #0, error -71 [ 851.602428][T12641] usb 2-1: USB disconnect, device number 36 [ 854.203539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.211976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.220250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.563504][T13201] netlink: 'syz.1.2092': attribute type 29 has an invalid length. [ 854.592203][T13201] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2092'. [ 854.773860][T13217] syzkaller1: entered promiscuous mode [ 854.800428][T13217] syzkaller1: entered allmulticast mode [ 854.803672][T13218] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 854.889330][ T30] audit: type=1326 audit(1745288240.352:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13213 comm="syz.4.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8e169 code=0x0 [ 856.456802][T13240] tipc: Can't bind to reserved service type 1 [ 856.835165][T13249] netlink: 'syz.1.2105': attribute type 29 has an invalid length. [ 856.856718][T13249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2105'. [ 858.533987][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 858.567403][T13276] 9pnet: p9_errstr2errno: server reported unknown error — [ 858.579166][T13277] 9pnet_fd: Insufficient options for proto=fd [ 858.797158][T13271] program syz.4.2111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.088012][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 859.614236][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 859.653442][ T9] usb 3-1: config 0 has no interface number 0 [ 859.678978][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 859.716549][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.753806][ T9] usb 3-1: Product: syz [ 859.758044][ T9] usb 3-1: Manufacturer: syz [ 859.762679][ T9] usb 3-1: SerialNumber: syz [ 859.896351][ T9] usb 3-1: config 0 descriptor?? [ 859.931320][T13284] netlink: 'syz.3.2116': attribute type 29 has an invalid length. [ 859.941833][T13284] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2116'. [ 859.960181][T13286] kvm: apic: phys broadcast and lowest prio [ 859.963511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.974479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.982751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.149528][ T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 860.165353][ T9] usb 3-1: No valid video chain found. [ 861.543676][ T9] usb 3-1: USB disconnect, device number 46 [ 861.552373][T13298] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 863.452839][T13329] netlink: 'syz.2.2128': attribute type 29 has an invalid length. [ 863.984752][T13329] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2128'. [ 864.228286][T13341] FAULT_INJECTION: forcing a failure. [ 864.228286][T13341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.256601][T13342] @: renamed from vlan0 (while UP) [ 864.265923][T13341] CPU: 0 UID: 0 PID: 13341 Comm: syz.4.2134 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 864.265952][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 864.265964][T13341] Call Trace: [ 864.265971][T13341] [ 864.265980][T13341] dump_stack_lvl+0x241/0x360 [ 864.266017][T13341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.266046][T13341] ? __pfx__printk+0x10/0x10 [ 864.266088][T13341] should_fail_ex+0x424/0x570 [ 864.266123][T13341] _copy_from_user+0x2d/0xb0 [ 864.266150][T13341] kstrtouint_from_user+0xce/0x1a0 [ 864.266175][T13341] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 864.266202][T13341] ? __lock_acquire+0xad5/0xd80 [ 864.266241][T13341] proc_fail_nth_write+0xac/0x2d0 [ 864.266266][T13341] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 864.266289][T13341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 864.266321][T13341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 864.266348][T13341] vfs_write+0x2bc/0xd10 [ 864.266376][T13341] ? fdget_pos+0x247/0x310 [ 864.266406][T13341] ? __pfx_vfs_write+0x10/0x10 [ 864.266429][T13341] ? __fget_files+0x2a/0x420 [ 864.266455][T13341] ? __fget_files+0x39d/0x420 [ 864.266477][T13341] ? __fget_files+0x2a/0x420 [ 864.266512][T13341] ksys_write+0x19d/0x2d0 [ 864.266536][T13341] ? __pfx_ksys_write+0x10/0x10 [ 864.266563][T13341] ? do_syscall_64+0xb6/0x210 [ 864.266603][T13341] do_syscall_64+0xf3/0x210 [ 864.266625][T13341] ? clear_bhb_loop+0x45/0xa0 [ 864.266649][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.266668][T13341] RIP: 0033:0x7f6d9cb8cc1f [ 864.266687][T13341] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 864.266703][T13341] RSP: 002b:00007f6d9d95a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 864.266725][T13341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d9cb8cc1f [ 864.266740][T13341] RDX: 0000000000000001 RSI: 00007f6d9d95a0a0 RDI: 0000000000000004 [ 864.266753][T13341] RBP: 00007f6d9d95a090 R08: 0000000000000000 R09: 0000000000000000 [ 864.266766][T13341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 864.266778][T13341] R13: 0000000000000000 R14: 00007f6d9cdb5fa0 R15: 00007fff4f0d6208 [ 864.266812][T13341] [ 864.619134][T13347] Cannot find add_set index 0 as target [ 864.694978][T13347] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2137'. [ 864.757097][T13349] netlink: 'syz.0.2135': attribute type 178 has an invalid length. [ 864.823688][T13354] FAULT_INJECTION: forcing a failure. [ 864.823688][T13354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.869363][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.1.2139 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 864.869414][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 864.869428][T13354] Call Trace: [ 864.869437][T13354] [ 864.869446][T13354] dump_stack_lvl+0x241/0x360 [ 864.869484][T13354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.869514][T13354] ? __pfx__printk+0x10/0x10 [ 864.869556][T13354] should_fail_ex+0x424/0x570 [ 864.869595][T13354] _copy_from_user+0x2d/0xb0 [ 864.869624][T13354] uinput_ff_upload_from_user+0xc2/0x2e0 [ 864.869655][T13354] ? __pfx_uinput_ff_upload_from_user+0x10/0x10 [ 864.869682][T13354] ? __pfx_dev_set_name+0x10/0x10 [ 864.869721][T13354] ? device_initialize+0x266/0x460 [ 864.869762][T13354] uinput_ioctl_handler+0x3d4/0x17f0 [ 864.869791][T13354] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 864.869828][T13354] ? ksys_write+0x266/0x2d0 [ 864.869857][T13354] ? __pfx_uinput_ioctl+0x10/0x10 [ 864.869882][T13354] __se_sys_ioctl+0xf1/0x160 [ 864.869917][T13354] do_syscall_64+0xf3/0x210 [ 864.869941][T13354] ? clear_bhb_loop+0x45/0xa0 [ 864.869966][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.869987][T13354] RIP: 0033:0x7f71ae78e169 [ 864.870005][T13354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.870022][T13354] RSP: 002b:00007f71af5bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.870045][T13354] RAX: ffffffffffffffda RBX: 00007f71ae9b5fa0 RCX: 00007f71ae78e169 [ 864.870060][T13354] RDX: 00002000000000c0 RSI: 00000000406855c9 RDI: 0000000000000003 [ 864.870074][T13354] RBP: 00007f71af5bb090 R08: 0000000000000000 R09: 0000000000000000 [ 864.870087][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.870100][T13354] R13: 0000000000000000 R14: 00007f71ae9b5fa0 R15: 00007ffc3a69a758 [ 864.870133][T13354] [ 864.974869][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 865.329734][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 865.424816][ T9] usb 3-1: config 0 has an invalid interface number: 141 but max is 0 [ 865.440846][ T9] usb 3-1: config 0 has no interface number 0 [ 865.475866][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0001, bcdDevice=19.fe [ 865.493649][T13363] netlink: 'syz.4.2143': attribute type 29 has an invalid length. [ 865.504187][T13363] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2143'. [ 865.523982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.556151][ T9] usb 3-1: Product: syz [ 865.560371][ T9] usb 3-1: Manufacturer: syz [ 865.583342][ T9] usb 3-1: SerialNumber: syz [ 865.622807][ T9] usb 3-1: config 0 descriptor?? [ 865.883507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.892286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.901291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.951175][ T9] usb 3-1: USB disconnect, device number 47 [ 867.159126][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 867.313705][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 867.347179][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.369623][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 867.392124][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.449799][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 867.513363][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.531795][ T9] usb 5-1: Product: syz [ 867.552119][ T9] usb 5-1: Manufacturer: syz [ 867.573459][ T9] usb 5-1: SerialNumber: syz [ 867.625408][ T9] usb 5-1: config 0 descriptor?? [ 867.662115][ T9] mcba_usb 5-1:0.0: Can't find endpoints [ 867.860399][T13386] sctp: [Deprecated]: syz.4.2152 (pid 13386) Use of int in max_burst socket option. [ 867.860399][T13386] Use struct sctp_assoc_value instead [ 868.598420][T13413] xt_CT: No such helper "snmp_trap" [ 868.656848][ T9] usb 5-1: USB disconnect, device number 27 [ 869.835049][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 870.363809][T11343] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 870.704176][T11343] usb 3-1: Using ep0 maxpacket: 