last executing test programs: 24m47.298688095s ago: executing program 32 (id=266): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 23m43.890915699s ago: executing program 33 (id=873): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 22m35.238295801s ago: executing program 34 (id=1551): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 22m31.657657364s ago: executing program 35 (id=1580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) sendmmsg$alg(r1, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}, 0x260d}], 0x1, 0x10000, 0x0) 21m22.044958292s ago: executing program 36 (id=2211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x10, 0x2e, 0x1000, 0x4}, 0x9c) 20m24.249986809s ago: executing program 37 (id=2781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x56f5d276454fa52b}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x200}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 20m3.952909662s ago: executing program 38 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 19m25.772096155s ago: executing program 39 (id=3202): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 18m26.133477017s ago: executing program 40 (id=3700): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x200, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 16m42.07388415s ago: executing program 41 (id=4495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0x6e, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x4, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x1, 0x7, 0xfe, 0x7, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x0, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x81, 0x0, 0xa3, 0xf7, 0x82}, {0xfec00000, 0xffffffff, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xffff1000, 0xb000, 0xe, 0x25, 0x4, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x8}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x42024, 0xb, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) 14m16.17362673s ago: executing program 42 (id=5400): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2d0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x200, 0x378, 0x378, 0x200, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffffff], 'ipvlan1\x00', 'veth1\x00', {0xff}, {}, 0x5c, 0x9, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x9, 0x401, 0x81, 'snmp_trap\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 12m48.103228211s ago: executing program 43 (id=5876): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m43.268920317s ago: executing program 44 (id=5896): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r2 = dup(r1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[], 0x258) read$FUSE(r2, &(0x7f0000002a00)={0x2020}, 0x2020) 11m48.197073022s ago: executing program 45 (id=6196): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)={0x29, 0x4, 0x0, {0x1, 0xfff, 0x1, 0x0, [0x0]}}, 0x29) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0xb, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) 7m3.633703984s ago: executing program 46 (id=7348): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509685636", 0x10}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0xf5, 0x10000000, 0xa02}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 6m21.828535445s ago: executing program 6 (id=7500): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x0) sendmsg(r2, 0x0, 0x40) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x5, 0xb0, 0xf5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdd, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x8000, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xaa, 0x8, {0x7, 0x25, 0x1, 0xc, 0xc, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0xa5, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xf, 0x2e, 0x6d}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe0, 0x9, 0x81, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x900}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x3, 0x7, 0x7, 0x8, 0x2}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x409}}, {0x56, &(0x7f0000000880)=@string={0x56, 0x3, "265d4346950f0a4375b1aa9dec7bb3a2828a731daa3d032dfbc6714d92d5c968ae4c7a9b2062fc5c3de63676926118a3584cc7c1d0570b446295273d5aa7f3db2edd7e8837b1a624d533e57c41a345741057e8fd"}}]}) io_uring_setup(0x3baa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000e40)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 6m20.694578492s ago: executing program 8 (id=7507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050004000000200000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340001010101010100001400490002ac0f0002ac0f"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="01002abd7000ffdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="74007a8008000400080000001c000200a83ffdeb565b2e2b83424fd826e229fa942772e514705b7a14000200d8032c3b1ad9edc751bc9eeef4d830cb14000100d079e035a50ac8a44de5a7c47e9bde2f080004000900000008000400020000000c0003"], 0x90}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 6m20.213693816s ago: executing program 6 (id=7508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x98, 0x0, 0x138, 0x98, 0x210, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x71}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x22, 0x31, 0x4, 0x1d, 0x4, 0x38, 0x3c, 0x1c, 0x18, 0x11, 0x1b, 0x28, 0x3, 0x1e, 0xe, 0x1], 0x2, 0x7, 0x382}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) io_uring_setup(0x6d87, 0x0) 6m20.193066247s ago: executing program 8 (id=7509): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x0, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m19.757815262s ago: executing program 6 (id=7511): socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000040)='./control\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r0, 0x0, 0x0) 6m19.459540205s ago: executing program 6 (id=7513): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) 6m18.401268327s ago: executing program 6 (id=7517): socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r1, 0x0, 0x0) 6m17.776505825s ago: executing program 6 (id=7519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r0, 0x0) 6m16.763949157s ago: executing program 47 (id=7519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x2108, r4}, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r0, 0x0) 6m16.716245123s ago: executing program 8 (id=7521): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, 0x0, 0x8c) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x28000600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000b6c0f2cf0000000080000000000000", @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0000000000000000000000005bb7f81cea1d1200000000000000000000200000020020", @ANYRESHEX, @ANYRESHEX=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r6, 0x0, 0x0, 0x4}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x40) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000016000b63d25a80648c2594f9222406852635559fd074b2df65d8bc36f92f1e7807a9a3ffaadc739028d46cbf", 0x30}], 0x1}, 0x0) 6m14.986448912s ago: executing program 7 (id=7526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 6m14.63523143s ago: executing program 8 (id=7527): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) 6m13.650119311s ago: executing program 8 (id=7529): socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r1, 0x0, 0x0) 6m7.075458123s ago: executing program 7 (id=7531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 6m6.762507066s ago: executing program 8 (id=7533): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1c3, 0x0, 0x0, 0x38, 0x16}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r3, r4, 0x3, 0x1, 0x3fff}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x4, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) 6m6.454197498s ago: executing program 48 (id=7533): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1c3, 0x0, 0x0, 0x38, 0x16}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r3, r4, 0x3, 0x1, 0x3fff}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x4, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) 6m6.420965534s ago: executing program 7 (id=7537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff2}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xf, 0xd, 0x6, 0xb, 0xe, 0x4, 0x10, 0xd, 0xf, 0x1, 0x2, 0xf, 0xf, 0x2, 0x4, 0xf], 0x1, [0x8, 0x5, 0x2, 0xc25, 0x6, 0x7, 0x7, 0x8, 0xffff, 0x81, 0x5, 0x6, 0xa6f3, 0x1, 0x4000, 0x1], [0x7, 0x3, 0x0, 0x4f0, 0x800, 0xffff, 0xffff, 0x23, 0xa9, 0x5, 0x9, 0x40, 0x101, 0xff, 0x81, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6m5.743655988s ago: executing program 7 (id=7538): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) 6m4.775226564s ago: executing program 7 (id=7546): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x4, 0x10, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x140}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m4.283209367s ago: executing program 7 (id=7547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 6m3.920890292s ago: executing program 49 (id=7547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m23.082155509s ago: executing program 4 (id=8195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 1m22.658721198s ago: executing program 4 (id=8197): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 1m18.383104052s ago: executing program 4 (id=8203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.826469574s ago: executing program 4 (id=8205): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m17.416813517s ago: executing program 4 (id=8206): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m16.772542809s ago: executing program 9 (id=8208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m16.414262456s ago: executing program 4 (id=8210): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89001) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m15.35811232s ago: executing program 50 (id=8210): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89001) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m15.263213801s ago: executing program 9 (id=8212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f021}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m12.268606095s ago: executing program 9 (id=8215): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) unshare(0x2a020480) r4 = socket$netlink(0x10, 0x3, 0x0) pwritev(r4, 0x0, 0x0, 0x1, 0x5) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @pic={0x7, 0x5, 0xb, 0xd, 0xb8, 0x8, 0x6, 0x8, 0x9, 0x6, 0x3, 0x7, 0x3e, 0x6, 0x5, 0x10}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfff9}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x3a, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x6, 0x1, 0x0, 0x64f, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x1, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) syz_open_dev$evdev(0x0, 0x3, 0x822b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) unshare(0x28000600) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 1m10.427347132s ago: executing program 9 (id=8216): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1m10.041233571s ago: executing program 9 (id=8217): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = epoll_create1(0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x6e000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) 1m9.405358801s ago: executing program 9 (id=8219): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x3a793092580d796d, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r6, 0x3, 0x3) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4) 1m8.570644484s ago: executing program 51 (id=8219): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x3a793092580d796d, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r6, 0x3, 0x3) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4) 46.357652336s ago: executing program 3 (id=8249): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)=0x35cb3ad187d8c8f7) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) r6 = getpid() syz_pidfd_open(r6, 0x0) open(0x0, 0xc8101, 0x110) 44.623995571s ago: executing program 3 (id=8252): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 44.290719523s ago: executing program 3 (id=8254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 43.616744501s ago: executing program 3 (id=8256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xd8, 0xd8, 0x1f0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x3, 0x2}, {0x1, 0x0, 0x4}, 0x69, 0x8}}}, {{@ipv6={@private0, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff000000], 'team_slave_1\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0x3, 0x6ac0923c0280b7a2, 0x4f}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xd, 0x6, 0x0, 0x0, "406c74eb21736e0f48f85bb78a9512afa6bcab18d305362f24f073babf01ac47805ebb6fa868ea9e3bc3680936a6437cc203c4729dd2409d912996705bee8914"}}}, {{@ipv6={@mcast1, @local, [0xffffffff, 0xff000000, 0x1000001ff, 0xff], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2c, 0x2, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x3, 0x7}, {0x2, 0x3, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d8010203010902"], 0x0) close(0x3) 41.173656414s ago: executing program 3 (id=8260): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000904"], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x0, 0x6, 0x4, "3bb26b4b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001480)={0x34, &(0x7f0000001280)={0x0, 0x16, 0x4, "4765ab28"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 37.758576393s ago: executing program 3 (id=8266): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 31.979255738s ago: executing program 5 (id=8271): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r2, 0x2046}, {r7, 0x10}, {r6, 0xa8}], 0x4, 0x0, 0x0, 0x0) 30.889385597s ago: executing program 1 (id=8273): io_setup(0x6, &(0x7f0000000440)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x26, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0x90) write$tun(r4, &(0x7f0000000280)=ANY=[], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f00000027c0)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x4}, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="02", 0x1}], 0x1}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x5b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001d40)='c', 0x1}], 0x1}}], 0x2, 0x48040) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x24004001}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) 29.982668699s ago: executing program 1 (id=8274): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 28.813423701s ago: executing program 5 (id=8277): futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) fstat(0xffffffffffffffff, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='.-^\x00', 0x121800, &(0x7f0000000740)={@_ha_fsid={[0x147, 0x80]}, {0xfff3, 0x61, 0x6, 0x6}}, 0x7fff, 0x0, &(0x7f00000007c0)=0x22acd7f6}) pread64(r6, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) 26.618573452s ago: executing program 2 (id=8278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 25.881321412s ago: executing program 0 (id=8280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r4, 0x7fff, 0x5, 0xf) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000440)="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", 0xfc) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23.580230859s ago: executing program 2 (id=8281): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x32) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000540)={0x14, &(0x7f00000002c0)={0x0, 0x41386fb692e39f48, 0x56, {0x56, 0x4, "609a5efef6d1ce8ca3d746727b7cd9fda52ef251e11de9c4ac5d856330a4a0871e126a5baeee0fd08782ee681e28bf4461a1bd6b0c852658a1f7f7aadc04cea6c9ced4eede5afc60f97559f2290be6f05113aade"}}, &(0x7f0000000440)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "b8b4880c1900434b7654c3ccf1526a7259c7e5855dd66a263835c414e5403791f31ba4f6612a2a11109277db8e1b3af798a641ebb39ba027c2084b100ff63848599cf44e9d95714bfc434176d4e8268d73c954b2d8bb215b4a59eb8f4e604e287e0a658e2369b4721362805d48d3d6f6d87876fa88c5b77e51efe2c48b4535105330e9000df6c93911a7b782511ea7a5587a48c89f43ab2864d5dc35df24753fc81ffa43ba429fc927001cc170dc88f4263eab785999fe72bb278b08a0b59e3cbe08"}}}, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x20, 0x17, 0xa6, "dc3f992484a33c35729de5db19ddfc7741d1adafac8de755acf228fedc824cb2a8ab19a7566a321bdf0503230f34dc2ad205fda3f0def1a30de1a7a53defafb623ad143dd27e57a2d71fd9b9acbdb6b0bff556515387a5ad87e5070235fe82eeb9244dbc35d569b5756dcc3f6dfbad2b575b8e93c57fd27d4a2b0a65d80f522f12acc28656614d290868fac049c59d4340b83f3021db8e91e8ccaaa2817634d2d8e129424e3d"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000740)={0x20, 0x81, 0x3, "bb6b39"}, &(0x7f0000000780)={0x20, 0x82, 0x2, "9e2d"}, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="20840198981529"], 0x0}) execve(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4311}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23.27013503s ago: executing program 0 (id=8282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 22.466894744s ago: executing program 52 (id=8266): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 21.4686652s ago: executing program 1 (id=8284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x8, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0xa, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x831b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 21.464654907s ago: executing program 0 (id=8285): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r2, r1}) shmget$private(0x0, 0x3000, 0x2c000830, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000008cb06f57300b52b00000109022d00010000402009040029240300030009210900000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '$\x00'}]}}, 