8 [ 870.724612][T11343] usb 3-1: config 0 has no interfaces? [ 870.743796][T11343] usb 3-1: config 0 has no interfaces? [ 870.760672][T11343] usb 3-1: config 0 has no interfaces? [ 870.796001][T11343] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 870.806886][T11343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.815496][T11343] usb 3-1: Product: syz [ 870.821173][T11343] usb 3-1: Manufacturer: syz [ 870.915232][T11343] usb 3-1: SerialNumber: syz [ 870.974334][T11343] usb 3-1: config 0 descriptor?? [ 871.483820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.492849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.501854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.635096][T12641] usb 3-1: USB disconnect, device number 48 [ 871.841626][T13473] input: syz0 as /devices/virtual/input/input68 [ 871.858550][T13471] netlink: 'syz.3.2181': attribute type 4 has an invalid length. [ 871.927080][T13472] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2182'. [ 873.217352][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.257604][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.288185][T13495] 9pnet_fd: Insufficient options for proto=fd [ 873.364057][ T5914] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 873.391324][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 873.402277][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2190'. [ 873.411722][T13497] tipc: Enabling of bearer rejected, already enabled [ 873.483597][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 873.713438][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 873.761173][ T5914] usb 2-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 873.855225][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.897987][ T5914] usb 2-1: Product: syz [ 873.902270][ T5914] usb 2-1: Manufacturer: syz [ 873.917430][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 873.928132][ T5914] usb 2-1: SerialNumber: syz [ 873.943369][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 873.956282][ T5914] usb 2-1: config 0 descriptor?? [ 873.982269][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.006111][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.038367][T13492] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.059918][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 874.074554][T13502] 9pnet_fd: Insufficient options for proto=fd [ 874.113073][T13504] netlink: 'syz.2.2194': attribute type 4 has an invalid length. [ 874.171696][ T5914] dvb-usb: found a 'Pinnacle PCTV 282e' in warm state. [ 874.184694][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 874.244362][ T5914] dvbdev: DVB: registering new adapter (Pinnacle PCTV 282e) [ 874.257642][ T5914] usb 2-1: media controller created [ 874.279945][ T9] usb 5-1: USB disconnect, device number 28 [ 874.286274][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.440874][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 874.458506][ T5914] dvb-usb: no frontend was attached by 'Pinnacle PCTV 282e' [ 874.498129][ T976] Process accounting resumed [ 874.507449][ T976] Process accounting resumed [ 874.583436][ T5914] rc_core: IR keymap rc-dib0700-rc5 not found [ 874.602039][ T5914] Registered IR keymap rc-empty [ 874.620935][ T5914] dvb-usb: could not initialize remote control. [ 874.638867][ T5914] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected. [ 874.778442][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.785076][T13514] input: syz0 as /devices/virtual/input/input70 [ 874.865527][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 874.940519][ T5914] usb 2-1: USB disconnect, device number 37 [ 875.019783][T13529] 9pnet_fd: Insufficient options for proto=fd [ 875.109564][ T5914] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected. [ 875.704675][T13536] netlink: 'syz.2.2205': attribute type 4 has an invalid length. [ 875.847659][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 875.923432][ T976] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 875.950046][T13545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.226578][ T5883] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 877.243477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.252024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.260570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.637104][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 877.654518][ T976] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 877.672026][ T976] usb 1-1: can't read configurations, error -71 [ 877.730186][T13557] input: syz0 as /devices/virtual/input/input71 [ 877.747573][ T5883] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 877.780411][ T5883] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 877.800047][ T5883] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 877.817190][ T5883] usb 3-1: config 220 has no interface number 2 [ 877.826158][ T5883] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 877.944361][ T5883] usb 3-1: config 220 interface 0 has no altsetting 0 [ 877.955607][T13569] 9pnet_fd: Insufficient options for proto=fd [ 877.966874][T13571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2216'. [ 877.976996][T13571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2216'. [ 877.993447][ T5883] usb 3-1: config 220 interface 76 has no altsetting 0 [ 878.017888][ T5883] usb 3-1: config 220 interface 1 has no altsetting 0 [ 878.056777][ T5883] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 878.077651][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.087673][ T5883] usb 3-1: Product: syz [ 878.092712][ T5883] usb 3-1: Manufacturer: syz [ 878.098037][ T5883] usb 3-1: SerialNumber: syz [ 878.243962][T13579] netlink: 'syz.4.2218': attribute type 5 has an invalid length. [ 878.552201][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.562156][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.724273][ T5883] usb 3-1: selecting invalid altsetting 0 [ 878.743733][ T5883] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 878.750380][ T5883] usb 3-1: No valid video chain found. [ 878.817068][ T5883] usb 3-1: selecting invalid altsetting 0 [ 878.853488][ T5883] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 878.868215][T13586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'. [ 878.893643][ T5883] usb 3-1: USB disconnect, device number 49 [ 879.119162][T13586] vlan2: entered promiscuous mode [ 879.136746][T13586] ip6gretap0: entered promiscuous mode [ 879.977229][T13594] exFAT-fs (nullb0): invalid boot record signature [ 880.065308][T13594] exFAT-fs (nullb0): failed to read boot sector [ 880.108825][T13594] exFAT-fs (nullb0): failed to recognize exfat type [ 880.116822][T13596] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[13596] [ 880.145066][T13602] block nbd0: NBD_DISCONNECT [ 880.156014][T13602] block nbd0: Send disconnect failed -107 [ 880.162967][T13602] block nbd0: Disconnected due to user request. [ 880.170492][T13602] block nbd0: shutting down sockets [ 880.262704][T13603] input: syz0 as /devices/virtual/input/input72 [ 880.363355][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 880.513440][ T9] usb 5-1: device descriptor read/64, error -71 [ 880.519916][ T5883] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 880.673660][ T5883] usb 4-1: device descriptor read/64, error -71 [ 880.753380][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 880.883474][ T9] usb 5-1: device descriptor read/64, error -71 [ 880.925572][ T5883] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 880.993702][ T9] usb usb5-port1: attempt power cycle [ 881.063363][ T5883] usb 4-1: device descriptor read/64, error -71 [ 881.173835][ T5883] usb usb4-port1: attempt power cycle [ 881.334373][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 881.374992][ T9] usb 5-1: device descriptor read/8, error -71 [ 881.437901][T13625] netlink: 'syz.1.2232': attribute type 5 has an invalid length. [ 881.533594][ T5883] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 881.554989][ T5883] usb 4-1: device descriptor read/8, error -71 [ 881.653773][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 881.776244][ T9] usb 5-1: device descriptor read/8, error -71 [ 881.803996][ T5883] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 881.874267][ T5883] usb 4-1: device descriptor read/8, error -71 [ 881.886023][ T9] usb usb5-port1: unable to enumerate USB device [ 882.001279][T13635] wg1: entered promiscuous mode [ 882.004229][ T5883] usb usb4-port1: unable to enumerate USB device [ 882.006561][T13635] wg1: entered allmulticast mode [ 882.128167][T13641] netlink: 'syz.2.2239': attribute type 34 has an invalid length. [ 882.191513][T13643] lo: entered allmulticast mode [ 882.197988][T13643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.443524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.452126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.460755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.092134][T13651] batman_adv: batadv0: Adding interface: ip6gretap2 [ 883.101216][T13651] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.126821][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.133179][T13651] batman_adv: batadv0: Interface activated: ip6gretap2 [ 888.123453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.131775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.243435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.321031][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 