0x0}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x400}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r8], 0x0) 19.927033817s ago: executing program 2 (id=8286): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) 19.578940827s ago: executing program 1 (id=8287): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0404ca0000000000010902240001000020000904d565010300000009210000000122070009058103000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0xe73d3}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r6, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x90, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xa, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(0x0, 0x40005, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 19.322458866s ago: executing program 5 (id=8288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xed4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xea0, 0x2, [@TCA_MATCHALL_ACT={0xe9c, 0x2, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff, [{0x800, 0x9, 0x80000001, 0x9, 0x4, 0x7}, {0xb8, 0x5, 0x6, 0x6, 0x57, 0xe2}, {0x0, 0x3, 0x8, 0x0, 0x3, 0x5}]}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x3, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x6, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x6, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x400}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x4, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65c, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x5, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x9, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xed4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 19.119014241s ago: executing program 0 (id=8289): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ptrace(0x4207, r0) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x5a848}) close_range(r2, 0xffffffffffffffff, 0x0) 18.11411916s ago: executing program 5 (id=8290): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x89001) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 17.798532622s ago: executing program 2 (id=8291): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = socket(0x840000000002, 0x3, 0x100) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0xfffe) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.759673204s ago: executing program 5 (id=8292): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.294357458s ago: executing program 0 (id=8293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x38, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfa15, 0x401}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb4aab0c326cf951d351093247b7626e22e85a82f4bb1fc92fe78535906adc45ee30b8c846edd16e7e89083602909cb5fd9b93331bdf1e2b6aeb9e9bfc3433af3c4e559e8bc37474818aa240711d788d22ccb86fc15012f30980895733b944d01d6a43df832c33581fd1d53507fac26391f7a04743c87924461b09be5f5aba04a4273c2102a4fc300e5d1dd44612fca897749bf27293393312f7fd25c8e71317962d96c4f9468524c4593067d9ea2cc8203f5b4565fae70a3b50c5f6c62123d238fb"], 0x4a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0000886301000000feff1400"], 0x76) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r5, 0x400, 0x0) 17.182352005s ago: executing program 5 (id=8294): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 16.271146072s ago: executing program 1 (id=8295): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x3, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c380)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r2}, 0xc) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000140)={0x2, @capture={0x1000, 0x1, {0x4, 0x4f}, 0x4, 0x6}}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) 15.298131559s ago: executing program 2 (id=8296): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r5, @ANYBLOB="080002007f00000108000400ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000280)={0xfffffffe, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x16a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 13.727425423s ago: executing program 0 (id=8297): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000000)=[{r0, 0x7000}, {r0, 0x2333}], 0x2, 0x0, &(0x7f0000000080)={[0x6]}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 12.488239918s ago: executing program 1 (id=8298): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) 12.071904117s ago: executing program 2 (id=8299): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r2, 0x0, 0x5, 0x1}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 0s ago: executing program 53 (id=8294): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) kernel console output (not intermixed with test programs): using dummy_hcd [ 1351.279778][T29722] usb 4-1: USB disconnect, device number 72 [ 1351.351824][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1351.391242][ T24] usb 10-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.414656][ T24] usb 10-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 1351.481654][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1351.516002][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.552706][ T24] usb 10-1: Product: syz [ 1351.568328][ T24] usb 10-1: Manufacturer: syz [ 1351.584486][ T24] usb 10-1: SerialNumber: syz [ 1351.745622][T20740] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1351.905889][T20740] usb 1-1: Using ep0 maxpacket: 8 [ 1351.918460][T20740] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1351.933654][T20740] usb 1-1: config 0 has no interface number 0 [ 1351.940344][T20740] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1351.973117][T20740] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1352.010992][T20740] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1352.026269][ T1240] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1352.051036][T20740] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 1352.069178][T20740] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1352.074306][ T24] usb 10-1: unit 2 not found! [ 1352.090853][T20740] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1352.111192][T20740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.133972][T20740] usb 1-1: config 0 descriptor?? [ 1352.142027][T32029] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1352.161983][T20740] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1352.216604][ T1240] usb 5-1: Using ep0 maxpacket: 16 [ 1352.239923][ T1240] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1352.261595][ T24] usb 10-1: USB disconnect, device number 52 [ 1352.268677][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.300685][ T1240] usb 5-1: config 0 descriptor?? [ 1352.362495][ T1240] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1352.382818][T30577] udevd[30577]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.604157][ T24] usb 1-1: USB disconnect, device number 53 [ 1352.631349][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1353.360531][ T1240] gspca_sonixj: reg_w1 err -71 [ 1353.397667][ T1240] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1353.419883][ T1240] usb 5-1: USB disconnect, device number 43 [ 1353.483640][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 1353.928268][T32052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7827'. [ 1354.142331][T31599] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1354.194887][T29722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1354.209693][T31599] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1354.466595][T29722] IPVS: starting estimator thread 0... [ 1354.493244][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7831'. [ 1354.585725][T32063] IPVS: using max 54 ests per chain, 129600 per kthread [ 1354.966787][T29722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1355.075807][T29722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1356.187262][ T29] audit: type=1326 audit(1778548438.002:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32079 comm="syz.0.7837" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6b9b9cdd9 code=0x0 [ 1356.283002][T32084] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7836'. [ 1356.292363][T20740] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1356.458691][T20740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.497179][T20740] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1356.538805][T20740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.564295][T20740] usb 4-1: Product: syz [ 1356.579358][T20740] usb 4-1: Manufacturer: syz [ 1356.598739][T20740] usb 4-1: SerialNumber: syz [ 1356.629961][T20740] usb 4-1: config 0 descriptor?? [ 1356.878581][T32086] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1356.885154][T32086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1356.952462][T32086] vhci_hcd vhci_hcd.0: Device attached [ 1357.069001][T32090] vhci_hcd: connection closed [ 1357.069657][T25496] vhci_hcd vhci_hcd.3: stop threads [ 1357.080703][T20740] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -71 [ 1357.131735][T20740] usb 4-1: USB disconnect, device number 73 [ 1357.205144][T25496] vhci_hcd vhci_hcd.3: release socket [ 1357.205727][T29722] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 1357.240348][T32096] xt_connbytes: Forcing CT accounting to be enabled [ 1357.251788][T25496] vhci_hcd vhci_hcd.3: disconnect device [ 1357.287138][T32096] set match dimension is over the limit! [ 1357.329752][T29722] usb 39-1: enqueue for inactive port 0 [ 1357.447788][T29722] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1358.355634][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.234570][T22059] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1361.150509][T32136] misc userio: Invalid payload size [ 1361.273675][T32136] misc userio: No port type given on /dev/userio [ 1361.319700][T32136] misc userio: The device must be registered before sending interrupts [ 1361.399016][T32140] misc userio: Invalid payload size [ 1361.656484][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.667658][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.251190][T22059] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1362.373542][T32148] fuse: Invalid rootmode [ 1364.356844][T32164] fuse: Bad value for 'fd' [ 1366.247922][T32177] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7860'. [ 1366.369121][T32177] program syz.1.7860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1366.445864][T32171] could not allocate digest TFM handle sha224-asm [ 1366.501591][T32177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7860'. [ 1366.760188][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1366.920044][T32184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.225654][T20740] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1367.426374][T20740] usb 5-1: Using ep0 maxpacket: 32 [ 1367.437608][T20740] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1367.462773][T20740] usb 5-1: config 0 has no interface number 0 [ 1367.489812][T20740] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1367.507623][T20740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.521915][T20740] usb 5-1: Product: syz [ 1367.534650][T20740] usb 5-1: Manufacturer: syz [ 1367.542763][T20740] usb 5-1: SerialNumber: syz [ 1367.584861][T20740] usb 5-1: config 0 descriptor?? [ 1367.619929][T20740] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1367.643427][T20740] usb 5-1: selecting invalid altsetting 1 [ 1367.676596][T20740] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1367.732063][T20740] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1367.802106][T20740] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1367.826734][T32184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.842992][T20740] usb 5-1: media controller created [ 1367.873723][T32184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.943804][T20740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1368.126213][T20740] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1368.170555][T20740] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1368.222277][T20740] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1368.375850][T20740] usb 5-1: USB disconnect, device number 44 [ 1368.630554][T32205] fuse: Bad value for 'fd' [ 1368.975697][T20737] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1369.127006][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1369.155610][T20737] usb 10-1: Using ep0 maxpacket: 8 [ 1369.170739][T20737] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1369.184558][T20737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.202089][T20737] usb 10-1: Product: syz [ 1369.214426][T20737] usb 10-1: Manufacturer: syz [ 1369.224368][T20737] usb 10-1: SerialNumber: syz [ 1369.314926][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1369.360087][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1369.372446][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1369.385228][ T24] usb 5-1: Product: syz [ 1369.391779][ T24] usb 5-1: Manufacturer: syz [ 1369.399382][ T24] usb 5-1: SerialNumber: syz [ 1369.429362][ T24] usb 5-1: config 0 descriptor?? [ 1369.447437][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1369.932043][ T24] gspca_sn9c2028: read1 error -32 [ 1369.951410][ T24] gspca_sn9c2028: read1 error -71 [ 1369.964677][ T24] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1370.000164][ T24] usb 5-1: USB disconnect, device number 45 [ 1370.027048][T20737] usb 10-1: clock source 0 is not valid, cannot use [ 1370.229421][T20737] usb 10-1: 1:1: cannot get freq (v2/v3): err -71 [ 1370.249847][T20737] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1370.288880][T20737] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1370.318550][T20737] usb 10-1: clock source 0 is not valid, cannot use [ 1370.341382][T20737] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1370.366908][T20737] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1370.629814][T20737] usb 10-1: USB disconnect, device number 53 [ 1370.959174][T30544] udevd[30544]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1371.724798][T32230] misc userio: Invalid payload size [ 1371.784235][T32230] misc userio: No port type given on /dev/userio [ 1371.898641][T32230] misc userio: The device must be registered before sending interrupts [ 1371.939776][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7875'. [ 1371.978370][T32237] misc userio: Invalid payload size [ 1372.487817][ T1240] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1373.540558][T32251] fuse: Bad value for 'fd' [ 1373.729597][ T1240] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1373.762764][ T1240] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1373.772950][ T1240] usb 4-1: can't read configurations, error -71 [ 1374.055571][T20737] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1374.191578][T32256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1374.229155][T20737] usb 1-1: Using ep0 maxpacket: 8 [ 1374.249586][T20737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1374.282197][T20737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1374.311145][T20737] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1374.348151][T20737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1374.385613][T20737] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1374.420941][T20737] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1374.456513][T20737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.520661][T20737] usb 1-1: config 0 descriptor?? [ 1374.543195][T32247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1374.866167][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.877524][ T5628] Bluetooth: hci5: unexpected event 0x2c length: 0 < 17 [ 1374.884778][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.891930][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.898881][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.905870][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.916496][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.923617][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.930771][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.938362][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.945659][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.952653][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.959799][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.967976][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.974903][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1374.982035][ T5628] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1375.120446][T27363] usb 1-1: USB disconnect, device number 54 [ 1375.125104][T22059] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1375.166945][T32269] netlink: 'syz.4.7886': attribute type 32 has an invalid length. [ 1376.661078][T32300] tap0: tun_chr_ioctl cmd 1074812118 [ 1376.695933][T22059] Bluetooth: unknown link type 232 [ 1376.703606][T22059] Bluetooth: hci2: connection err: -111 [ 1376.748243][T32298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1377.091255][T32305] input: syz1 as /devices/virtual/input/input117 [ 1377.276251][T32223] udevd[32223]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1380.597066][T20740] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1380.793975][T20740] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1380.831048][T20740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.913661][T20740] usb 5-1: config 0 descriptor?? [ 1381.395376][T32339] syz.4.7908: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1381.426528][T32339] CPU: 0 UID: 0 PID: 32339 Comm: syz.4.7908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.426563][T32339] Tainted: [L]=SOFTLOCKUP [ 1381.426571][T32339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1381.426584][T32339] Call