896.332227][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 896.341422][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 896.362389][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 896.362510][T13670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 896.374371][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 896.384437][T13670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 896.387051][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 896.405739][ T9758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 896.415686][ T9758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 896.443472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.451943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.460363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.775863][T13668] chnl_net:caif_netlink_parms(): no params data found [ 896.849155][T13666] chnl_net:caif_netlink_parms(): no params data found [ 896.949875][T13668] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.957681][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.970372][T13668] bridge_slave_0: entered allmulticast mode [ 896.978152][T13668] bridge_slave_0: entered promiscuous mode [ 896.987159][T13668] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.994525][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.001814][T13668] bridge_slave_1: entered allmulticast mode [ 897.009676][T13668] bridge_slave_1: entered promiscuous mode [ 897.082690][T13668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.095465][T13668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.167006][T13666] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.179951][T13666] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.188065][T13666] bridge_slave_0: entered allmulticast mode [ 897.197502][T13666] bridge_slave_0: entered promiscuous mode [ 897.211943][T13668] team0: Port device team_slave_0 added [ 897.220018][T13666] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.228158][T13666] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.242677][T13666] bridge_slave_1: entered allmulticast mode [ 897.265757][T13666] bridge_slave_1: entered promiscuous mode [ 897.276818][T13668] team0: Port device team_slave_1 added [ 897.366211][T13668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.375458][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.403061][T13668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.435763][T13668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.442940][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.475817][T13668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.491183][T13666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.505875][T13666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.596904][T13666] team0: Port device team_slave_0 added [ 897.633121][T13668] hsr_slave_0: entered promiscuous mode [ 897.641029][T13668] hsr_slave_1: entered promiscuous mode [ 897.664808][T13668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.672597][T13668] Cannot create hsr debugfs directory [ 897.682873][T13666] team0: Port device team_slave_1 added [ 897.795590][T13666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.802729][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.831434][T13666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.887638][T13666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.895576][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.922520][T13666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.955381][ T9758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 897.967451][ T9758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 897.977406][ T9758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 897.985844][ T9758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 897.995534][ T9758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 898.044376][T13666] hsr_slave_0: entered promiscuous mode [ 898.050963][T13666] hsr_slave_1: entered promiscuous mode [ 898.058143][T13666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.066164][T13666] Cannot create hsr debugfs directory [ 898.443941][ T5140] Bluetooth: hci5: command tx timeout [ 898.533641][ T5140] Bluetooth: hci6: command tx timeout [ 898.620863][T13686] chnl_net:caif_netlink_parms(): no params data found [ 898.754845][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.762121][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.774066][T13686] bridge_slave_0: entered allmulticast mode [ 898.782244][T13686] bridge_slave_0: entered promiscuous mode [ 898.792290][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.799656][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.807377][T13686] bridge_slave_1: entered allmulticast mode [ 898.815618][T13686] bridge_slave_1: entered promiscuous mode [ 898.921078][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.939744][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.025697][T13686] team0: Port device team_slave_0 added [ 899.037335][T13686] team0: Port device team_slave_1 added [ 899.094824][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.113843][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.149570][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.174294][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.181394][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.239456][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.405075][ T9758] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 899.417363][ T9758] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 899.425921][ T9758] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 899.438737][ T9758] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 899.448064][ T9758] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 899.490541][T13686] hsr_slave_0: entered promiscuous mode [ 899.506749][T13686] hsr_slave_1: entered promiscuous mode [ 899.514768][T13686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.522383][T13686] Cannot create hsr debugfs directory [ 899.773146][ T9758] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 899.782541][ T9758] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 899.795970][ T9758] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 899.806507][ T9758] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 899.829763][ T9758] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 900.053309][ T9758] Bluetooth: hci7: command tx timeout [ 900.146590][T13697] chnl_net:caif_netlink_parms(): no params data found [ 900.270202][T13697] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.277787][T13697] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.286589][T13697] bridge_slave_0: entered allmulticast mode [ 900.294858][T13697] bridge_slave_0: entered promiscuous mode [ 900.308288][T13697] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.316366][T13697] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.324033][T13697] bridge_slave_1: entered allmulticast mode [ 900.332628][T13697] bridge_slave_1: entered promiscuous mode [ 900.392244][T13697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.412096][T13697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.500024][T13697] team0: Port device team_slave_0 added [ 900.515528][T13697] team0: Port device team_slave_1 added [ 900.523376][ T9758] Bluetooth: hci5: command tx timeout [ 900.576482][T13697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.583831][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.609969][ T9758] Bluetooth: hci6: command tx timeout [ 900.615552][T13697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.633355][T13699] chnl_net:caif_netlink_parms(): no params data found [ 900.652260][T13697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.662596][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.689741][T13697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.789461][T13697] hsr_slave_0: entered promiscuous mode [ 900.797020][T13697] hsr_slave_1: entered promiscuous mode [ 900.803824][T13697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 900.811439][T13697] Cannot create hsr debugfs directory [ 900.869316][T13699] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.876599][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.884061][T13699] bridge_slave_0: entered allmulticast mode [ 900.891322][T13699] bridge_slave_0: entered promiscuous mode [ 900.917269][T13699] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.925969][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.933443][T13699] bridge_slave_1: entered allmulticast mode [ 900.941601][T13699] bridge_slave_1: entered promiscuous mode [ 901.029384][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.050056][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.116223][T13699] team0: Port device team_slave_0 added [ 901.146776][T13699] team0: Port device team_slave_1 added [ 901.194508][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.201496][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.234122][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.247595][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.255246][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.282152][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.361315][T13699] hsr_slave_0: entered promiscuous mode [ 901.374918][T13699] hsr_slave_1: entered promiscuous mode [ 901.381109][T13699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.389632][T13699] Cannot create hsr debugfs directory [ 901.483834][ T9758] Bluetooth: hci8: command tx timeout [ 901.883850][ T9758] Bluetooth: hci9: command tx timeout [ 902.124015][ T9758] Bluetooth: hci7: command tx timeout [ 902.603502][ T9758] Bluetooth: hci5: command tx timeout [ 902.683848][ T9758] Bluetooth: hci6: command tx timeout [ 902.853460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.861774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.870111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.563483][ T9758] Bluetooth: hci8: command tx timeout [ 903.963858][ T9758] Bluetooth: hci9: command tx timeout [ 904.203791][ T5140] Bluetooth: hci7: command tx timeout [ 904.683561][ T5140] Bluetooth: hci5: command tx timeout [ 904.763557][ T5140] Bluetooth: hci6: command tx timeout [ 905.643361][ T5140] Bluetooth: hci8: command tx timeout [ 906.043782][ T5140] Bluetooth: hci9: command tx timeout [ 906.283739][ T5140] Bluetooth: hci7: command tx timeout [ 907.723692][ T5140] Bluetooth: hci8: command tx timeout [ 907.963776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.972199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.980552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.123818][ T5140] Bluetooth: hci9: command tx timeout [ 913.003498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.011969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.020346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.843493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.851934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.860353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.603477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.612302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.620623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.363590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.372008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.380436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.483482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.491897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.500337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.208145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.243531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.251824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.260207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.363478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.371738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.380093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.123501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.131913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.140299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.684975][ T9758] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 956.703445][ T9758] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 956.712546][ T9758] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 956.725277][ T9758] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 956.735460][ T9758] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 956.764464][ T5140] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 956.775010][ T5140] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 956.786173][ T5140] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 956.795279][ T5140] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 956.804067][ T5140] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 957.173154][T13716] chnl_net:caif_netlink_parms(): no params data found [ 957.243456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.251855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.260245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.279358][T13718] chnl_net:caif_netlink_parms(): no params data found [ 957.394984][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.402201][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.424077][T13716] bridge_slave_0: entered allmulticast mode [ 957.443826][T13716] bridge_slave_0: entered promiscuous mode [ 957.463673][T13716] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.470871][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.490737][T13716] bridge_slave_1: entered allmulticast mode [ 957.505446][T13716] bridge_slave_1: entered promiscuous mode [ 957.632820][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 957.645536][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 957.655857][ T5846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 957.671616][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.683652][ T5846] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 957.691831][ T5846] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 957.712485][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.805490][T13716] team0: Port device team_slave_0 added [ 957.818475][T13716] team0: Port device team_slave_1 added [ 957.824840][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.832040][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.840538][T13718] bridge_slave_0: entered allmulticast mode [ 957.849010][T13718] bridge_slave_0: entered promiscuous mode [ 957.859110][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.866563][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.874088][T13718] bridge_slave_1: entered allmulticast mode [ 957.882088][T13718] bridge_slave_1: entered promiscuous mode [ 957.974177][T13716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.982568][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.009413][T13716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.022956][T13716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.030168][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.056364][T13716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.075280][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.097974][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.187155][T13718] team0: Port device team_slave_0 added [ 958.203009][T13718] team0: Port device team_slave_1 added [ 958.257602][T13716] hsr_slave_0: entered promiscuous mode [ 958.264727][T13716] hsr_slave_1: entered promiscuous mode [ 958.270928][T13716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.279925][T13716] Cannot create hsr debugfs directory [ 958.366787][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.374449][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.403099][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.421899][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.429070][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.456012][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.578450][T13718] hsr_slave_0: entered promiscuous mode [ 958.585272][T13718] hsr_slave_1: entered promiscuous mode [ 958.592784][T13718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.601418][T13718] Cannot create hsr debugfs directory [ 958.763985][ T5846] Bluetooth: hci10: command tx timeout [ 958.845191][ T5846] Bluetooth: hci11: command tx timeout [ 958.859033][T13731] chnl_net:caif_netlink_parms(): no params data found [ 959.068784][T13731] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.076235][T13731] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.083898][T13731] bridge_slave_0: entered allmulticast mode [ 959.091872][T13731] bridge_slave_0: entered promiscuous mode [ 959.124280][T13731] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.133874][T13731] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.141193][T13731] bridge_slave_1: entered allmulticast mode [ 959.149324][T13731] bridge_slave_1: entered promiscuous mode [ 959.204414][T13731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.216664][T13731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.269101][T13731] team0: Port device team_slave_0 added [ 959.279645][T13731] team0: Port device team_slave_1 added [ 959.373737][T13731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.382600][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.443514][T13731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.465740][T13731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.472760][T13731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.543568][T13731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.723760][ T5846] Bluetooth: hci12: command tx timeout [ 959.727863][T13731] hsr_slave_0: entered promiscuous mode [ 959.741703][T13731] hsr_slave_1: entered promiscuous mode [ 959.765955][T13731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.794401][T13731] Cannot create hsr debugfs directory [ 959.851091][ T5140] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 959.861779][ T5140] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 959.871071][ T5140] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 959.880021][ T5140] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 959.888071][ T5140] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 960.068607][ T5140] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 960.080805][ T5140] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 960.099741][ T5140] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 960.108312][ T5140] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 960.117814][ T5140] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 960.657564][T13744] chnl_net:caif_netlink_parms(): no params data found [ 960.729578][T13746] chnl_net:caif_netlink_parms(): no params data found [ 960.844506][ T5140] Bluetooth: hci10: command tx timeout [ 960.933603][ T5140] Bluetooth: hci11: command tx timeout [ 960.942393][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.950934][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.959018][T13744] bridge_slave_0: entered allmulticast mode [ 960.967024][T13744] bridge_slave_0: entered promiscuous mode [ 961.007684][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.015305][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.022593][T13744] bridge_slave_1: entered allmulticast mode [ 961.032166][T13744] bridge_slave_1: entered promiscuous mode [ 961.104453][T13746] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.111672][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.119706][T13746] bridge_slave_0: entered allmulticast mode [ 961.128009][T13746] bridge_slave_0: entered promiscuous mode [ 961.138683][T13746] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.145999][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.154797][T13746] bridge_slave_1: entered allmulticast mode [ 961.162793][T13746] bridge_slave_1: entered promiscuous mode [ 961.195382][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.241771][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.298888][T13746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.317985][T13746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.406389][T13744] team0: Port device team_slave_0 added [ 961.420533][T13746] team0: Port device team_slave_0 added [ 961.430522][T13746] team0: Port device team_slave_1 added [ 961.472765][T13744] team0: Port device team_slave_1 added [ 961.538830][T13746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.546416][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.582073][T13746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.594895][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.601969][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.628375][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.651398][T13746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.658553][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.686293][T13746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.706732][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.713848][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.740154][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.813528][ T5140] Bluetooth: hci12: command tx timeout [ 961.844732][T13746] hsr_slave_0: entered promiscuous mode [ 961.851305][T13746] hsr_slave_1: entered promiscuous mode [ 961.858658][T13746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.866715][T13746] Cannot create hsr debugfs directory [ 961.901610][T13744] hsr_slave_0: entered promiscuous mode [ 961.908951][T13744] hsr_slave_1: entered promiscuous mode [ 961.915787][T13744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.923705][T13744] Cannot create hsr debugfs directory [ 961.963648][ T5846] Bluetooth: hci13: command tx timeout [ 962.203662][ T5846] Bluetooth: hci14: command tx timeout [ 962.284870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.293462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.301778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.923512][ T5846] Bluetooth: hci10: command tx timeout [ 963.003561][ T5846] Bluetooth: hci11: command tx timeout [ 963.883565][ T5846] Bluetooth: hci12: command tx timeout [ 964.043562][ T5846] Bluetooth: hci13: command tx timeout [ 964.283399][ T5846] Bluetooth: hci14: command tx timeout [ 965.003857][ T5846] Bluetooth: hci10: command tx timeout [ 965.083478][ T5846] Bluetooth: hci11: command tx timeout [ 965.973451][ T5846] Bluetooth: hci12: command tx timeout [ 966.123514][ T5846] Bluetooth: hci13: command tx timeout [ 966.363805][ T5846] Bluetooth: hci14: command tx timeout [ 967.323495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.331927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.340327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.203585][ T5846] Bluetooth: hci13: command tx timeout [ 968.443549][ T5846] Bluetooth: hci14: command tx timeout [ 972.603501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.611883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.620287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.363511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.371923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.380362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.123691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.132099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.140440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.163493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.172018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.180406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.373770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.382110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.390465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.649624][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.123576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.131922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.140239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.523449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.531781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.643548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.651938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.493425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.501718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.268698][ T5140] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1017.284280][ T5140] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1017.293780][ T5140] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1017.313984][ T5140] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1017.323968][ T5140] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1017.400210][ T5140] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1017.411261][ T5140] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1017.420675][ T5140] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1017.430308][ T5140] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1017.439334][ T5140] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1017.756563][T13763] chnl_net:caif_netlink_parms(): no params data found [ 1017.817320][T13765] chnl_net:caif_netlink_parms(): no params data found [ 1018.040572][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.062452][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.071407][T13763] bridge_slave_0: entered allmulticast mode [ 1018.080191][T13763] bridge_slave_0: entered promiscuous mode [ 1018.107828][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.115427][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.122761][T13763] bridge_slave_1: entered allmulticast mode [ 1018.131933][T13763] bridge_slave_1: entered promiscuous mode [ 1018.162303][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.172056][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.183903][T13765] bridge_slave_0: entered allmulticast mode [ 1018.192153][T13765] bridge_slave_0: entered promiscuous mode [ 1018.273545][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.280744][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.291679][T13765] bridge_slave_1: entered allmulticast mode [ 1018.300073][T13765] bridge_slave_1: entered promiscuous mode [ 1018.310928][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.341904][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.407992][T13765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.446374][T13765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.481828][T13763] team0: Port device team_slave_0 added [ 1018.510416][T13763] team0: Port device team_slave_1 added [ 1018.535795][T13765] team0: Port device team_slave_0 added [ 1018.543984][T13670] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1018.554854][T13670] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1018.563985][T13670] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1018.574356][T13670] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1018.586130][T13670] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1018.635089][T13765] team0: Port device team_slave_1 added [ 1018.652547][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.660111][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.687732][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.701886][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.709065][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.735489][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.845022][T13765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.852051][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.880155][T13765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.900458][T13763] hsr_slave_0: entered promiscuous mode [ 1018.908255][T13763] hsr_slave_1: entered promiscuous mode [ 