Trace: [ 1381.426593][T32339] [ 1381.426602][T32339] dump_stack_lvl+0xe8/0x150 [ 1381.426631][T32339] warn_alloc+0x249/0x340 [ 1381.426664][T32339] ? __pfx_warn_alloc+0x10/0x10 [ 1381.426706][T32339] __vmalloc_node_range_noprof+0x132/0x1750 [ 1381.426733][T32339] ? __mutex_trylock_common+0x158/0x260 [ 1381.426758][T32339] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1381.426785][T32339] ? trace_contention_end+0x3d/0x140 [ 1381.426810][T32339] ? __mutex_lock+0x319/0x1550 [ 1381.426843][T32339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1381.426866][T32339] ? irqentry_exit+0x218/0x760 [ 1381.426900][T32339] ? lockdep_hardirqs_on+0x7a/0x110 [ 1381.426922][T32339] ? dvb_demux_do_ioctl+0x320/0x540 [ 1381.426945][T32339] ? irqentry_exit+0x218/0x760 [ 1381.426970][T32339] ? __pfx___mutex_lock+0x10/0x10 [ 1381.426996][T32339] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1381.427020][T32339] vmalloc_noprof+0xb2/0xe0 [ 1381.427042][T32339] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1381.427069][T32339] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1381.427095][T32339] ? dvb_demux_do_ioctl+0xa1/0x540 [ 1381.427120][T32339] dvb_demux_do_ioctl+0x45d/0x540 [ 1381.427146][T32339] dvb_usercopy+0x199/0x2e0 [ 1381.427168][T32339] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1381.427192][T32339] ? __pfx_dvb_usercopy+0x10/0x10 [ 1381.427224][T32339] ? __fget_files+0x3a0/0x420 [ 1381.427242][T32339] ? __fget_files+0x2a/0x420 [ 1381.427265][T32339] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1381.427289][T32339] dvb_demux_ioctl+0x29/0x40 [ 1381.427310][T32339] __se_sys_ioctl+0xfc/0x170 [ 1381.427335][T32339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.427355][T32339] do_syscall_64+0x15f/0xf80 [ 1381.427379][T32339] ? clear_bhb_loop+0x40/0x90 [ 1381.427400][T32339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.427417][T32339] RIP: 0033:0x7f623a99cdd9 [ 1381.427434][T32339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.427451][T32339] RSP: 002b:00007f623b912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.427468][T32339] RAX: ffffffffffffffda RBX: 00007f623ac15fa0 RCX: 00007f623a99cdd9 [ 1381.427482][T32339] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1381.427493][T32339] RBP: 00007f623aa32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1381.427502][T32339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.427514][T32339] R13: 00007f623ac16038 R14: 00007f623ac15fa0 R15: 00007f623ad3fa48 [ 1381.427541][T32339] [ 1381.427597][T32339] Mem-Info: [ 1381.920958][T20740] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1381.935701][T32339] active_anon:9198 inactive_anon:0 isolated_anon:0 [ 1381.935701][T32339] active_file:23343 inactive_file:41642 isolated_file:0 [ 1381.935701][T32339] unevictable:768 dirty:343 writeback:0 [ 1381.935701][T32339] slab_reclaimable:7554 slab_unreclaimable:176991 [ 1381.935701][T32339] mapped:36612 shmem:1827 pagetables:1806 [ 1381.935701][T32339] sec_pagetables:0 bounce:0 [ 1381.935701][T32339] kernel_misc_reclaimable:0 [ 1381.935701][T32339] free:1204556 free_pcp:13109 free_cma:0 [ 1382.245291][T32339] Node 0 active_anon:39092kB inactive_anon:0kB active_file:93232kB inactive_file:166364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147392kB dirty:1372kB writeback:0kB shmem:7772kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15688kB pagetables:6964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1382.385557][T32339] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1382.469899][T32348] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1382.492167][T32339] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.543943][T32339] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1382.562070][T32339] Node 0 DMA32 free:863856kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42516kB inactive_anon:0kB active_file:93232kB inactive_file:166364kB unevictable:1536kB writepending:1372kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:39284kB local_pcp:18040kB free_cma:0kB [ 1382.662572][T32339] lowmem_reserve[]: 0 0 0 0 0 [ 1382.687907][T32339] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1382.735698][T27363] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 1382.774505][T32339] lowmem_reserve[]: 0 0 0 0 0 [ 1382.795603][T32339] Node 1 Normal free:3935008kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12288kB local_pcp:8192kB free_cma:0kB [ 1382.841047][T32339] lowmem_reserve[]: 0 0 0 0 0 [ 1382.850688][T32339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1382.876309][T32339] Node 0 DMA32: 1135*4kB (UME) 5479*8kB (UME) 4583*16kB (UME) 1287*32kB (UME) 714*64kB (UME) 491*128kB (UME) 561*256kB (UME) 269*512kB (UM) 151*1024kB (UME) 22*2048kB (UME) 27*4096kB (U) = 863044kB [ 1382.939330][T27363] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 1382.957942][T32339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1382.960923][T27363] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.984939][T32339] Node 1 Normal: 4*4kB (M) 6*8kB (UM) 16*16kB (UM) 3*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 959*4096kB (UM) = 3935008kB [ 1383.001807][T27363] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1383.026924][T27363] usb 10-1: config 150 has no interface number 0 [ 1383.043799][T27363] usb 10-1: config 150 interface 204 has no altsetting 0 [ 1383.051412][T32339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.051466][T32339] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1383.051485][T32339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.051503][T32339] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1383.051521][T32339] 69166 total pagecache pages [ 1383.051532][T32339] 0 pages in swap cache [ 1383.051541][T32339] Free swap = 124996kB [ 1383.051551][T32339] Total swap = 124996kB [ 1383.051562][T32339] 2097051 pages RAM [ 1383.051571][T32339] 0 pages HighMem/MovableOnly [ 1383.051602][T32339] 427115 pages reserved [ 1383.051611][T32339] 0 pages cma reserved [ 1383.189974][T27363] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1383.200991][T27363] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.267636][T20740] [drm:udl_init] *ERROR* Selecting channel failed [ 1383.280877][T27363] usb 10-1: Product: syz [ 1383.299098][T27363] usb 10-1: Manufacturer: syz [ 1383.325642][T27363] usb 10-1: SerialNumber: syz [ 1383.395628][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1383.486215][T20740] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1383.526279][T20740] [drm] Initialized udl on minor 2 [ 1383.576796][T20740] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1383.655057][T20740] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1383.801915][T20740] usb 5-1: USB disconnect, device number 46 [ 1383.839704][T20737] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1383.915976][T20737] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1385.373918][T32384] netlink: 'syz.3.7919': attribute type 3 has an invalid length. [ 1385.430119][T32384] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7919'. [ 1385.526367][T27363] xr_serial 10-1:150.204: skipping garbage [ 1385.557624][T27363] usb 10-1: USB disconnect, device number 54 [ 1385.600873][T32384] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7919'. [ 1387.040664][T32400] binder: 32399:32400 ioctl c0306201 2000000003c0 returned -14 [ 1390.092466][T32425] input: syz0 as /devices/virtual/input/input118 [ 1390.495662][T20739] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1390.655064][T32433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1390.708594][T32429] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7927'. [ 1390.735700][T20739] usb 4-1: Using ep0 maxpacket: 16 [ 1390.738402][T32429] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7927'. [ 1390.796224][T32433] bond6: (slave bond0): Releasing active interface [ 1390.815583][T32433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.831299][T20739] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1390.845338][T32433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.858662][T20739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.867398][T20739] usb 4-1: Product: syz [ 1390.874350][T32433] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1390.883332][T20739] usb 4-1: Manufacturer: syz [ 1390.890760][T20739] usb 4-1: SerialNumber: syz [ 1390.897167][T32433] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1390.909666][T20739] usb 4-1: config 0 descriptor?? [ 1390.926783][T20739] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1390.935054][T32433] bond0 (unregistering): Released all slaves [ 1391.905696][T20740] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1392.055811][T20740] usb 1-1: device descriptor read/64, error -71 [ 1392.072506][T27363] usb 4-1: USB disconnect, device number 76 [ 1392.335605][T20740] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1392.475656][T20740] usb 1-1: device descriptor read/64, error -71 [ 1392.596060][T20740] usb usb1-port1: attempt power cycle [ 1392.911291][T32453] bridge0: port 3(syz_tun) entered blocking state [ 1392.934103][T32453] bridge0: port 3(syz_tun) entered disabled state [ 1392.942383][T32453] syz_tun: entered allmulticast mode [ 1392.948321][T20740] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1393.009913][T20740] usb 1-1: device descriptor read/8, error -71 [ 1393.023877][T32453] syz_tun: entered promiscuous mode [ 1393.335579][T20740] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1393.380406][T20740] usb 1-1: device descriptor read/8, error -71 [ 1393.510880][T20740] usb usb1-port1: unable to enumerate USB device [ 1395.605888][T27363] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1395.785625][T27363] usb 5-1: Using ep0 maxpacket: 32 [ 1395.810819][T27363] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1395.843809][T27363] usb 5-1: config 0 has no interface number 0 [ 1395.891697][T27363] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1395.935244][T27363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.965809][T27363] usb 5-1: Product: syz [ 1395.975781][T27363] usb 5-1: Manufacturer: syz [ 1395.980436][T27363] usb 5-1: SerialNumber: syz [ 1396.055177][T27363] usb 5-1: config 0 descriptor?? [ 1396.487599][T27363] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1396.487632][T27363] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1396.693644][T27363] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1396.742636][T27363] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1397.013111][T32478] kvm: kvm [32477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x352e76650000 [ 1397.032174][T32478] kvm: kvm [32477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x602876650000 [ 1397.068222][T32478] kvm: kvm [32477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7f4076650000 [ 1397.108172][T32478] kvm: kvm [32477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x343576650000 [ 1397.127970][T32478] kvm: kvm [32477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x184f76650000 [ 1398.378605][T20739] usb 5-1: USB disconnect, device number 47 [ 1399.423454][T32502] ucma_write: process 282 (syz.9.7949) changed security contexts after opening file descriptor, this is not allowed. [ 1399.781419][ T29] audit: type=1326 audit(1778548481.592:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32503 comm="syz.1.7950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f57a5396b57 code=0x0 [ 1401.598218][T27363] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1401.753346][T32522] Cannot find add_set index 2 as target [ 1401.771455][T27363] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1401.782667][T27363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.794598][T27363] usb 1-1: Product: syz [ 1401.799000][T27363] usb 1-1: Manufacturer: syz [ 1401.808128][T27363] usb 1-1: SerialNumber: syz [ 1401.859508][T27363] usb 1-1: config 0 descriptor?? [ 1402.084906][T27363] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1403.616391][T27363] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1403.720894][T27363] usb 1-1: USB disconnect, device number 59 [ 1403.927203][T20739] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1404.115877][T20739] usb 4-1: Using ep0 maxpacket: 32 [ 1404.142063][T20739] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1404.168099][T20739] usb 4-1: config 0 has no interface number 0 [ 1404.193725][T20739] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1404.224239][T20739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.249483][T20739] usb 4-1: Product: syz [ 1404.261796][T20739] usb 4-1: Manufacturer: syz [ 1404.285173][T20739] usb 4-1: SerialNumber: syz [ 1404.316821][T20739] usb 4-1: config 0 descriptor?? [ 1404.687483][T32545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7959'. [ 1404.764429][T20739] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1404.803929][T20739] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1405.047787][T20739] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1405.086064][T20739] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1406.062721][T32557] xt_connbytes: Forcing CT accounting to be enabled [ 1406.100617][T32557] set match dimension is over the limit! [ 1406.787651][T29722] usb 4-1: USB disconnect, device number 77 [ 1407.639339][T32576] veth1_macvtap: left promiscuous mode [ 1407.648489][T32576] macsec0: entered promiscuous mode [ 1407.724403][T32578] veth1_macvtap: entered promiscuous mode [ 1407.753026][T32578] macsec0: left promiscuous mode [ 1407.778253][T32576] netlink: 'syz.9.7966': attribute type 1 has an invalid length. [ 1407.935010][T32576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1408.795554][T20740] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1408.999948][T20740] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1409.028988][T20740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.061076][T20740] usb 5-1: Product: syz [ 1409.082153][T20740] usb 5-1: Manufacturer: syz [ 1409.105797][T20740] usb 5-1: SerialNumber: syz [ 1409.375615][T20740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1409.439641][T20740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1409.475074][T20740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1409.532449][T20740] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1409.597351][T20740] usb 5-1: USB disconnect, device number 48 [ 1412.064066][T32635] syzkaller0: entered promiscuous mode [ 1412.100254][T32635] syzkaller0: entered allmulticast mode [ 1412.878580][T29722] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1413.046457][T29722] usb 4-1: Using ep0 maxpacket: 32 [ 1413.060345][T29722] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1413.074911][T29722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.111368][T29722] usb 4-1: config 0 has no interfaces? [ 1413.139222][T29722] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1413.168145][T29722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.199457][T29722] usb 4-1: Product: syz [ 1413.214174][T29722] usb 4-1: Manufacturer: syz [ 1413.232138][T29722] usb 4-1: SerialNumber: syz [ 1413.268558][T29722] usb 4-1: config 0 descriptor?? [ 1413.629479][T32643] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1413.859299][T29722] usb 4-1: USB disconnect, device number 78 [ 1414.306974][T20739] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1414.488003][T20739] usb 10-1: Using ep0 maxpacket: 32 [ 1414.512120][T20739] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1414.542823][T20739] usb 10-1: config 0 has no interface number 0 [ 1414.564272][T20739] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1414.585552][T20739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.608734][T20739] usb 10-1: Product: syz [ 1414.624963][T20739] usb 10-1: Manufacturer: syz [ 1414.640872][T20739] usb 10-1: SerialNumber: syz [ 1414.677727][T20739] usb 10-1: config 0 descriptor?? [ 1414.700596][T20739] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1414.895571][T29722] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1414.929433][T20739] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1414.958140][T20739] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1415.105701][T29722] usb 4-1: Using ep0 maxpacket: 32 [ 1415.133006][T29722] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1415.169905][T29722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.220789][T29722] usb 4-1: config 0 has no interfaces? [ 1415.252024][T29722] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1415.285381][T29722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.302273][T32648] syzkaller1: entered promiscuous mode [ 1415.311141][T29722] usb 4-1: Product: syz [ 1415.316115][T32648] syzkaller1: entered allmulticast mode [ 1415.332971][T29722] usb 4-1: Manufacturer: syz [ 1415.358030][T29722] usb 4-1: SerialNumber: syz [ 1415.388334][T29722] usb 4-1: config 0 descriptor?? [ 1415.554505][T32665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.603757][T32665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.961651][T29722] usb 4-1: USB disconnect, device number 79 [ 1416.035845][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1416.205921][T20739] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1416.375530][T20739] usb 5-1: Using ep0 maxpacket: 16 [ 1416.383471][T20739] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 1416.401612][T20739] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 1416.457738][T20739] usb 5-1: config 166 has no interface number 0 [ 1416.478473][T20739] usb 5-1: config 166 has no interface number 1 [ 1416.498560][T20739] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1416.579670][T20739] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1416.627743][T20739] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1416.791764][T20739] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1416.821914][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1416.830276][T20737] usb 10-1: USB disconnect, device number 55 [ 1416.871058][T20739] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1416.889797][T20737] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1416.930054][T20739] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1416.959297][T20737] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1416.979360][T20739] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1416.997865][T20737] quatech2 10-1:0.51: device disconnected [ 1417.011464][T20739] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1417.043865][T20739] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1417.091818][T20739] usb 5-1: config 166 interface 177 has no altsetting 0 [ 1417.117151][T20739] usb 5-1: config 166 interface 34 has no altsetting 0 [ 1417.151888][T20739] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1417.170297][T20739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.200570][T20739] usb 5-1: Product: syz [ 1417.212850][T20739] usb 5-1: Manufacturer: syz [ 1417.238563][T32676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7990'. [ 1417.241905][T20739] usb 5-1: SerialNumber: syz [ 1417.524745][T20739] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 1417.751645][T20739] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 1417.905692][T20739] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 1417.932503][T20739] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1417.966792][T20739] uvcvideo 5-1:166.34: No valid video chain found. [ 1417.983476][T32687] syzkaller0: entered promiscuous mode [ 1418.009436][T32687] syzkaller0: entered allmulticast mode [ 1418.027819][T20739] usb 5-1: USB disconnect, device number 49 [ 1419.222342][T32704] kvm: kvm [32703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x592ec0000000 [ 1419.272659][T32704] kvm: kvm [32703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8428c0000000 [ 1419.423880][T32704] kvm: kvm [32703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa340c0000000 [ 1419.453848][T32714] bridge0: port 3(syz_tun) entered blocking state [ 1419.490823][T32714] bridge0: port 3(syz_tun) entered disabled state [ 1419.512291][T32714] syz_tun: entered allmulticast mode [ 1419.622199][T32704] kvm: kvm [32703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5835c0000000 [ 1419.671448][T32704] kvm: kvm [32703]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3c4fc0000000 [ 1420.034289][T32714] syz_tun: entered promiscuous mode [ 1420.204547][T32728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8000'. [ 1420.291048][T32729] xt_hashlimit: size too large, truncated to 1048576 [ 1421.449956][T32735] syzkaller0: entered promiscuous mode [ 1421.456480][T32735] syzkaller0: entered allmulticast mode [ 1421.747737][T32737] tipc: Resetting bearer [ 1423.080877][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.095972][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.885276][ T303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1425.266005][T20737] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1425.438081][T20737] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1425.459612][T20737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.498431][T20737] usb 4-1: config 0 descriptor?? [ 1425.730921][T20737] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1425.763835][T20737] [drm:udl_init] *ERROR* Selecting channel failed [ 1426.025670][T20737] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1426.059229][T20737] [drm] Initialized udl on minor 2 [ 1426.080575][T20737] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1426.148142][T20737] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1426.190283][T20739] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1426.209290][T20737] usb 4-1: USB disconnect, device number 80 [ 1426.232279][T20739] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1426.484265][ T29] audit: type=1326 audit(1778548508.292:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=319 comm="syz.1.8016" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x0 [ 1427.005035][ T324] syzkaller0: entered promiscuous mode [ 1427.025261][ T324] syzkaller0: entered allmulticast mode [ 1427.526574][ T1240] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1427.685604][ T1240] usb 5-1: Using ep0 maxpacket: 8 [ 1427.700059][ T1240] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1427.712709][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.734564][ T1240] usb 5-1: Product: syz [ 1427.744689][ T1240] usb 5-1: Manufacturer: syz [ 1427.756643][ T1240] usb 5-1: SerialNumber: syz [ 1428.564042][ T1240] usb 5-1: clock source 0 is not valid, cannot use [ 1428.767464][ T1240] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1428.789872][ T1240] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1428.814370][ T1240] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1428.828532][ T1240] usb 5-1: clock source 0 is not valid, cannot use [ 1428.847742][ T1240] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 1428.855016][ T1240] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1428.909584][ T1240] usb 5-1: USB disconnect, device number 50 [ 1428.964674][T32219] udevd[32219]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.399947][ T335] fuse: Bad value for 'fd' [ 1430.124554][ T351] bridge0: port 3(syz_tun) entered blocking state [ 1430.169717][ T351] bridge0: port 3(syz_tun) entered disabled state [ 1430.222088][ T351] syz_tun: entered allmulticast mode [ 1430.322042][ T351] syz_tun: entered promiscuous mode [ 1430.340824][ T351] bridge0: port 3(syz_tun) entered blocking state [ 1430.347462][ T351] bridge0: port 3(syz_tun) entered forwarding state [ 1432.530790][T22059] Bluetooth: hci2: unexpected event for opcode 0x000b [ 1433.053937][ T372] binder: BINDER_SET_CONTEXT_MGR already set [ 1433.082006][ T372] binder: 369:372 ioctl 4018620d 200000000040 returned -16 [ 1433.312414][ T377] syzkaller0: entered promiscuous mode [ 1433.358911][ T377] syzkaller0: entered allmulticast mode [ 1435.394808][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1435.447100][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1436.272169][ T397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1436.313047][ T397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1436.344418][ T399] syzkaller0: entered promiscuous mode [ 1436.352781][ T399] syzkaller0: entered allmulticast mode [ 1436.668169][ T1240] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1436.802420][ T406] IPv6: NLM_F_CREATE should be specified when creating new route [ 1436.845979][ T1240] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1436.864357][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.874878][ T1240] usb 5-1: Product: syz [ 1436.881427][ T1240] usb 5-1: Manufacturer: syz [ 1436.888697][ T1240] usb 5-1: SerialNumber: syz [ 1437.257432][ T409] fuse: Unknown parameter 'grou00000000000000000000' [ 1439.274582][ T1240] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1439.335308][ T1240] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1439.424406][ T1240] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1439.514194][ T1240] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1439.578057][ T1240] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1439.667311][ T1240] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1439.757162][ T1240] usb 5-1: USB disconnect, device number 51 [ 1440.168185][ T1240] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1440.407965][ T1240] usb 5-1: Using ep0 maxpacket: 16 [ 1440.445059][ T1240] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.507555][ T1240] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1440.579770][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.271415][ T1240] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1441.299931][ T1240] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1441.329059][ T1240] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1441.372193][ T1240] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1441.474101][ T1240] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1441.510829][ T1240] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1441.727201][ T1240] usb 5-1: USB disconnect, device number 52 [ 1441.876229][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8050'. [ 1442.779853][ T452] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1442.788037][T29722] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1442.967469][T29722] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1442.992008][T29722] usb 10-1: config 1 has no interface number 0 [ 1443.023293][T29722] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1443.074278][T29722] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1443.115250][T29722] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1443.135611][ T1240] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1443.150278][T29722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.181158][T29722] usb 10-1: Product: syz [ 1443.197112][T29722] usb 10-1: Manufacturer: syz [ 1443.213971][T29722] usb 10-1: SerialNumber: syz [ 1443.246120][ T453] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1443.296938][T29722] usb 10-1: Error in usbnet_get_endpoints (-22) [ 1443.327744][ T1240] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 1443.399910][ T1240] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1443.444235][ T1240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.479014][ T1240] usb 4-1: Product: syz [ 1443.491296][ T1240] usb 4-1: Manufacturer: syz [ 1443.513899][ T1240] usb 4-1: SerialNumber: syz [ 1443.593632][ T1240] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1443.624822][T20750] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1443.970351][ T459] random: crng reseeded on system resumption [ 1444.755730][T20750] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1444.765543][T20750] ath9k_htc: Failed to initialize the device [ 1444.908309][T20750] usb 4-1: ath9k_htc: USB layer deinitialized [ 1445.450188][T29722] usb 10-1: USB disconnect, device number 56 [ 1445.870110][T29722] usb 4-1: USB disconnect, device number 81 [ 1446.059327][ T29] audit: type=1400 audit(1778548527.872:3416): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=463 comm="syz.1.8065" [ 1446.248222][ T483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1446.322935][ T483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1449.020547][T29722] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1449.201664][ T506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8062'. [ 1449.223847][T29722] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1449.249498][T29722] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.289808][T29722] usb 10-1: config 0 descriptor?? [ 1449.317716][T29722] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1449.735141][T29722] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1450.077342][ T508] syz.0.8062 (508): drop_caches: 2 [ 1450.344479][ T494] vivid-004: disconnect [ 1450.381562][ T494] vivid-004: reconnect [ 1450.653778][ T519] fuse: Bad value for 'fd' [ 1451.166181][T29722] gspca_cpia1: usb_control_msg 05, error -110 [ 1451.172543][T29722] cpia1 10-1:0.0: unexpected systemstate: 00 [ 1452.186988][T20740] usb 10-1: USB disconnect, device number 57 [ 1452.215225][ T521] tipc: Resetting bearer [ 1452.443727][ T520] tipc: Resetting bearer [ 1453.141949][ T29] audit: type=1400 audit(1778548534.952:3417): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=542 comm="syz.3.8073" [ 1453.346432][T25450] tipc: Resetting bearer [ 1453.384477][ T551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8073'. [ 1453.447207][ T551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8073'. [ 1453.701774][ T560] fuse: Unknown parameter 'user_id00000000000000000000' [ 1456.193401][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8078'. [ 1456.251404][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8078'. [ 1456.284371][ T567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1456.300714][ T569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8078'. [ 1456.364786][ T573] netlink: 'syz.1.8078': attribute type 10 has an invalid length. [ 1456.444241][ T567] kAFS: unable to lookup cell '(/' [ 1456.653440][ T576] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1457.244232][ T585] input: syz0 as /devices/virtual/input/input119 [ 1457.339319][ T587] vivid-000: disconnect [ 1457.389643][ T584] vivid-000: reconnect [ 1457.725575][ T596] binder_alloc: 590: binder_alloc_buf, no vma [ 1458.500513][ T575] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1458.550676][T31604] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1458.562561][T31604] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1458.576718][T31604] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1458.579929][ T591] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 1458.619231][T31604] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1458.652165][ T591] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 1458.662740][ T591] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1458.688525][T31604] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.920946][ T604] syz.1.8089 (604): drop_caches: 2 [ 1459.707316][T29722] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1459.915633][T29722] usb 5-1: Using ep0 maxpacket: 16 [ 1459.935347][T29722] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1459.968442][T29722] usb 5-1: config 0 has no interface number 0 [ 1460.001238][T29722] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1460.054529][T29722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.121060][T29722] usb 5-1: Product: syz [ 1460.158935][T29722] usb 5-1: Manufacturer: syz [ 1460.205296][T29722] usb 5-1: SerialNumber: syz [ 1460.274838][T29722] usb 5-1: config 0 descriptor?? [ 1460.305023][T29722] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1461.762307][T29722] gspca_spca1528: reg_w err -71 [ 1461.790965][T29722] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1461.845551][T29722] usb 5-1: USB disconnect, device number 53 [ 1462.748302][ T637] ip6gre1: entered promiscuous mode [ 1462.771017][ T637] ip6gre1: entered allmulticast mode [ 1463.073570][ T647] netlink: 149 bytes leftover after parsing attributes in process `syz.9.8099'. [ 1463.985357][ T654] xt_connbytes: Forcing CT accounting to be enabled [ 1464.018688][ T654] set match dimension is over the limit! [ 1465.105838][ T663] fuse: Unknown parameter '00000000000000000000003' [ 1465.785857][T20740] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1465.985560][T20740] usb 1-1: Using ep0 maxpacket: 32 [ 1466.003463][T20740] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1466.033990][T20740] usb 1-1: config 0 has no interface number 0 [ 1466.069532][T20740] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1466.101236][T20740] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1466.124179][T20740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.156627][T20740] usb 1-1: Product: syz [ 1466.168472][T20740] usb 1-1: Manufacturer: syz [ 1466.192705][T20740] usb 1-1: SerialNumber: syz [ 1466.227954][T20740] usb 1-1: config 0 descriptor?? [ 1466.396349][ T669] loop4: detected capacity change from 0 to 7 [ 1466.479956][ T669] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1466.504461][ T669] loop4: partition table partially beyond EOD, truncated [ 1466.544114][ T669] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1467.127204][ T4994] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1467.133566][ T4994] loop4: partition table partially beyond EOD, truncated [ 1467.143081][ T4994] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1467.336958][ T679] netlink: 'syz.4.8106': attribute type 12 has an invalid length. [ 1469.436714][T20740] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 1469.471935][T20740] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1469.503449][T20740] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1469.573974][T20740] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1469.657928][T20740] usb 1-1: USB disconnect, device number 60 [ 1470.401700][ T708] fuse: Unknown parameter 'fd00000000000000000000003' [ 1472.003242][ T29] audit: type=1326 audit(1778548553.792:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1472.139083][ T29] audit: type=1326 audit(1778548553.812:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1472.270488][ T29] audit: type=1326 audit(1778548553.852:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1472.409321][ T29] audit: type=1326 audit(1778548553.852:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1472.445765][ T721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1472.551975][ T29] audit: type=1326 audit(1778548553.852:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1472.586121][ T29] audit: type=1326 audit(1778548553.922:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1473.107949][ T725] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1473.459607][ T29] audit: type=1326 audit(1778548555.272:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1473.618499][ T29] audit: type=1326 audit(1778548555.272:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1473.845620][ T29] audit: type=1326 audit(1778548555.372:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1473.948863][ T743] binder_alloc: 741: binder_alloc_buf size -488 failed, no address space [ 1474.029182][ T743] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1474.062621][ T29] audit: type=1326 audit(1778548555.382:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.1.8117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a539cdd9 code=0x7ffc0000 [ 1474.334941][ T745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1474.374164][ T745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1474.463203][ T750] fuse: Unknown parameter 'fd00000000000000000000003' [ 1474.884641][ T756] syzkaller0: entered promiscuous mode [ 1474.899003][ T756] syzkaller0: entered allmulticast mode [ 1475.552652][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1475.822193][ T763] netlink: 'syz.4.8129': attribute type 12 has an invalid length. [ 1480.519184][ T799] fuse: Unknown parameter 'fd00000000000000000000003' [ 1480.531893][ T798] tipc: Enabling of bearer rejected, already enabled [ 1480.754742][ T798] tipc: Resetting bearer [ 1480.939460][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1480.954148][ T805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1480.961350][T20739] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1481.003195][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1481.014310][ T805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1481.055576][ T807] netlink: 'syz.0.8140': attribute type 4 has an invalid length. [ 1481.065604][ T807] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1481.091653][ T807] .