1018.915468][T13763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.924036][T13763] Cannot create hsr debugfs directory [ 1018.930704][T13765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.946298][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.977777][T13765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.101096][T13765] hsr_slave_0: entered promiscuous mode [ 1019.110586][T13765] hsr_slave_1: entered promiscuous mode [ 1019.118421][T13765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.126327][T13765] Cannot create hsr debugfs directory [ 1019.403879][T13670] Bluetooth: hci15: command tx timeout [ 1019.485115][T13671] Bluetooth: hci16: command tx timeout [ 1019.794258][T13670] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1019.805657][T13670] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1019.820408][T13670] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1019.834253][T13670] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1019.856583][T13670] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1019.895847][T13782] chnl_net:caif_netlink_parms(): no params data found [ 1019.973467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.981808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.990210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.182524][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.190744][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.198877][T13782] bridge_slave_0: entered allmulticast mode [ 1020.208194][T13671] Bluetooth: hci6: command 0x0406 tx timeout [ 1020.208215][T13670] Bluetooth: hci5: command 0x0406 tx timeout [ 1020.220401][T13670] Bluetooth: hci7: command 0x0406 tx timeout [ 1020.227677][T13782] bridge_slave_0: entered promiscuous mode [ 1020.238594][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.246614][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.254389][T13782] bridge_slave_1: entered allmulticast mode [ 1020.262355][T13782] bridge_slave_1: entered promiscuous mode [ 1020.331728][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.362357][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.456231][T13782] team0: Port device team_slave_0 added [ 1020.505239][T13782] team0: Port device team_slave_1 added [ 1020.637183][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.653301][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.684054][ T9758] Bluetooth: hci17: command tx timeout [ 1020.700456][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.773020][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.780391][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.807781][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.866798][ T5846] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1020.876887][ T5846] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1020.886567][ T5846] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1020.905018][ T5846] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1020.915384][ T5846] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1021.031470][T13782] hsr_slave_0: entered promiscuous mode [ 1021.040346][T13782] hsr_slave_1: entered promiscuous mode [ 1021.047398][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.056563][T13782] Cannot create hsr debugfs directory [ 1021.145881][T13789] chnl_net:caif_netlink_parms(): no params data found [ 1021.429186][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.436706][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.444477][T13789] bridge_slave_0: entered allmulticast mode [ 1021.452558][T13789] bridge_slave_0: entered promiscuous mode [ 1021.487716][ T9758] Bluetooth: hci15: command tx timeout [ 1021.508535][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.516824][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.524627][T13789] bridge_slave_1: entered allmulticast mode [ 1021.532694][T13789] bridge_slave_1: entered promiscuous mode [ 1021.563881][ T9758] Bluetooth: hci16: command tx timeout [ 1021.632510][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.666289][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.754961][T13789] team0: Port device team_slave_0 added [ 1021.776129][T13789] team0: Port device team_slave_1 added [ 1021.852854][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.860979][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.891616][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.962720][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.970249][ T9758] Bluetooth: hci18: command tx timeout [ 1021.981164][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.008065][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.152227][T13798] chnl_net:caif_netlink_parms(): no params data found [ 1022.175895][T13789] hsr_slave_0: entered promiscuous mode [ 1022.183546][T13789] hsr_slave_1: entered promiscuous mode [ 1022.190458][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.198205][T13789] Cannot create hsr debugfs directory [ 1022.516987][T13798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.524696][T13798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.532034][T13798] bridge_slave_0: entered allmulticast mode [ 1022.540673][T13798] bridge_slave_0: entered promiscuous mode [ 1022.549950][T13798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.558010][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.566012][T13798] bridge_slave_1: entered allmulticast mode [ 1022.574811][T13798] bridge_slave_1: entered promiscuous mode [ 1022.669512][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.685078][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.764133][ T9758] Bluetooth: hci17: command tx timeout [ 1022.786127][T13798] team0: Port device team_slave_0 added [ 1022.807636][T13798] team0: Port device team_slave_1 added [ 1022.858562][T13798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.866034][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.892788][T13798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.909832][T13798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.917386][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.946615][T13798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.004305][ T9758] Bluetooth: hci19: command tx timeout [ 1023.065615][T13798] hsr_slave_0: entered promiscuous mode [ 1023.072635][T13798] hsr_slave_1: entered promiscuous mode [ 1023.080583][T13798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.088849][T13798] Cannot create hsr debugfs directory [ 1023.563677][ T9758] Bluetooth: hci15: command tx timeout [ 1023.644854][ T9758] Bluetooth: hci16: command tx timeout [ 1024.045920][ T9758] Bluetooth: hci18: command tx timeout [ 1024.533875][ T31] INFO: task syz.0.2226:13602 blocked for more than 143 seconds. [ 1024.541967][ T31] Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1024.550313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1024.559926][ T31] task:syz.0.2226 state:D stack:22024 pid:13602 tgid:13600 ppid:5827 task_flags:0x400140 flags:0x00004004 [ 1024.572027][ T31] Call Trace: [ 1024.575421][ T31] [ 1024.578384][ T31] __schedule+0x1b33/0x51f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1024.582938][ T31] ? schedule+0x163/0x360 [ 1024.587576][ T31] ? __pfx___schedule+0x10/0x10 [ 1024.592510][ T31] ? schedule+0x90/0x360 [ 1024.596971][ T31] ? schedule+0x90/0x360 [ 1024.601260][ T31] schedule+0x163/0x360 [ 1024.612210][ T31] schedule_timeout+0xb1/0x2b0 [ 1024.625081][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1024.630565][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1024.636383][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1024.665069][ T31] ? wait_for_completion+0x2d4/0x600 [ 1024.670546][ T31] wait_for_completion+0x32f/0x600 [ 1024.711694][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1024.720772][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1024.726610][ T31] ? flush_workqueue_prep_pwqs+0x4c4/0x530 [ 1024.732509][ T31] ? check_flush_dependency+0x88/0x3c0 [ 1024.738704][ T31] ? __flush_workqueue+0x508/0x1280 [ 1024.745390][ T31] __flush_workqueue+0x579/0x1280 [ 1024.750474][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 1024.756951][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1024.762186][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1024.768740][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1024.775370][ T31] ? __wake_up_common_lock+0x18c/0x1e0 [ 1024.780914][ T31] nbd_disconnect_and_put+0xac/0x2d0 [ 1024.787843][ T31] nbd_genl_disconnect+0x4a2/0x7a0 [ 1024.793015][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1024.799169][ T31] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1024.805865][ T31] genl_rcv_msg+0xb38/0xf00 [ 1024.810418][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1024.816140][ T31] ? stack_trace_save+0x11a/0x1d0 [ 1024.821201][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1024.827142][ T31] ? stack_depot_save_flags+0x44/0x940 [ 1024.832648][ T31] ? stack_trace_snprint+0x61/0xf0 [ 1024.838315][ T31] ? __lock_acquire+0xad5/0xd80 [ 1024.844668][ T9758] Bluetooth: hci17: command tx timeout [ 1024.850276][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1024.856036][ T31] netlink_rcv_skb+0x208/0x480 [ 1024.860838][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1024.866006][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.871355][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.876668][ T31] genl_rcv+0x28/0x40 [ 1024.880706][ T31] netlink_unicast+0x7f8/0x9a0 [ 1024.885690][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1024.891018][ T31] ? skb_put+0x114/0x1f0 [ 1024.895472][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 1024.900289][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.906150][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.911473][ T31] __sock_sendmsg+0x221/0x270 [ 1024.916468][ T31] ____sys_sendmsg+0x523/0x860 [ 1024.921289][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.926691][ T31] ? __fget_files+0x2a/0x420 [ 1024.931315][ T31] ? __fget_files+0x2a/0x420 [ 1024.936008][ T31] __sys_sendmsg+0x271/0x360 [ 1024.940637][ T31] ? __pfx_futex_wake+0x10/0x10 [ 1024.946663][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1024.951907][ T31] ? do_syscall_64+0xb6/0x210 [ 1024.956751][ T31] do_syscall_64+0xf3/0x210 [ 1024.961297][ T31] ? clear_bhb_loop+0x45/0xa0 [ 1024.966104][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.972041][ T31] RIP: 0033:0x7f1614f8e169 [ 1024.976568][ T31] RSP: 002b:00007f1615e92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.985051][ T31] RAX: ffffffffffffffda RBX: 00007f16151b5fa0 RCX: 00007f1614f8e169 [ 1024.993054][ T31] RDX: 0000000020000004 RSI: 00002000000001c0 RDI: 0000000000000012 [ 1025.002526][ T31] RBP: 00007f1615010a68 R08: 0000000000000000 R09: 0000000000000000 [ 1025.011288][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.019672][ T31] R13: 0000000000000000 R14: 00007f16151b5fa0 R15: 00007ffd5f7d41d8 [ 1025.028057][ T31] [ 1025.031186][ T31] INFO: task syz.3.2228:13608 blocked for more than 143 seconds. [ 1025.039429][ T31] Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 [ 1025.050555][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.059626][ T31] task:syz.3.2228 state:D stack:27728 pid:13608 tgid:13606 ppid:5834 task_flags:0x400140 flags:0x00000004 [ 1025.071959][ T31] Call Trace: [ 1025.075637][ T31] [ 1025.078611][ T31] __schedule+0x1b33/0x51f0 [ 1025.083559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.083848][ T31] ? __lock_acquire+0xad5/0xd80 [ 1025.091913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.096826][ T9758] Bluetooth: hci19: command tx timeout [ 1025.112523][ T31] ? schedule+0x163/0x360 [ 1025.117294][ T31] ? __pfx___schedule+0x10/0x10 [ 1025.122223][ T31] ? schedule+0x90/0x360 [ 1025.127043][ T31] ? schedule+0x90/0x360 [ 1025.131350][ T31] schedule+0x163/0x360 [ 1025.136068][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1025.140881][ T31] schedule_preempt_disabled+0x13/0x30 [ 1025.146895][ T31] __mutex_lock+0x805/0x10c0 [ 1025.152994][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 1025.158319][ T31] ? genl_rcv_msg+0x125/0xf00 [ 1025.163067][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1025.168925][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1025.175533][ T31] ? kernel_text_address+0xa7/0xe0 [ 1025.180689][ T31] ? __kernel_text_address+0xd/0x40 [ 1025.186379][ T31] ? radix_tree_lookup+0x23b/0x290 [ 1025.191544][ T31] genl_rcv_msg+0x125/0xf00 [ 1025.196740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.201819][ T31] ? stack_trace_save+0x11a/0x1d0 [ 1025.207196][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1025.212611][ T31] ? stack_depot_save_flags+0x44/0x940 [ 1025.219923][ T31] ? stack_trace_snprint+0x61/0xf0 [ 1025.225422][ T31] ? __lock_acquire+0xad5/0xd80 [ 1025.230341][ T31] netlink_rcv_skb+0x208/0x480 [ 1025.235604][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.240681][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1025.246644][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1025.251889][ T31] genl_rcv+0x28/0x40 [ 1025.257603][ T31] netlink_unicast+0x7f8/0x9a0 [ 1025.262422][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1025.268284][ T31] ? skb_put+0x114/0x1f0 [ 1025.272655][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 1025.277939][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.283693][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.289026][ T31] __sock_sendmsg+0x221/0x270 [ 1025.294170][ T31] __sys_sendto+0x365/0x4c0 [ 1025.298721][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1025.304256][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 1025.309530][ T31] __x64_sys_sendto+0xde/0x100 [ 1025.314809][ T31] do_syscall_64+0xf3/0x210 [ 1025.319442][ T31] ? clear_bhb_loop+0x45/0xa0 [ 1025.324856][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.329839][ T9758] Bluetooth: hci9: command 0x0406 tx timeout [ 1025.330799][T13670] Bluetooth: hci8: command 0x0406 tx timeout [ 1025.343502][ T31] RIP: 0033:0x7fc55038fffc [ 1025.347962][ T31] RSP: 002b:00007fc551291ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1025.358637][ T31] RAX: ffffffffffffffda RBX: 00007fc551291fc0 RCX: 00007fc55038fffc [ 1025.367072][ T31] RDX: 0000000000000028 RSI: 00007fc551292010 RDI: 0000000000000004 [ 1025.375512][ T31] RBP: 0000000000000000 R08: 00007fc551291f14 R09: 000000000000000c [ 1025.383960][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1025.391978][ T31] R13: 00007fc551291f68 R14: 00007fc551292010 R15: 0000000000000000 [ 1025.400503][ T31] [ 1025.404176][ T31] [ 1025.404176][ T31] Showing all locks held in the system: [ 1025.411956][ T31] 1 lock held by khungtaskd/31: [ 1025.417546][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 1025.428608][ T31] 2 locks held by kworker/u9:0/55: [ 1025.434272][ T31] #0: ffff8880259b3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1025.446015][ T31] #1: ffffc9000100fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1025.459523][ T31] 2 locks held by getty/5584: [ 1025.469017][ T31] #0: ffff88803686a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1025.479290][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 1025.493203][ T31] 7 locks held by kworker/u9:9/5846: [ 1025.498556][ T31] #0: ffff88807cabb948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1025.509988][ T31] #1: ffffc90004ec7c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1025.523514][ T31] #2: ffff8880380c8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1025.533524][ T31] #3: ffff8880380c8078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1f1/0xeb0 [ 1025.543606][ T31] #4: ffffffff90251468 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x15d/0x300 [ 1025.553762][ T31] #5: ffff88807a923b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 1025.563642][ T31] #6: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 1025.574818][ T31] 7 locks held by kworker/u8:13/5966: [ 1025.580230][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1025.592088][ T31] #1: ffffc9000b2dfc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1025.605215][ T31] #2: ffff88805d9b0250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb50 [ 1025.616353][ T31] #3: ffffffff9a9d7de0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x190/0x5c0 [ 1025.626925][ T31] #4: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xb8/0x23b0 [ 1025.636768][ T31] #5: ffff8880b873df00 (&c->lock){-.-.}-{3:3}, at: put_cpu_partial+0x72/0x250 [ 1025.646086][ T31] #6: ffff88801b07b078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x1bd/0x310 [ 1025.657181][ T5140] Bluetooth: hci15: command tx timeout [ 1025.663255][ T31] 3 locks held by syz.0.2226/13602: [ 1025.668493][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.676947][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.686180][ T31] #2: ffff8880259a7998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x30/0x2d0 [ 1025.696825][ T31] 2 locks held by syz.3.2228/13608: [ 1025.702052][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.710555][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.719785][ T31] 2 locks held by syz.1.2236/13634: [ 1025.726436][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.734978][ T5140] Bluetooth: hci16: command tx timeout [ 1025.740532][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.749735][ T31] 2 locks held by syz.1.2236/13636: [ 1025.755019][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.763620][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.772782][ T31] 2 locks held by syz.1.2236/13640: [ 1025.778175][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.786570][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.795695][ T31] 2 locks held by syz.1.2236/13642: [ 1025.800908][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.810191][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.819357][ T31] 2 locks held by syz.1.2236/13644: [ 1025.824739][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.832988][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.842091][ T31] 2 locks held by syz.4.2243/13654: [ 1025.847414][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.855861][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.864982][ T31] 2 locks held by syz.2.2244/13656: [ 1025.870338][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.878932][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.888791][ T31] 2 locks held by syz.2.2244/13658: [ 1025.894290][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.902586][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.911745][ T31] 2 locks held by syz-executor/13666: [ 1025.917328][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.925660][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.934867][ T31] 2 locks held by syz-executor/13668: [ 1025.940266][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.948882][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.958039][ T31] 2 locks held by syz-executor/13686: [ 1025.963646][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.972069][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1025.981230][ T31] 2 locks held by syz-executor/13697: [ 1025.987094][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1025.995492][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.004720][ T31] 2 locks held by syz-executor/13699: [ 1026.010108][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.018428][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.027557][ T31] 2 locks held by syz-executor/13716: [ 1026.032937][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.041294][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.050671][ T31] 2 locks held by syz-executor/13718: [ 1026.056159][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.064573][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.073831][ T31] 2 locks held by syz-executor/13731: [ 1026.079235][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.087593][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.096969][ T31] 2 locks held by syz-executor/13744: [ 1026.102487][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.110849][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.120067][ T31] 2 locks held by syz-executor/13746: [ 1026.125700][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.134260][ T5140] Bluetooth: hci18: command tx timeout [ 1026.139862][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.149058][ T31] 2 locks held by syz-executor/13763: [ 1026.154617][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.162922][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.172083][ T31] 2 locks held by syz-executor/13765: [ 1026.177755][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.186157][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.195326][ T31] 2 locks held by syz-executor/13782: [ 1026.200739][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.210408][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.219609][ T31] 2 locks held by syz-executor/13789: [ 1026.225159][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.233634][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.242705][ T31] 2 locks held by syz-executor/13798: [ 1026.248288][ T31] #0: ffffffff9014f790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1026.256669][ T31] #1: ffffffff9014f648 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 1026.268784][ T31] [ 1026.271162][ T31] ============================================= [ 1026.271162][ T31] [ 1026.279914][ T31] NMI backtrace for cpu 0 [ 1026.279933][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1026.279959][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1026.279973][ T31] Call Trace: [ 1026.279981][ T31] [ 1026.279992][ T31] dump_stack_lvl+0x241/0x360 [ 1026.280028][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.280058][ T31] ? __pfx__printk+0x10/0x10 [ 1026.280098][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 1026.280136][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1026.280163][ T31] ? _printk+0xd5/0x120 [ 1026.280190][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1026.280216][ T31] ? __pfx__printk+0x10/0x10 [ 1026.280247][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.280281][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1026.280315][ T31] watchdog+0x1058/0x10a0 [ 1026.280356][ T31] ? watchdog+0x1ea/0x10a0 [ 1026.280386][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.280411][ T31] kthread+0x7b7/0x940 [ 1026.280435][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.280459][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280479][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280500][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280522][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280544][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1026.280574][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1026.280594][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280616][ T31] ret_from_fork+0x4b/0x80 [ 1026.280635][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.280657][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.280706][ T31] [ 1026.280714][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1026.442790][ C1] NMI backtrace for cpu 1 [ 1026.442808][ C1] CPU: 1 UID: 0 PID: 2896 Comm: kworker/u8:6 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1026.442828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1026.442841][ C1] Workqueue: bat_events batadv_nc_worker [ 1026.442870][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 1026.442891][ C1] Code: ff f4 e8 a3 ca 01 f5 eb a9 e8 5c e0 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 e2 a0 8c e9 bd fe ff ff cc cc cc [ 1026.442905][ C1] RSP: 0018:ffffc9000b727928 EFLAGS: 00000046 [ 1026.442936][ C1] RAX: eb5a65c3d50a3195 RBX: ffff8880308dbc00 RCX: 0000000000000006 [ 1026.442950][ C1] RDX: 0000000000000006 RSI: ffffffff8e4c80af RDI: ffffffff8e635648 [ 1026.442962][ C1] RBP: ffffc9000b727a10 R08: ffffffff905ebb77 R09: 1ffffffff20bd76e [ 1026.442975][ C1] R10: dffffc0000000000 R11: fffffbfff20bd76f R12: 1ffff920016e4f30 [ 1026.442989][ C1] R13: dffffc0000000000 R14: ffffffff93651020 R15: ffffffff8183d708 [ 1026.443002][ C1] FS: 0000000000000000(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000 [ 1026.443016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.443028][ C1] CR2: 0000555be4730600 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 1026.443044][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.443055][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1026.443067][ C1] Call Trace: [ 1026.443074][ C1] [ 1026.443080][ C1] lockdep_hardirqs_on+0x9d/0x150 [ 1026.443101][ C1] __local_bh_enable_ip+0x168/0x200 [ 1026.443128][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 1026.443160][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1026.443191][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 1026.443223][ C1] batadv_nc_purge_paths+0x312/0x3b0 [ 1026.443260][ C1] batadv_nc_worker+0x365/0x610 [ 1026.443291][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 1026.443324][ C1] process_scheduled_works+0xac3/0x18e0 [ 1026.443366][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1026.443399][ C1] ? assign_work+0x367/0x3d0 [ 1026.443428][ C1] worker_thread+0x870/0xd50 [ 1026.443484][ C1] ? __kthread_parkme+0x1a8/0x200 [ 1026.443516][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1026.443545][ C1] kthread+0x7b7/0x940 [ 1026.443567][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1026.443596][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443614][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443634][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443652][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443670][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1026.443695][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 1026.443711][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443730][ C1] ret_from_fork+0x4b/0x80 [ 1026.443745][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.443762][ C1] ret_from_fork_asm+0x1a/0x30 [ 1026.443798][ C1] [ 1026.444959][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1026.444980][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full) [ 1026.445008][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1026.445024][ T31] Call Trace: [ 1026.445033][ T31] [ 1026.445044][ T31] dump_stack_lvl+0x241/0x360 [ 1026.445088][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.445119][ T31] ? __pfx__printk+0x10/0x10 [ 1026.445156][ T31] ? vscnprintf+0x5d/0x90 [ 1026.445189][ T31] panic+0x349/0x880 [ 1026.445216][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1026.445252][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1026.445286][ T31] ? __pfx_panic+0x10/0x10 [ 1026.445311][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1026.445355][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1026.445381][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1026.445411][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1026.445446][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1026.445481][ T31] watchdog+0x1097/0x10a0 [ 1026.445511][ T31] ? watchdog+0x1ea/0x10a0 [ 1026.445545][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.445572][ T31] kthread+0x7b7/0x940 [ 1026.445599][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.445627][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445649][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445672][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445696][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1026.445750][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1026.445772][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445798][ T31] ret_from_fork+0x4b/0x80 [ 1026.445818][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.445841][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.445892][ T31] [ 1026.901418][ T31] Kernel Offset: disabled [ 1026.905749][ T31] Rebooting in 86400 seconds..