`: renamed from bond0 [ 1481.117503][T20739] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 1481.149085][T20739] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1481.178660][ T809] syzkaller1: entered promiscuous mode [ 1481.185667][ T809] syzkaller1: entered allmulticast mode [ 1481.186839][T20739] usb 10-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 1481.217590][T20739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.258353][T20739] usb 10-1: Product: syz [ 1481.287906][T20739] usb 10-1: Manufacturer: syz [ 1481.314638][T20739] usb 10-1: SerialNumber: syz [ 1481.674395][ T803] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8139'. [ 1481.855666][T20740] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1481.883964][T20739] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1481.896524][T20739] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1481.910354][T20739] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1481.918470][T20739] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1481.946433][T20739] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1482.017321][T20740] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 1482.051410][T20740] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1482.069263][T20740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.090396][T20740] usb 5-1: Product: syz [ 1482.100962][T20739] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1482.112245][T20740] usb 5-1: Manufacturer: syz [ 1482.127818][T20740] usb 5-1: SerialNumber: syz [ 1482.142845][T20739] usb 10-1: USB disconnect, device number 58 [ 1482.158353][T20740] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1482.205886][T15394] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1482.239171][T32223] udevd[32223]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.577313][ T816] random: crng reseeded on system resumption [ 1483.250047][T15394] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1483.280732][T15394] ath9k_htc: Failed to initialize the device [ 1483.393947][T15394] usb 5-1: ath9k_htc: USB layer deinitialized [ 1483.769574][ T826] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8147'. [ 1483.851336][ T826] netlink: 'syz.9.8147': attribute type 5 has an invalid length. [ 1483.891741][ T826] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8147'. [ 1483.920002][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.929075][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.527092][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1484.539708][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.546152][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.604607][ T24] usb 5-1: USB disconnect, device number 54 [ 1486.802491][ T857] netlink: 1268 bytes leftover after parsing attributes in process `syz.9.8153'. [ 1487.335117][T30430] bridge0: port 3(syz_tun) entered disabled state [ 1487.507872][T30430] syz_tun (unregistering): left allmulticast mode [ 1487.516208][T30430] syz_tun (unregistering): left promiscuous mode [ 1487.523364][T30430] bridge0: port 3(syz_tun) entered disabled state [ 1487.821554][ T867] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 867 comm: syz.1.8157) [ 1487.931705][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1487.931726][ T29] audit: type=1800 audit(1778548569.742:3445): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8157" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=197112 res=0 errno=0 [ 1488.141245][ T870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1488.159515][ T870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1488.214403][ T870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1488.230631][ T870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1488.268396][ T870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1488.302589][ T870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1488.353412][ T870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1488.409538][ T870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1488.660944][T31612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.671814][T31612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1488.732290][ T869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1488.741923][ T869] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1488.871362][ T869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1488.881505][ T869] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1488.935625][ T869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1488.943982][ T869] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1488.968054][T31612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.978452][T31612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1489.141566][T31612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.152554][T31612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1489.289595][T31612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.304926][T31612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1489.568923][ T878] team_slave_1: Caught tx_queue_len zero misconfig [ 1489.696162][ T882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1489.858416][ T24] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1489.891673][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1489.907693][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1489.918017][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1489.943325][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1489.951695][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1490.023015][T22059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1490.037862][T22059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1490.047443][T22059] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1490.060028][T22059] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1490.080738][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1490.091384][T22059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1490.098646][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.187397][ T24] usb 1-1: Product: syz [ 1490.197984][ T24] usb 1-1: Manufacturer: syz [ 1490.211354][ T24] usb 1-1: SerialNumber: syz [ 1490.237457][ T24] usb 1-1: config 0 descriptor?? [ 1490.470523][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1490.704433][T31612] bridge_slave_1: left allmulticast mode [ 1490.741172][T31612] bridge_slave_1: left promiscuous mode [ 1490.763222][T31612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.820648][T31612] bridge_slave_0: left allmulticast mode [ 1490.842944][T31612] bridge_slave_0: left promiscuous mode [ 1490.870768][T31612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.146746][T20740] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1491.345082][T20740] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.361677][ T29] audit: type=1400 audit(1778548573.152:3446): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=903 comm="syz.4.8166" [ 1491.417772][T20740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.491637][T20740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.524543][T20740] usb 10-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1491.562001][T20740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.605166][T20740] usb 10-1: config 0 descriptor?? [ 1491.710791][ T913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1491.731636][ T913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1492.100024][T20740] wacom 0003:056A:0000.0047: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1492.196201][T22059] Bluetooth: hci4: command tx timeout [ 1492.235902][T20740] wacom 0003:056A:0000.0047: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.9-1/input0 [ 1492.281657][T20740] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0000.0047/input/input120 [ 1492.528783][T20740] usb 10-1: USB disconnect, device number 59 [ 1492.552127][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1492.688674][ T921] fido_id[921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1492.778758][ T24] usb 1-1: USB disconnect, device number 61 [ 1492.912455][T31612] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 1493.684381][T31612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.747004][T31612] bond0 (unregistering): Released all slaves [ 1493.765722][T20737] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1493.823089][T31612] bond1 (unregistering): Released all slaves [ 1493.888555][T29722] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1493.931189][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1493.972702][T20737] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1494.035860][T20737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.046690][T20737] usb 1-1: Product: syz [ 1494.050942][T20737] usb 1-1: Manufacturer: syz [ 1494.065531][T29722] usb 10-1: Using ep0 maxpacket: 32 [ 1494.070917][T20737] usb 1-1: SerialNumber: syz [ 1494.084818][T29722] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1494.120414][T20737] usb 1-1: config 0 descriptor?? [ 1494.150088][T29722] usb 10-1: config 0 has no interface number 0 [ 1494.248065][T31612] IPVS: stopping backup sync thread 576 ... [ 1494.283857][T22059] Bluetooth: hci4: command tx timeout [ 1494.303811][T29722] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1494.314742][T29722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.419820][T29722] usb 10-1: Product: syz [ 1494.490755][T20737] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1494.522451][T29722] usb 10-1: Manufacturer: syz [ 1494.564662][T29722] usb 10-1: SerialNumber: syz [ 1494.628099][T29722] usb 10-1: config 0 descriptor?? [ 1494.670258][T29722] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1494.751150][T29722] usb 10-1: selecting invalid altsetting 1 [ 1494.813999][T29722] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1494.894686][T29722] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1494.941328][T29722] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1494.962629][T29722] usb 10-1: media controller created [ 1495.045453][T29722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1495.460010][T27363] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1495.471189][T29722] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1495.504523][T31612] hsr_slave_0: left promiscuous mode [ 1495.527958][T31612] hsr_slave_1: left promiscuous mode [ 1495.541382][T31612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.585958][T31612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.639370][T27363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.660375][T31612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.674205][T29722] usb 10-1: USB disconnect, device number 60 [ 1495.685873][T31612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.715287][T27363] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.780265][T27363] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1495.831165][T27363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.904322][T31612] veth1_vlan: left promiscuous mode [ 1495.910162][T27363] usb 5-1: config 0 descriptor?? [ 1495.923327][T31612] veth0_vlan: left promiscuous mode [ 1496.018376][T27363] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1496.193649][T27363] usb 5-1: USB disconnect, device number 55 [ 1496.218880][T20737] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1496.280906][T20737] usb 1-1: USB disconnect, device number 62 [ 1496.356099][T22059] Bluetooth: hci4: command tx timeout [ 1496.660686][T31612] team0 (unregistering): Port device team_slave_1 removed [ 1496.702737][T31612] team0 (unregistering): Port device team_slave_0 removed [ 1496.719327][T27363] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1496.907234][T27363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.953146][T27363] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.060222][T27363] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1497.110039][T27363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.204876][T27363] usb 5-1: config 0 descriptor?? [ 1497.244329][T27363] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1497.270834][ T1240] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1497.461892][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1497.520441][ T1240] usb 1-1: Using ep0 maxpacket: 32 [ 1497.533083][ T1240] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.574534][ T1240] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1497.630109][ T1240] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1497.688241][ T1240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.707421][ T1240] usb 1-1: Product: syz [ 1497.733440][ T1240] usb 1-1: Manufacturer: syz [ 1497.752372][ T1240] usb 1-1: SerialNumber: syz [ 1497.818097][ T1240] usb 1-1: config 0 descriptor?? [ 1498.473814][T22059] Bluetooth: hci4: command tx timeout [ 1498.977373][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.022368][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.067098][ T889] bridge_slave_0: entered allmulticast mode [ 1499.088054][ T889] bridge_slave_0: entered promiscuous mode [ 1499.131628][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.162721][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.196534][ T889] bridge_slave_1: entered allmulticast mode [ 1499.227602][ T889] bridge_slave_1: entered promiscuous mode [ 1499.440393][ T889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.501226][ T889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.663455][ T889] team0: Port device team_slave_0 added [ 1499.700581][ T889] team0: Port device team_slave_1 added [ 1499.804074][T27363] usb 5-1: USB disconnect, device number 56 [ 1499.958355][ T889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.986166][ T889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.152181][T27363] usb 1-1: USB disconnect, device number 63 [ 1500.227469][ T889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.314935][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1500.346966][ T889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.403906][ T889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.496802][ T889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.755009][ T1023] bridge0: port 4(erspan0) entered blocking state [ 1500.798028][ T1023] bridge0: port 4(erspan0) entered disabled state [ 1500.850607][ T1023] erspan0: entered allmulticast mode [ 1501.013536][ T1023] erspan0: entered promiscuous mode [ 1501.509340][ T1025] macsec1: entered promiscuous mode [ 1501.541200][ T1025] vlan7: entered promiscuous mode [ 1501.563449][ T1025] dummy0: entered promiscuous mode [ 1501.622587][ T1025] vlan7: left promiscuous mode [ 1501.648879][ T1025] dummy0: left promiscuous mode [ 1501.867422][ T889] hsr_slave_0: entered promiscuous mode [ 1501.924946][ T889] hsr_slave_1: entered promiscuous mode [ 1501.969520][ T889] debugfs: 'hsr0' already exists in 'hsr' [ 1502.023365][ T889] Cannot create hsr debugfs directory [ 1503.081819][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8180'. [ 1503.186792][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8180'. [ 1503.204615][ T1051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1503.217170][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8180'. [ 1503.243650][ T1055] netlink: 'syz.9.8180': attribute type 4 has an invalid length. [ 1503.267596][ T1055] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8180'. [ 1503.374830][ T1046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.420440][ T1046] bond3: (slave bond0): making interface the new active one [ 1503.453854][ T1046] bond3: (slave bond0): Enslaving as an active interface with an up link [ 1503.588487][ T1055] .`: renamed from bond0 (while UP) [ 1503.864768][T31604] bond3: (slave .`): link status definitely down, disabling slave [ 1504.026063][T31604] bond3: now running without any active interface! [ 1504.092095][ T1071] fuse: Bad value for 'fd' [ 1505.282447][ T1092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8188'. [ 1506.804951][ T1114] syzkaller0: entered promiscuous mode [ 1506.820666][ T1114] syzkaller0: entered allmulticast mode [ 1507.640087][ T1129] tipc: Started in network mode [ 1507.658590][ T1129] tipc: Node identity 6e6bddafe00c, cluster identity 4711 [ 1507.687857][ T1129] tipc: Enabled bearer , priority 0 [ 1507.731302][ T1130] syzkaller0: entered promiscuous mode [ 1507.745342][ T1130] syzkaller0: entered allmulticast mode [ 1507.765822][ T24] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1507.804009][ T1124] tipc: Resetting bearer [ 1507.933543][ T1124] tipc: Disabling bearer [ 1507.968889][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1507.982579][ T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1507.994256][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1508.025898][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.104145][ T1126] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1508.229719][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1508.299734][ T1141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8196'. [ 1508.498637][ T1122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.632322][ T1122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.812132][ T1148] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8198'. [ 1511.114959][ T24] usb 10-1: USB disconnect, device number 61 [ 1511.931769][ T889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1511.996041][ T889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.063086][ T889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1512.146346][ T889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1512.213458][ T889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1512.320331][ T889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1512.435206][ T889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1512.517804][ T889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.194287][ T889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.688154][ T889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.983631][ T614] bridge0: port 3(syz_tun) entered disabled state [ 1514.134488][ T614] syz_tun (unregistering): left allmulticast mode [ 1514.161302][ T614] syz_tun (unregistering): left promiscuous mode [ 1514.173519][ T614] bridge0: port 3(syz_tun) entered disabled state [ 1514.279383][ T1214] tipc: Started in network mode [ 1514.302408][ T1214] tipc: Node identity 76ae6f03bf19, cluster identity 4711 [ 1514.370968][ T1214] tipc: Enabled bearer , priority 0 [ 1514.415403][ T1208] syzkaller0: entered promiscuous mode [ 1514.438411][ T1208] syzkaller0: entered allmulticast mode [ 1514.464191][T25450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.471861][T25450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.501522][ T1206] tipc: Resetting bearer [ 1514.699894][ T1206] tipc: Disabling bearer [ 1514.821697][T25455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.828976][T25455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.222452][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1516.245897][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1516.272854][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1516.325076][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1516.334272][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1516.833140][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.747419][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.009399][ T889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1518.436819][T22059] Bluetooth: hci3: command tx timeout [ 1518.790115][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.976137][T29722] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1519.156333][T29722] usb 10-1: Using ep0 maxpacket: 8 [ 1519.184991][T29722] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1519.209723][T29722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.253863][T29722] usb 10-1: Product: syz [ 1519.275009][T29722] usb 10-1: Manufacturer: syz [ 1519.292650][T29722] usb 10-1: SerialNumber: syz [ 1519.351476][T29722] usb 10-1: config 0 descriptor?? [ 1519.386883][T29722] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1519.640725][T29722] gspca_sq930x: reg_r 001f failed -32 [ 1519.666690][T29722] sq930x 10-1:0.0: probe with driver sq930x failed with error -32 [ 1519.841348][ T889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.270099][T15394] usb 10-1: USB disconnect, device number 62 [ 1520.433360][ T889] veth0_vlan: entered promiscuous mode [ 1520.517196][T22059] Bluetooth: hci3: command tx timeout [ 1521.194777][T31724] syz_tun (unregistering): left allmulticast mode [ 1521.203023][T31724] syz_tun (unregistering): left promiscuous mode [ 1521.209506][T31724] bridge0: port 3(syz_tun) entered disabled state [ 1521.283873][ T889] veth1_vlan: entered promiscuous mode [ 1521.895651][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.921510][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.949657][ T1245] bridge_slave_0: entered allmulticast mode [ 1521.988343][ T1245] bridge_slave_0: entered promiscuous mode [ 1522.107482][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.137972][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.159132][ T1245] bridge_slave_1: entered allmulticast mode [ 1522.186703][ T1245] bridge_slave_1: entered promiscuous mode [ 1522.362910][ T36] bridge_slave_1: left allmulticast mode [ 1522.375651][ T36] bridge_slave_1: left promiscuous mode [ 1522.403625][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.459746][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1522.482573][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1522.505587][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1522.506953][ T36] bridge_slave_0: left allmulticast mode [ 1522.521757][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1522.533062][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1522.596323][ T5628] Bluetooth: hci3: command tx timeout [ 1522.620690][ T36] bridge_slave_0: left promiscuous mode [ 1522.646372][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.650618][ T1330] fuse: Bad value for 'user_id' [ 1523.655775][ T1330] fuse: Bad value for 'user_id' [ 1524.362317][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.376331][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.392024][ T36] bond0 (unregistering): Released all slaves [ 1524.409061][ T36] bond1 (unregistering): Released all slaves [ 1524.588169][ T1339] netlink: 'syz.0.8224': attribute type 303 has an invalid length. [ 1524.598639][ T5628] Bluetooth: hci2: command tx timeout [ 1524.673446][ T1245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.689660][ T5628] Bluetooth: hci3: command tx timeout [ 1525.007258][ T1245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.104143][ T36] tipc: Left network mode [ 1525.462860][ T1245] team0: Port device team_slave_0 added [ 1525.548426][ T1245] team0: Port device team_slave_1 added [ 1525.996431][ T1245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.050074][ T1245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.193691][ T1245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.291403][ T889] veth0_macvtap: entered promiscuous mode [ 1526.509258][ T36] hsr_slave_0: left promiscuous mode [ 1526.525678][ T36] hsr_slave_1: left promiscuous mode [ 1526.536445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.560069][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.622728][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1526.653743][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.676302][ T5628] Bluetooth: hci2: command tx timeout [ 1526.720603][ T36] veth1_macvtap: left promiscuous mode [ 1526.734966][ T36] veth0_macvtap: left promiscuous mode [ 1526.744380][ T36] veth1_vlan: left promiscuous mode [ 1526.755773][ T36] veth0_vlan: left promiscuous mode [ 1526.901690][ T1354] QAT: Device 198 not found [ 1527.717553][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1528.279954][ T1366] input: syz1 as /devices/virtual/input/input127 [ 1528.570611][ T1245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.597068][ T1245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.728691][ T1245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.756627][ T5628] Bluetooth: hci2: command tx timeout [ 1528.840147][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1528.859730][ T1360] netlink: 'syz.1.8226': attribute type 12 has an invalid length. [ 1529.028434][ T889] veth1_macvtap: entered promiscuous mode [ 1529.320570][ T1245] hsr_slave_0: entered promiscuous mode [ 1529.438052][ T1245] hsr_slave_1: entered promiscuous mode [ 1529.501985][ T1245] debugfs: 'hsr0' already exists in 'hsr' [ 1529.512167][ T1245] Cannot create hsr debugfs directory [ 1529.718326][ T889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.291269][ T889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.371401][ T36] IPVS: stop unused estimator thread 0... [ 1530.539329][T31610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.716530][T31610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.835727][ T5628] Bluetooth: hci2: command tx timeout [ 1530.863023][T31610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.911928][T31610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.902262][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.066947][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1532.565199][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.175710][ T1413] input: syz1 as /devices/virtual/input/input128 [ 1533.514286][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.586547][T31599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.594675][T31599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.808617][ T1426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1534.058107][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.081321][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.095863][ T1316] bridge_slave_0: entered allmulticast mode [ 1534.117137][ T1316] bridge_slave_0: entered promiscuous mode [ 1534.225875][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.233606][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.244400][ T1316] bridge_slave_1: entered allmulticast mode [ 1534.280469][ T1316] bridge_slave_1: entered promiscuous mode [ 1534.293066][T31612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.317005][T31612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.799044][ T1316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.825078][ T1316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.974657][ T1316] team0: Port device team_slave_0 added [ 1535.217698][ T1316] team0: Port device team_slave_1 added [ 1535.572457][ T1316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.608802][ T1316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.745604][ T1316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.840351][ T1316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.876791][ T1316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.994425][ T1316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.055994][ T36] bridge_slave_1: left allmulticast mode [ 1536.075565][ T36] bridge_slave_1: left promiscuous mode [ 1536.093072][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.140137][ T36] bridge_slave_0: left allmulticast mode [ 1536.168324][ T36] bridge_slave_0: left promiscuous mode [ 1536.195846][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.448463][ T36] bond3 (unregistering): (slave .`): Releasing active interface [ 1537.508868][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.547450][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.613879][ T36] .` (unregistering): Released all slaves [ 1537.632046][ T36] bond1 (unregistering): Released all slaves [ 1537.645591][T20740] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1537.677705][ T36] bond2 (unregistering): Released all slaves [ 1537.713933][ T36] bond3 (unregistering): Released all slaves [ 1537.806750][T20740] usb 4-1: Using ep0 maxpacket: 32 [ 1537.835075][T20740] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1537.912788][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1537.913068][T20740] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1537.946075][T20740] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1537.955238][T20740] usb 4-1: Product: syz [ 1538.006825][T20740] usb 4-1: Manufacturer: syz [ 1538.021987][T20740] usb 4-1: SerialNumber: syz [ 1538.045737][ T36] tipc: Left network mode [ 1538.051504][T20740] usb 4-1: config 0 descriptor?? [ 1538.083760][ T1457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1538.111593][T20740] hub 4-1:0.0: bad descriptor, ignoring hub [ 1538.171957][T20740] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1538.787923][ T1316] hsr_slave_0: entered promiscuous mode [ 1538.802959][ T1316] hsr_slave_1: entered promiscuous mode [ 1538.846461][ T1316] debugfs: 'hsr0' already exists in 'hsr' [ 1538.860148][ T1316] Cannot create hsr debugfs directory [ 1539.495739][T29722] usb 4-1: USB disconnect, device number 82 [ 1539.609144][ T36] hsr_slave_0: left promiscuous mode [ 1539.632711][ T36] hsr_slave_1: left promiscuous mode [ 1539.656286][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.685041][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.714779][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.742726][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.829779][ T36] veth1_macvtap: left promiscuous mode [ 1539.851341][ T36] veth0_macvtap: left promiscuous mode [ 1539.867506][ T36] veth1_vlan: left promiscuous mode [ 1539.883273][ T36] veth0_vlan: left promiscuous mode [ 1540.616563][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1540.641973][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1540.795675][ T1457] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1540.874639][ T1245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1540.893346][ T1245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1540.914428][ T1245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1540.964082][ T1245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1541.043172][ T1245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1541.110442][ T1245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1541.182759][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1541.193085][ T1245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1541.262130][ T1245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1541.376569][ T1477] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1541.707510][ T36] IPVS: stop unused estimator thread 0... [ 1542.172178][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1542.195253][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1542.282528][ T1503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1542.304175][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1542.772057][ T1245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.868993][ T1245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.885418][T31604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.892692][T31604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.940810][T31604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.948056][T31604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.985963][ T1406] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1543.157341][ T1245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.168357][ T1406] usb 1-1: Using ep0 maxpacket: 32 [ 1543.198827][ T1406] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1543.232900][ T1406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.255561][ T1406] usb 1-1: config 0 has no interface number 0 [ 1543.274142][ T1406] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1543.314822][ T1406] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1543.321266][ T1245] veth0_vlan: entered promiscuous mode [ 1543.334063][ T1406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.372756][ T1406] usb 1-1: Product: syz [ 1543.394881][ T1406] usb 1-1: Manufacturer: syz [ 1543.432840][ T1245] veth1_vlan: entered promiscuous mode [ 1543.451568][ T1406] usb 1-1: SerialNumber: syz [ 1543.495156][ T1406] usb 1-1: config 0 descriptor?? [ 1543.536666][ T1406] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1543.600075][ T1406] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1544.222492][ T1245] veth0_macvtap: entered promiscuous mode [ 1544.246077][ T1316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1544.278080][ T1316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.291242][ T1245] veth1_macvtap: entered promiscuous mode [ 1544.309268][ T1316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1544.333989][ T1316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.354979][ T1316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1544.380966][ T1316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1544.408851][ T1316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1544.432104][ T1316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1544.488565][ T1245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.562065][ T1245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.697217][T31599] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.714485][T31599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.784749][T31599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.817670][T25455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.379108][T25450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.438849][T25450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.650264][T31604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.668167][ T1316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.675286][T31604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.785176][ T1316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.863084][T29722] usb 1-1: USB disconnect, device number 64 [ 1545.878280][T25455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.885513][T25455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.960212][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.967426][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.078004][T31612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.085267][T31612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.415481][T29722] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1546.586396][T29722] usb 1-1: Using ep0 maxpacket: 8 [ 1546.605444][T29722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1546.649693][ T1567] tipc: Started in network mode [ 1546.663442][T29722] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1546.675724][ T1567] tipc: Node identity beddf3a8ee78, cluster identity 4711 [ 1546.687182][T29722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.697638][ T1567] tipc: Enabled bearer , priority 0 [ 1546.708938][T29722] usb 1-1: Product: syz [ 1546.714066][T29722] usb 1-1: Manufacturer: syz [ 1546.719269][T29722] usb 1-1: SerialNumber: syz [ 1546.731132][ T1568] syzkaller0: entered promiscuous mode [ 1546.739586][ T1568] syzkaller0: entered allmulticast mode [ 1546.750622][T29722] usb 1-1: config 0 descriptor?? [ 1546.806535][T29722] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1546.855964][ T1568] tipc: Resetting bearer [ 1546.874771][ T1567] tipc: Resetting bearer [ 1546.889162][ T1565] tipc: Resetting bearer [ 1546.984230][ T1565] tipc: Disabling bearer [ 1547.097169][ T1316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.237980][T20740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.383892][ T1316] veth0_vlan: entered promiscuous mode [ 1547.397940][ T1406] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1547.450766][ T1316] veth1_vlan: entered promiscuous mode [ 1547.570797][ T1406] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1547.586905][ T1316] veth0_macvtap: entered promiscuous mode [ 1547.588459][ T1406] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 1547.610801][ T1406] usb 6-1: config 114 has no interface number 0 [ 1547.614804][ T1316] veth1_macvtap: entered promiscuous mode [ 1547.625225][ T1406] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1547.641155][ T1406] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1547.654141][ T1406] usb 6-1: config 114 interface 240 has no altsetting 0 [ 1547.687657][ T1406] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1547.690956][ T1316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.698596][ T1406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.712833][ T1406] usb 6-1: Product: syz [ 1547.732874][ T1406] usb 6-1: Manufacturer: syz [ 1547.738674][T15392] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1547.753291][ T1406] usb 6-1: SerialNumber: syz [ 1547.760420][ T1316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.772541][ T1570] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1547.821714][T31612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.849919][T31612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.870899][T31612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.882781][T31612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.915892][T15392] usb 4-1: Using ep0 maxpacket: 32 [ 1547.941867][T15392] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 1547.982579][T15392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.997234][T15392] usb 4-1: config 0 has no interfaces? [ 1548.051161][T15392] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1548.099530][T15392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.145870][T15392] usb 4-1: Product: syz [ 1548.181088][T15392] usb 4-1: Manufacturer: syz [ 1548.270119][T15392] usb 4-1: SerialNumber: syz [ 1548.296829][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.334223][T15392] usb 4-1: config 0 descriptor?? [ 1548.513165][T25450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.530085][T25450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.632026][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8257'. [ 1548.777693][T31599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.793148][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.813823][T31599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.971376][T15392] usb 4-1: USB disconnect, device number 83 [ 1549.000138][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.018097][T29722] gspca_zc3xx: i2c_w status error bc [ 1549.202883][ T1406] ir_usb 6-1:114.240: required endpoints missing [ 1549.274713][ T1406] usb 6-1: USB disconnect, device number 47 [ 1549.354246][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.620447][T29722] gspca_zc3xx: i2c_r status error bc [ 1550.031662][T29722] gspca_zc3xx: reg_r err -71 [ 1550.053282][T29722] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1550.085594][ T1406] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1550.093140][T29722] usb 1-1: USB disconnect, device number 65 [ 1550.107673][ T1587] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1550.276598][ T1406] usb 4-1: Using ep0 maxpacket: 32 [ 1550.285767][ T1587] usb 3-1: config 15 has an invalid interface number: 122 but max is 1 [ 1550.313700][ T1406] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1550.332924][ T1587] usb 3-1: config 15 has an invalid interface number: 4 but max is 1 [ 1550.344792][ T1406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.359074][ T1587] usb 3-1: config 15 has no interface number 0 [ 1550.367136][ T1587] usb 3-1: config 15 has no interface number 1 [ 1550.385632][ T1406] usb 4-1: config 0 has no interface number 0 [ 1550.397954][ T1587] usb 3-1: config 15 interface 122 altsetting 19 endpoint 0x8 has an invalid bInterval 215, changing to 7 [ 1550.410354][ T1406] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1550.426343][ T1587] usb 3-1: config 15 interface 4 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1550.446236][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.461247][T31604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.476980][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.500110][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.515735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.516343][ T1406] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1550.540819][ T1587] usb 3-1: config 15 interface 4 altsetting 7 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1550.555497][ T1406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.564448][ T1587] usb 3-1: config 15 interface 4 altsetting 7 endpoint 0x88 has invalid maxpacket 30236, setting to 1024 [ 1550.577786][ T1406] usb 4-1: Product: syz [ 1550.584176][ T1406] usb 4-1: Manufacturer: syz [ 1550.593144][ T1587] usb 3-1: config 15 interface 4 altsetting 7 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1550.612540][ T1406] usb 4-1: SerialNumber: syz [ 1550.657796][ T1587] usb 3-1: config 15 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1550.721834][ T1406] usb 4-1: config 0 descriptor?? [ 1550.782458][ T1587] usb 3-1: config 15 interface 122 has no altsetting 0 [ 1550.790711][ T1406] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1550.851527][ T1587] usb 3-1: config 15 interface 4 has no altsetting 0 [ 1550.892951][ T1406] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1550.926577][ T1587] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=43.5b [ 1551.014912][ T1587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.132073][ T1587] usb 3-1: Product: syz [ 1551.154340][ T1587] usb 3-1: Manufacturer: syz [ 1551.192077][ T1587] usb 3-1: SerialNumber: syz [ 1551.670393][ T1587] usb 3-1: USB disconnect, device number 74 [ 1552.913187][ T1587] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1552.980960][T20739] usb 4-1: USB disconnect, device number 84 [ 1553.279222][ T1587] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1553.337327][ T1587] usb 3-1: not running at top speed; connect to a high speed hub [ 1553.388186][ T1587] usb 3-1: config 12 has an invalid interface number: 231 but max is 0 [ 1553.463940][ T1587] usb 3-1: config 12 has no interface number 0 [ 1553.513118][ T1587] usb 3-1: config 12 interface 231 has no altsetting 0 [ 1553.581219][ T1587] usb 3-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 1553.661964][ T1587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.740143][ T1587] usb 3-1: Product: syz [ 1553.772095][ T1587] usb 3-1: Manufacturer: syz [ 1553.813706][ T1587] usb 3-1: SerialNumber: syz [ 1554.094530][ T1648] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1554.182068][ T1648] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8265'. [ 1554.318375][ T1648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.369694][ T1648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.597025][ T1668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1554.995946][ T1406] net_ratelimit: 1 callbacks suppressed [ 1554.995959][ T1406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.115755][T20750] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1555.191580][ T1587] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 1555.338191][T20750] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1555.378227][ T1587] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1555.416899][ T1587] dib0700: firmware download failed at 7 with -71 [ 1555.487721][T20750] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1555.524683][ T1587] usb 3-1: USB disconnect, device number 75 [ 1555.543232][T20750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1555.556859][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.577641][T25450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.621536][T27363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.636036][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.645468][T20750] usb 6-1: Product: syz [ 1555.645506][T20750] usb 6-1: Manufacturer: syz [ 1555.645532][T20750] usb 6-1: SerialNumber: syz [ 1555.724255][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.800930][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.871237][T20750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.872386][ T1685] syz_tun: entered promiscuous mode [ 1556.888160][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.478294][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.749984][T20739] usb 6-1: USB disconnect, device number 48 [ 1560.995789][T20739] net_ratelimit: 5 callbacks suppressed [ 1560.995808][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.320324][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.329416][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.343845][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.675659][T29721] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1561.847937][T29721] usb 1-1: Using ep0 maxpacket: 32 [ 1561.872127][T29721] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1561.904212][T29721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.927636][T29721] usb 1-1: config 0 has no interface number 0 [ 1561.973111][T29721] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1562.033521][T29721] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1562.056541][ T1729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8275'. [ 1562.073951][T29721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.113281][T29721] usb 1-1: Product: syz [ 1562.134014][T29721] usb 1-1: Manufacturer: syz [ 1562.151510][T29721] usb 1-1: SerialNumber: syz [ 1562.198736][T29721] usb 1-1: config 0 descriptor?? [ 1562.239372][T29721] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1562.323720][T29721] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1562.352333][ T1747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.373182][ T1747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.411144][ T1747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.444824][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.482118][ T1748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.511029][ T1748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.508645][T15394] usb 1-1: USB disconnect, device number 66 [ 1565.187593][ T1783] netlink: 'syz.0.8280': attribute type 12 has an invalid length. [ 1566.039442][T15392] net_ratelimit: 276 callbacks suppressed [ 1566.039465][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.596361][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.075801][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.084276][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.092542][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.118450][T20750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.136770][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.486935][T29721] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1567.591901][ T1815] tipc: Enabled bearer , priority 0 [ 1567.607534][ T1815] syzkaller0: entered promiscuous mode [ 1567.613278][ T1815] syzkaller0: entered allmulticast mode [ 1567.655528][T29721] usb 3-1: Using ep0 maxpacket: 32 [ 1567.662918][T29721] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1567.674260][T29721] usb 3-1: config 0 has no interface number 0 [ 1567.680645][T29721] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1567.693766][T29721] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1567.703793][T29721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.712534][T29721] usb 3-1: Product: syz [ 1567.727350][T29721] usb 3-1: Manufacturer: syz [ 1567.732133][T29721] usb 3-1: SerialNumber: syz [ 1567.741070][T29721] usb 3-1: config 0 descriptor?? [ 1567.917691][ T1819] tipc: Resetting bearer [ 1568.026116][ T1814] tipc: Resetting bearer [ 1568.160440][ T1814] tipc: Disabling bearer [ 1568.195832][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.747110][T22059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.765022][T22059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.781771][T22059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1568.791696][T22059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1568.803043][T22059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1569.240505][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.697066][ T1842] tipc: Resetting bearer [ 1569.815530][T29722] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1569.860766][ T1842] tipc: Resetting bearer [ 1569.975829][T29722] usb 1-1: Using ep0 maxpacket: 8 [ 1569.984583][T29722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.016063][T29722] usb 1-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 1570.045503][T29722] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.083630][T29722] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.106833][T29722] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 1570.128842][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.148593][T29722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1570.170418][T29722] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 1570.193503][T29722] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 1570.238098][T29722] usb 1-1: Manufacturer: syz [ 1570.263129][T29721] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 1570.282560][T29722] usb 1-1: config 0 descriptor?? [ 1570.307778][T29721] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1570.325666][T29721] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1570.337836][T29721] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1570.355151][T29721] usb 3-1: USB disconnect, device number 76 [ 1570.577620][T31612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.728265][T29722] itetech 0003:06CB:73F5.0048: unbalanced collection at end of report description [ 1570.739115][T29722] itetech 0003:06CB:73F5.0048: probe with driver itetech failed with error -22 [ 1570.917056][ T5628] Bluetooth: hci5: command tx timeout [ 1570.951937][ T1845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.021697][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1571.068191][ T1841] tipc: Resetting bearer [ 1571.087278][T29722] usb 1-1: USB disconnect, device number 67 [ 1571.275170][T31612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.315848][T29721] net_ratelimit: 1 callbacks suppressed [ 1571.315864][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.559784][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.368687][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.397796][ T36] tipc: Resetting bearer [ 1572.860779][T31612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.998950][ T5628] Bluetooth: hci5: command tx timeout [ 1573.156565][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.290029][T31612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.396115][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.482681][T15392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.492137][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.724605][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.765635][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.811470][ T1835] bridge_slave_0: entered allmulticast mode [ 1573.875180][ T1835] bridge_slave_0: entered promiscuous mode [ 1573.966870][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.009619][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.039914][ T1835] bridge_slave_1: entered allmulticast mode [ 1574.083583][ T1835] bridge_slave_1: entered promiscuous mode [ 1574.378697][ T1835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.438191][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.486704][ T1835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.826621][ T1835] team0: Port device team_slave_0 added [ 1574.899682][ T1835] team0: Port device team_slave_1 added [ 1575.085783][ T5628] Bluetooth: hci5: command tx timeout [ 1575.396751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.486180][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.713562][ T1835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.750260][ T1835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.852888][ T1835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.034334][ T1920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8296'. [ 1576.512651][ T1835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.519213][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.528428][ T1587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.588908][ T1835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.778978][ T1835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.155818][ T5628] Bluetooth: hci5: command tx timeout [ 1577.557446][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.584343][T31612] bridge_slave_1: left allmulticast mode [ 1577.600066][T31612] bridge_slave_1: left promiscuous mode [ 1577.641520][T31612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.757383][T31612] bridge_slave_0: left allmulticast mode [ 1577.769352][T31612] bridge_slave_0: left promiscuous mode [ 1577.817477][T31612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.432788][ T1934] fuse: Unknown parameter 'use00000000000000000000' [ 1578.598985][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.862292][ T1938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1579.635859][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.688943][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.412934][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.860864][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.898095][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.989238][T29722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.124620][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.712518][ C1] sched: DL replenish lagged too much [ 1592.275856][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.686398][ T1406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.025772][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.606020][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.060920][T29721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.685481][T31608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.905687][T25457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.596585][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.609818][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.040649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.521240][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1614.276343][T20740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.690635][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.728791][T25496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.758129][T20740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.587234][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.306972][T20739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.389963][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.039305][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.304963][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.384004][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.264738][ T1406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.194277][T22059] Bluetooth: hci3: command 0x0406 tx timeout [ 1653.637487][T31599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.131070][T20737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.542884][ T1406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.560902][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.817350][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.893998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.218723][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.232284][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.968630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.675793][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.858842][ T1240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.865301][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1683.872299][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1900/1:b..l [ 1683.881010][ C0] rcu: (detected by 0, t=10503 jiffies, g=325941, q=3404 ncpus=2) [ 1683.888925][ C0] task:syz.5.8294 state:R running task stack:24728 pid:1900 tgid:1896 ppid:1245 task_flags:0x40044c flags:0x00080002 [ 1683.904752][ C0] Call Trace: [ 1683.908059][ C0] [ 1683.911004][ C0] __schedule+0x1821/0x5740 [ 1683.915648][ C0] ? __pfx___schedule+0x10/0x10 [ 1683.920787][ C0] ? kasan_check_range+0x9d/0x2c0 [ 1683.925848][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1683.931245][ C0] preempt_schedule_common+0x82/0xd0 [ 1683.936563][ C0] preempt_schedule_thunk+0x16/0x30 [ 1683.941790][ C0] _raw_spin_unlock+0x3f/0x50 [ 1683.946486][ C0] __zap_vma_range+0x3d17/0x4b40 [ 1683.951506][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1683.956871][ C0] ? mas_find+0xb0e/0xd30 [ 1683.961226][ C0] ? unmap_vmas+0x1bd/0x530 [ 1683.965758][ C0] unmap_vmas+0x379/0x530 [ 1683.970115][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1683.975009][ C0] exit_mmap+0x280/0x9e0 [ 1683.979468][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1683.984279][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1683.989670][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1683.994896][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1684.000030][ C0] ? __khugepaged_exit+0x347/0x460 [ 1684.005168][ C0] __mmput+0x118/0x430 [ 1684.009253][ C0] exit_mm+0x18e/0x250 [ 1684.013360][ C0] do_exit+0x6a2/0x22c0 [ 1684.017539][ C0] ? cgroup1_freezing+0x20/0x350 [ 1684.022494][ C0] ? __pfx_do_exit+0x10/0x10 [ 1684.027103][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1684.032156][ C0] do_group_exit+0x21b/0x2d0 [ 1684.036767][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1684.041984][ C0] get_signal+0x1284/0x1330 [ 1684.046528][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 1684.052097][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1684.058291][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 1684.063590][ C0] ? rcu_is_watching+0x15/0xb0 [ 1684.068372][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.074540][ C0] do_syscall_64+0x33e/0xf80 [ 1684.079150][ C0] ? trace_irq_disable+0x3b/0x140 [ 1684.084223][ C0] ? clear_bhb_loop+0x40/0x90 [ 1684.089097][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.095007][ C0] RIP: 0033:0x7face6d9cdd9 [ 1684.099442][ C0] RSP: 002b:00007face7b900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1684.107871][ C0] RAX: fffffffffffffe00 RBX: 00007face7016098 RCX: 00007face6d9cdd9 [ 1684.115856][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007face7016098 [ 1684.123842][ C0] RBP: 00007face7016090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.131822][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.139810][ C0] R13: 00007face7016128 R14: 00007face713f960 R15: 00007face713fa48 [ 1684.147817][ C0] [ 1684.150850][ C0] rcu: rcu_preempt kthread starved for 469 jiffies! g325941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1684.161965][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1684.171950][ C0] rcu: RCU grace-period kthread stack dump: [ 1684.177866][ C0] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1684.191728][ C0] Call Trace: [ 1684.195022][ C0] [ 1684.197969][ C0] __schedule+0x1821/0x5740 [ 1684.202575][ C0] ? __pfx___schedule+0x10/0x10 [ 1684.207455][ C0] ? schedule+0x90/0x360 [ 1684.211738][ C0] schedule+0x164/0x360 [ 1684.215912][ C0] schedule_timeout+0x158/0x2c0 [ 1684.220782][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1684.226181][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1684.231577][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1684.237410][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1684.243000][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1684.247972][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1684.254145][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1684.259446][ C0] ? _raw_spin_unlock_irq+0x45/0x50 [ 1684.264668][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1684.270498][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1684.275115][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.280413][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1684.286241][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1684.291206][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1684.296265][ C0] kthread+0x388/0x470 [ 1684.300356][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.305569][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.310183][ C0] ret_from_fork+0x514/0xb70 [ 1684.314797][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.319927][ C0] ? __switch_to+0xc79/0x1410 [ 1684.324632][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.329248][ C0] ret_from_fork_asm+0x1a/0x30 [ 1684.334049][ C0] [ 1684.337077][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1684.343412][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1684.348720][ C1] NMI backtrace for cpu 1 [ 1684.348749][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1684.348793][ C1] Tainted: [L]=SOFTLOCKUP [ 1684.348805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1684.348821][ C1] RIP: 0010:__lock_acquire+0x424/0x2cf0 [ 1684.348843][ C1] Code: 8d 3d 10 5c 92 0e 48 c7 c6 95 29 0c 8e 67 48 0f b9 3a 90 31 c9 84 db 0f 84 d6 01 00 00 41 8b 45 20 66 85 c0 0f 88 c9 01 00 00 <4c> 89 ed 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca 89 [ 1684.348856][ C1] RSP: 0000:ffffc90000a07b70 EFLAGS: 00000002 [ 1684.348874][ C1] RAX: 0000000000022007 RBX: 0000000000000003 RCX: ffffffff93e208e8 [ 1684.348885][ C1] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000000 [ 1684.348894][ C1] RBP: 0000000000000002 R08: ffffffff8176f256 R09: ffffffff8e95cd60 [ 1684.348905][ C1] R10: ffffc90000a07e78 R11: ffffffff81b0ebd0 R12: 0000000000000007 [ 1684.348915][ C1] R13: ffff88801dad8be0 R14: ffff88801dad8000 R15: ffff88801dad8b90 [ 1684.348927][ C1] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 1684.348939][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1684.348950][ C1] CR2: 0000001b2ec1cff8 CR3: 0000000051a2c000 CR4: 00000000003526f0 [ 1684.348964][ C1] Call Trace: [ 1684.348971][ C1] [ 1684.348980][ C1] ? ktime_get+0x45/0x220 [ 1684.349007][ C1] ? lock_acquire+0x106/0x350 [ 1684.349024][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349042][ C1] ? lock_acquire+0x106/0x350 [ 1684.349058][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349074][ C1] lock_acquire+0x106/0x350 [ 1684.349089][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349108][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349125][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1684.349141][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349157][ C1] unwind_next_frame+0xc3/0x2550 [ 1684.349173][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349191][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349208][ C1] ? handle_softirqs+0x22a/0x840 [ 1684.349223][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1684.349237][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1684.349259][ C1] arch_stack_walk+0x11b/0x150 [ 1684.349279][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1684.349294][ C1] stack_trace_save+0xa9/0x100 [ 1684.349314][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1684.349336][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1684.349353][ C1] ? common_startup_64+0x13e/0x147 [ 1684.349373][ C1] kasan_save_track+0x3e/0x80 [ 1684.349391][ C1] ? kasan_save_track+0x3e/0x80 [ 1684.349408][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1684.349426][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1684.349445][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 1684.349462][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 1684.349484][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 1684.349498][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 1684.349511][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 1684.349525][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1684.349540][ C1] ? nf_hook_slow+0xc5/0x220 [ 1684.349560][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1684.349576][ C1] ? NF_HOOK+0x336/0x3c0 [ 1684.349592][ C1] ? process_backlog+0xaa3/0x1950 [ 1684.349608][ C1] ? __napi_poll+0xae/0x340 [ 1684.349622][ C1] ? net_rx_action+0x627/0xf70 [ 1684.349637][ C1] ? handle_softirqs+0x22a/0x840 [ 1684.349651][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1684.349680][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1684.349699][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1684.349718][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 1684.349734][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1684.349754][ C1] __alloc_skb+0x1d0/0x7d0 [ 1684.349772][ C1] synproxy_send_client_synack+0x172/0xe30 [ 1684.349798][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1684.349819][ C1] ? nft_masq_eval+0x340/0x4a0 [ 1684.349838][ C1] ? synproxy_pernet+0x45/0x270 [ 1684.349854][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1684.349870][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1684.349884][ C1] ? lock_acquire+0x106/0x350 [ 1684.349899][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1684.349916][ C1] nft_synproxy_do_eval+0x305/0x580 [ 1684.349932][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1684.349948][ C1] ? clockevents_program_event+0x491/0x630 [ 1684.349970][ C1] nft_do_chain+0x48d/0x1ae0 [ 1684.349986][ C1] ? rcu_is_watching+0x15/0xb0 [ 1684.350012][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1684.350029][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1684.350049][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 1684.350070][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1684.350086][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1684.350100][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1684.350117][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1684.350138][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1684.350153][ C1] nf_hook_slow+0xc5/0x220 [ 1684.350175][ C1] NF_HOOK+0x21f/0x3c0 [ 1684.350191][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1684.350209][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1684.350225][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1684.350241][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1684.350260][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1684.350279][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1684.350298][ C1] NF_HOOK+0x336/0x3c0 [ 1684.350315][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1684.350332][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1684.350348][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1684.350366][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1684.350385][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1684.350402][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1684.350417][ C1] ? process_backlog+0x3eb/0x1950 [ 1684.350434][ C1] process_backlog+0xaa3/0x1950 [ 1684.350456][ C1] __napi_poll+0xae/0x340 [ 1684.350471][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1684.350488][ C1] net_rx_action+0x627/0xf70 [ 1684.350509][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1684.350525][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1684.350550][ C1] ? net_tx_action+0x5b6/0xc30 [ 1684.350567][ C1] ? net_tx_action+0xbfb/0xc30 [ 1684.350585][ C1] handle_softirqs+0x22a/0x840 [ 1684.350601][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1684.350618][ C1] __irq_exit_rcu+0xca/0x220 [ 1684.350633][ C1] irq_exit_rcu+0x9/0x30 [ 1684.350646][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1684.350666][ C1] [ 1684.350671][ C1] [ 1684.350677][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1684.350693][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1684.350712][ C1] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 a1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1684.350725][ C1] RSP: 0000:ffffc90000197e20 EFLAGS: 00000246 [ 1684.350738][ C1] RAX: 000000000358528d RBX: ffffffff819a93ba RCX: 0000000080000001 [ 1684.350748][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa6837 RDI: ffffffff8c28af60 [ 1684.350759][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1684.350770][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1684.350780][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1684.350792][ C1] ? do_idle+0x36a/0x5f0 [ 1684.350813][ C1] default_idle+0x9/0x20 [ 1684.350826][ C1] default_idle_call+0x72/0xb0 [ 1684.350841][ C1] do_idle+0x36a/0x5f0 [ 1684.350856][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1684.350874][ C1] ? __pfx_do_idle+0x10/0x10 [ 1684.350893][ C1] cpu_startup_entry+0x43/0x60 [ 1684.350909][ C1] start_secondary+0x101/0x110 [ 1684.350923][ C1] common_startup_64+0x13e/0x147 [ 1684.350947][ C1] [ 1685.189002][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.226125][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.709608][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.151261][T15394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.347356][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.876280][T25468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog