last executing test programs: 31m30.175102992s ago: executing program 0 (id=1585): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10c00, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ec0bae427a62b4b5162551b84ee7fc1aea485e86501c9ec8357b69d25fdc6045"}) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x80db, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xd9}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x20, 0x16, 0x205, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0xa}]}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) 31m30.046415473s ago: executing program 0 (id=1587): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000040)={0x80000030, 0x0}) 31m29.914966912s ago: executing program 0 (id=1589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0x68, &(0x7f0000001100)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@generic={0x11, "823072b959d1635e5e9fc35199389982a9e4d181f794c098921d1e2bb98457adfa67fc720738d5f18a166752634b6f3c6cc41e432121f00ebdbbbe65b4ac6d4951f655dc568a975d17158375feb14ada0dfc45466453edf2a698"}}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x400002) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) timerfd_gettime(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 31m26.724598811s ago: executing program 0 (id=1603): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x76f, 0x0, 0x6, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x9, 0x7f, 0x66, 0xdf60, 0x0, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000680)={0x320120000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x25}, &(0x7f0000000240)=""/124, 0x7c, &(0x7f0000000440)=""/217, &(0x7f0000000600)=[r2, r3, r4], 0x3, {r5}}, 0x58) write$qrtrtun(r1, &(0x7f0000000400)='\v', 0x1) 31m26.530985038s ago: executing program 0 (id=1604): socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x8, 0x3, 0x10, "f2a4583e78dfbe19cb7211319fdecf156da967b0d4ba75212feb8bc3c41736d8", 0x30314142}) syz_emit_ethernet(0x42, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}, @ssrr={0x89, 0x7, 0xd5, [@multicast1]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(0x0, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 31m26.243006174s ago: executing program 0 (id=1607): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="001207"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x40, 0x21, 0xa9, {0xa9, 0xc, "6d78f880b274c3eceeadb9a1b355bf8f637a324c3a1d75a7b67d834ba09b2771c5689928eb4f64abc3f8a38af04d683ebf2fcfd91961b5db3caefe4d9e318abee2290b6c688f072e6bae3e1250b3e5ac7fb21dda94a4b8f799531a2811326a8cb072dd2087102769eb171611eaf963ec7b50eb877934ecffc023880158a8f85ddf9cd96676f9c9de51940c6a1f8e9079dde0c51b17c3305169b302ec0e524f88b3465a8b0691aa"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x20, 0xa, 0x1f, "c5b74a93eaecbd3b1068ecc62afc70a524abca0ef1353f74a72480fff27c7e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x3, "5094ea"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "d70646"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "a533"}, &(0x7f0000000600)={0x20, 0x84, 0x2, "5edb"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "81510d"}}) 31m25.837271152s ago: executing program 32 (id=1607): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="001207"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x40, 0x21, 0xa9, {0xa9, 0xc, "6d78f880b274c3eceeadb9a1b355bf8f637a324c3a1d75a7b67d834ba09b2771c5689928eb4f64abc3f8a38af04d683ebf2fcfd91961b5db3caefe4d9e318abee2290b6c688f072e6bae3e1250b3e5ac7fb21dda94a4b8f799531a2811326a8cb072dd2087102769eb171611eaf963ec7b50eb877934ecffc023880158a8f85ddf9cd96676f9c9de51940c6a1f8e9079dde0c51b17c3305169b302ec0e524f88b3465a8b0691aa"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x20, 0xa, 0x1f, "c5b74a93eaecbd3b1068ecc62afc70a524abca0ef1353f74a72480fff27c7e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x81, 0x3, "5094ea"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "d70646"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "a533"}, &(0x7f0000000600)={0x20, 0x84, 0x2, "5edb"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "81510d"}}) 24m15.546816327s ago: executing program 1 (id=3149): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xfffffffa}}, 0x3b, 0x3, 0x6, 0xa, 0x7ff}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @private=0xa010102}}, [0xe6, 0x8, 0x7fffffff, 0x2, 0x7, 0xfff, 0x3, 0xfffffffffffffffe, 0x6, 0xffff, 0xbf1, 0x6, 0x1, 0xffffffff80000000, 0x8]}, &(0x7f00000002c0)=0x100) 24m15.323326123s ago: executing program 1 (id=3150): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x10002, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x52140) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/4096) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x1000000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc88f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r5, 0x2219, 0x7723, 0x16, 0x0, 0x0) 24m14.28761083s ago: executing program 1 (id=3155): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) 24m11.412953386s ago: executing program 1 (id=3168): r0 = memfd_create(&(0x7f0000000080)='XQ\xf6oM/\x97!\x1c\x1a\x8c(%\x1d\xb4\xd5L)\xcc\xf1rK\xeaH!R\x7fv\xbb\xe9~\xbb\x9f1\xf3d\xba\xb3\xc9\xf8Mo4\xa8\xb9\x1dYe\xb7\xaa\x91\xbc\xbf\xf4\v\xce\x1f^\x00\xd8\xd2\x92h\xef\xb9\xe5\x9b\xf8\x82\x9a\b\xe9\xc4\xf0\xdc\xfd6\x15Gh@o\xe6\xe3\x8e<[#>r9j\xd8\xfa\xf7\xeb\xc46*$$,\xa4\xcd\x125\xd4\x86\f_W\xf8O?\x97\'\xea\x87\x80\xf4KT\x90\xbcIE\x9aM\x01y\xf4\xd6\xb5\xafl:\xd8\xb9\x90\xcc\xc9', 0x2) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000104010400000000000000000300000508000540000000050500010001000000080003400000000208000440000000090a0002"], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0xc894) 24m11.051619983s ago: executing program 1 (id=3169): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) 24m10.045559931s ago: executing program 1 (id=3172): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, r0, 0x0) socket(0xb, 0x5, 0xffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa12, 0x65aa}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa12, 0x65aa}, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x101202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x24000084) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x24000084) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8820, &(0x7f0000000200)={[{@metacopy_off}, {@index_off}]}) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8820, &(0x7f0000000200)={[{@metacopy_off}, {@index_off}]}) 23m54.728177231s ago: executing program 33 (id=3172): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, r0, 0x0) socket(0xb, 0x5, 0xffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa12, 0x65aa}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa12, 0x65aa}, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x101202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x24000084) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x24000084) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8820, &(0x7f0000000200)={[{@metacopy_off}, {@index_off}]}) (async) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8820, &(0x7f0000000200)={[{@metacopy_off}, {@index_off}]}) 18m26.922738372s ago: executing program 6 (id=4567): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x1, 0x80a0000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000f904000000000000000107020000000000"], 0x18}}], 0x1, 0xc0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) close(r4) 18m26.242983564s ago: executing program 6 (id=4568): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/63, 0x3f}, {0x0}, {0x0}, {&(0x7f0000000540)=""/11, 0xb}, {0x0}], 0x7, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000dc0), 0x408041, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r2 = request_key(&(0x7f0000000cc0)='.dead\x00', &(0x7f0000000d00)={'syz', 0x1}, &(0x7f0000000d40)='skcipher\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x2}, 0x0, 0x0, r2) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 18m25.278605958s ago: executing program 6 (id=4573): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x80, 0x202) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)=0x5) syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xd, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0xfff, 0x2, 0x1, 0x2, 0x7, 0x1, 0x0, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x9, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x5, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0x10000b, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x7, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0x7f, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xfe, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7c, 0x200, 0x6, 0x2001, 0x6, 0xfffffff5, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x80000001, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x20004f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000100)='5\x00', 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYBLOB="030011002ad397d0b6ff61ebd124ba7bed"], 0xa) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000004100)={0x6, 0x104, 0x2, 0x800, 0xd, 0x0, 0x5, 0x401, r10}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000cc0)={0x0, 0x7}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000016c0)={0x0, 0x6, 0x8001, 0x400}, &(0x7f0000001700)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001a00)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000001ac0)=0x84) ptrace$setregset(0x4205, r4, 0x6, &(0x7f00000004c0)={&(0x7f00000002c0)="4584c14679db933c3e4577a6aaa657d67061abdd0cb33e19c50e8d8a0f1eef62a806024b449c3f988ff2b527bd99e6cc3cd03257fd6e07cb3c6339787952e960b71a91313d5f775c5e5e6c662cc10a4e212648234c5b1d4df05c24af9d87d6", 0x5f}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001b00)={0x0, 0x2275, 0x20}, &(0x7f0000001b40)=0xc) 18m24.510034583s ago: executing program 6 (id=4576): syz_open_dev$dri(&(0x7f0000000180), 0x3fffffc, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r5 = socket(0x1, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x9, 0xffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket(0x23, 0x80805, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x444, 0x3c, 0x400, 0x70bd28, 0x25dfdbfc, {0x15}, [@nested={0x4, 0x4d}, @nested={0x429, 0xa3, 0x0, 0x1, [@generic="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"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x4004801}, 0x80) setrlimit(0x7, &(0x7f0000000400)) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r5, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 18m23.535522091s ago: executing program 6 (id=4580): r0 = socket$alg(0x26, 0x5, 0x0) open(0x0, 0x1cd142, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 18m22.754852902s ago: executing program 6 (id=4582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xac, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x88, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8005}, 0x4008000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x1, 0xb) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0xa) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, r7, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 18m7.397035924s ago: executing program 34 (id=4582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xac, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x88, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8005}, 0x4008000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x1, 0xb) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0xa) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, r7, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 14m41.702217307s ago: executing program 2 (id=5309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x1000006}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00004a3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeee, 0x2150, 0xffffffffffffffff, 0x36d0000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x82) write$P9_RGETLOCK(r1, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x8f0, &(0x7f0000002400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r5, &(0x7f0000000040), 0x0) mmap$dsp(&(0x7f0000897000/0x3000)=nil, 0x3000, 0x300000d, 0x8012, r1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 14m41.123806019s ago: executing program 2 (id=5313): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0xb000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="058c"]) 14m40.943575679s ago: executing program 2 (id=5315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x10000005) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="18b6d733"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x200000000028) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 14m40.84960519s ago: executing program 2 (id=5316): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) listen(0xffffffffffffffff, 0xfffffffd) socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r4, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}], 0x1) futex(&(0x7f000000cffc)=0x40000000, 0x6, 0x80, 0x0, 0x0, 0xffffffec) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6]) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet(0xa, 0x801, 0x84) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socket$kcm(0x11, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcm3724\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xe, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) 14m39.606695142s ago: executing program 2 (id=5319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) 14m37.204093781s ago: executing program 2 (id=5325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000040)={@bcast, @default}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 14m37.044901311s ago: executing program 35 (id=5325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000040)={@bcast, @default}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 12m38.779720752s ago: executing program 3 (id=5557): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 12m29.303096564s ago: executing program 3 (id=5582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_tcp_int(r5, 0x6, 0x17, 0x0, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) (rerun: 64) ftruncate(r7, 0x8800000) (async) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x3) sendfile(r8, r7, 0x0, 0x558410e9) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x73, @rand_addr=0x64010100, 0x4e24, 0x2, 'sed\x00', 0x1, 0x5, 0x1c}, 0x2c) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00082abd7000fcdbdf25420000000c00990009000000460000000a00060050505050505000000a0006000802110000000000ac736ff3696134762fabecf55af60f9b60fe7b9d9473395019a2d963dbb381d11065b371ea7aa4202946f663984933558e02d8877ae8e8066842e1840478474b87aa5770816cdca4fe8c731b25b40e9a0956725a3804f6fb93283cec66f5f19c61892393e6296e882adfeba4ea5a3033fd9c56e0373eec9d090753602987c94b"], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x8010) (async) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000700)=0x31) 12m28.756253847s ago: executing program 3 (id=5585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ae00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ff4570bdc2085713cc5f07ffffb703000008000000b704000070b121a5b738dca6191c00000000850000008200"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002000010000090000fbdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x0) 12m27.216721643s ago: executing program 3 (id=5589): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 12m26.852567736s ago: executing program 3 (id=5594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 12m26.392297887s ago: executing program 3 (id=5596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_usbip_server_init(0x1) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 12m10.95156115s ago: executing program 36 (id=5596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_usbip_server_init(0x1) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 17.505595109s ago: executing program 9 (id=7386): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10) openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60002, 0x0, 0x13, r1, 0x0) (fail_nth: 2) writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000001780)="8ab3136b1b4a4f795fd5eef991293ef7fbf3970502676d4b26ae28dc6a5c7345ad1a52d8e605000000496e66e7fd8b00ea2fc7ddba2274cf71d70800d9a01be400d3c3fb27a5451b2de2519d362a2d6c1c59fdf8d13a343411b85c3b498a96597e4a1ccc6f17c3192eceb5c557340a6f0100d000fdaa6c52b17d60067d20506cb14b45694741943444cf84f8eaaee532ebe375bdba2672b9e973e316ab6ab5c2bf1fa7a1ac92511c860500000000000000d7539615a8328c5b1c860b723f", 0xbe}, {&(0x7f00000006c0)="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", 0xf7d}, {0x0}], 0x5) 16.79792174s ago: executing program 5 (id=7388): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) mlockall(0x7) read$msr(r0, &(0x7f000001a440)=""/102400, 0x19000) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0xffff}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000440)=""/192, &(0x7f0000000500)=0xc0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) prlimit64(0x0, 0xa, &(0x7f0000000080)={0x802, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd596be270231ff2f, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) 16.527318151s ago: executing program 9 (id=7389): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x207fffffffd, 0x8000000000000000, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x5, 0x34, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x402, {0x2}, [{0x4}]}, 0xa7}}, 0x10040084) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000240), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000140), &(0x7f00000002c0), &(0x7f00000001c0), 0x0, 0x1}) mount$nfs(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001c80), 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000109040000ff02020000052406000005240000000d240f010024130005240102ff032413"], 0x0) 16.122975649s ago: executing program 5 (id=7391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x2010, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 13.214229669s ago: executing program 9 (id=7396): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x0, 0x10c) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@euid_lt={'euid<', r4}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '*('}}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) listen(r0, 0x2) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000008000000a300e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12.955306839s ago: executing program 4 (id=7397): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'macvlan0\x00', {0x8}, 0x6}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x3, 0x8}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x86, 0x9, 0x0, 0x9}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.840141642s ago: executing program 5 (id=7399): userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xf99, 0x5, 0x0, 0x7d90, 0xffffffffffffffff}) sched_setattr(r3, &(0x7f00000002c0)={0x38, 0x509ecdb3fbbcfdee, 0x0, 0xa, 0x7f, 0x9, 0xa, 0x10001, 0x7, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01ceff00a2283794871938dc"], 0x14}}, 0x804) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 11.839348789s ago: executing program 9 (id=7400): openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x1, 0x0, 0x5, 0xfffd, 0x3}, 0x20) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) (async) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 11.82568567s ago: executing program 8 (id=7401): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, 0x0, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) close(r9) 10.367718476s ago: executing program 8 (id=7403): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, 0x0, 0x2004c800) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) 9.406027667s ago: executing program 8 (id=7404): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x207fffffffd, 0x8000000000000000, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x5, 0x34, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x402, {0x2}, [{0x4}]}, 0xa7}}, 0x10040084) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000240), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000140), &(0x7f00000002c0), &(0x7f00000001c0), 0x0, 0x1}) mount$nfs(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001c80), 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000109040000ff02020000052406000005240000000d240f010024130005240102ff032413"], 0x0) 9.038431358s ago: executing program 9 (id=7405): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000300)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffffff71, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deae", 0x13}], 0x3}}], 0x1, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x16b0, 0x0) io_uring_enter(r3, 0x2219, 0x1007721, 0x16, 0x0, 0x31) socket(0x21, 0x2, 0xa) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 8.411727602s ago: executing program 4 (id=7406): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0x40044102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) shutdown(r4, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 7.299203442s ago: executing program 7 (id=7408): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x3, 0x8}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.187656217s ago: executing program 5 (id=7409): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 6.858044658s ago: executing program 5 (id=7410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x2010, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 6.691722405s ago: executing program 4 (id=7411): read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/170, 0xf7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@euid_lt={'euid<', r4}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '*('}}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) listen(r0, 0x2) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000008000000a300e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 5.857970982s ago: executing program 8 (id=7412): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket(0x21, 0x2, 0x4) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000080), 0x1001) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffba83) pipe(&(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x80c4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) 4.638063041s ago: executing program 4 (id=7413): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e24, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe03, 0x0, 0x6, 0xffffffffffff8000}, 0x0, 0x1002, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8004, 0xfffffffd}}, 0xe8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r8) socket$inet_mptcp(0x2, 0x1, 0x106) 4.601778063s ago: executing program 8 (id=7414): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 3.433238834s ago: executing program 9 (id=7415): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000180000000", @ANYRES32, @ANYBLOB="0200008000"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000280)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x6, 0xb, 0x1, 0x464, 0x8000040000000001, 0xb3, 0x8, 0x5, 0x4000000000000008, 0xfff, 0x2081, 0x0, 0x1ff, 0xe6, 0xb286], 0x4, 0x40410}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) 3.283376636s ago: executing program 7 (id=7416): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'macvlan0\x00', {0x8}, 0x6}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x3, 0x8}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x86, 0x9, 0x0, 0x9}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2.37890512s ago: executing program 5 (id=7417): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2.069213071s ago: executing program 7 (id=7418): r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0xeb0, &(0x7f0000000180)=[0x81, 0x7, 0x1, 0x4, 0x8, 0x2, 0x7, 0x9, 0x10, 0x4905, 0x200, 0x8, 0x80000001, 0x1ff, 0x5, 0x7, 0x6, 0xfff, 0x6, 0xf0da, 0x0, 0x0, 0x4d, 0x1c, 0x66f8964d, 0x80000000, 0x4, 0x20c, 0x9, 0x4, 0x0, 0x80000000, 0x0, 0x7, 0xffffff3f, 0x8, 0x3, 0xfffffffd, 0x9, 0x6, 0xb45, 0xfff, 0xc, 0x4, 0x0, 0xfe, 0x1, 0x10001, 0xffff5fcf, 0xe97e, 0xfffffffa, 0x7fff, 0x3, 0x4, 0x0, 0x4ab, 0xc5, 0x81, 0x8, 0x4, 0x9, 0xbc9f, 0x5, 0x44, 0x7, 0x3, 0x0, 0x0, 0xe0000000, 0x7, 0xfffffff9, 0x400, 0xd29, 0x32, 0x0, 0x6, 0x5, 0x5, 0x7, 0x67, 0x7, 0x1, 0x8, 0x1000, 0x3, 0x5, 0x3, 0x7, 0x188b, 0x5, 0x4, 0x6, 0xc68b, 0x1, 0x75, 0x619, 0x4, 0x6568, 0xfffffffe, 0xfffffffd, 0x0, 0x9, 0x2, 0x9, 0x8, 0x7, 0x9d, 0x800, 0x2, 0x60a, 0x7, 0x5, 0xc17f604, 0x3, 0x10, 0xc0d2, 0x7, 0x2, 0x8, 0x10, 0xfffffe01, 0x1, 0x1, 0xc, 0x43200, 0x1, 0x7fffffff, 0x2, 0x0, 0x7fff, 0x8, 0x5, 0xdf94, 0xfffffffc, 0xb555, 0xf7, 0x5, 0x77, 0xffff, 0x8, 0xfffffffd, 0x4, 0x76b, 0x10001, 0xa76, 0x81, 0xe, 0x7fffffff, 0x800, 0x0, 0xe6, 0x6, 0x4, 0x73, 0x1, 0x7fff, 0x71, 0x7f, 0xffffff81, 0x5, 0xe3, 0x0, 0x80000000, 0x1, 0x8000, 0x6, 0xfffffff9, 0x10001, 0x5, 0x3ff, 0x5, 0xffff, 0x0, 0x54e, 0x10000, 0x8, 0x4b8, 0x1, 0x9, 0x101, 0x9, 0x1, 0x4, 0x100, 0x80, 0x1, 0x2, 0xfffff61d, 0x5, 0x644e3b08, 0x8, 0xfffffffb, 0x9, 0x1ff, 0x8001, 0x197, 0x6, 0x3, 0x10000, 0x7ff, 0x3, 0x8, 0xe988, 0x81, 0x40, 0x8, 0x8, 0x3, 0x6, 0x1fb3e3fc, 0x5, 0x4, 0x80000000, 0x3, 0xe, 0x10, 0xdecf, 0x5f24, 0x5, 0x6, 0x80, 0x4, 0x2, 0x4, 0x7, 0x5, 0x98, 0xf2, 0x8, 0x80000001, 0x464, 0xa6, 0x0, 0x9, 0x8976, 0x1, 0x0, 0x7, 0x1, 0x9, 0xffffffff, 0x1, 0x6, 0x0, 0x1, 0x200, 0x2b1, 0x14a0, 0x4, 0x0, 0x1, 0xfffffffa, 0x8, 0x1000, 0x2, 0x1000, 0x3, 0xb, 0xe74c, 0x6, 0x4, 0xfffffffd, 0x8, 0x0, 0x7ff, 0x2, 0x8, 0x2, 0x9, 0x1000, 0x64, 0x8, 0x10001, 0x7f, 0x0, 0x200, 0x4, 0xfffff710, 0xf27, 0x6, 0x4, 0x3, 0x9, 0x2, 0x0, 0x9, 0x400, 0x5, 0x5, 0x4, 0xffffff01, 0x7, 0x28, 0x7, 0x5, 0x9, 0x2, 0x3, 0x3ecb, 0x1e, 0x9, 0x1, 0x80000000, 0x80000001, 0x0, 0x3, 0x7, 0x2, 0x1, 0xabda, 0xfc9e, 0x2, 0x2, 0x9, 0x3, 0x7, 0x0, 0x200, 0x7f, 0x1ff, 0x8001, 0x3, 0x3, 0x2, 0xffffffc0, 0x8ea1, 0xc707, 0x3, 0x4, 0x200, 0x4, 0x5, 0x5415, 0x8, 0x8a, 0x2, 0x1, 0xfffffff7, 0x8, 0x4, 0xc, 0x7, 0x4, 0x5, 0x5, 0x400, 0x3, 0xc2eb, 0x5, 0xffffffff, 0x5, 0x4c000000, 0x401, 0x7, 0x800, 0x75d9, 0xfffffffa, 0xffffffff, 0x101, 0x5, 0x3, 0x8, 0xfffffffd, 0x2, 0x1, 0x4, 0x4, 0x8, 0xffffffff, 0x10000, 0x400, 0x0, 0x6, 0xe489, 0x1, 0x7, 0x167, 0x2, 0x8, 0x8, 0x4, 0x0, 0x8, 0x0, 0x10, 0x5, 0x8000, 0x80, 0x9, 0x7, 0x40, 0x1, 0x40, 0x3, 0x543e, 0x6, 0x49, 0x1, 0x3d11, 0x7, 0x200, 0x0, 0x6, 0x6, 0x4, 0x7, 0x10, 0xcf33, 0xa1, 0x400, 0x7ff, 0x8, 0x5, 0x7ff, 0x0, 0x1fe0, 0x200, 0x6, 0x5, 0xfda, 0xd1, 0x7, 0x3, 0x8, 0x6, 0x8, 0x70000000, 0x2c8b, 0x7fff, 0x1, 0x3ff, 0x4, 0x4, 0x9, 0x2a81, 0x1, 0x80, 0xc, 0x1, 0x8, 0x5481, 0x20000000, 0x7, 0xb, 0x7, 0x7, 0x6, 0x0, 0x258c, 0x3, 0x2, 0x9, 0x5, 0xffff, 0xfffffff8, 0x9, 0x5, 0x66fc, 0x3, 0x8, 0x3, 0x7, 0x3, 0x7fff, 0x1, 0x4, 0x7, 0x18, 0x8000000, 0xfffffffe, 0xc, 0x80000001, 0x3, 0x1, 0xcae, 0xd86, 0x2, 0x7, 0x6, 0x8, 0x6, 0x4, 0x8, 0x784, 0x0, 0x80, 0x9, 0x1ff, 0x7, 0x8, 0xfffffffc, 0x2, 0x2, 0x6, 0xf, 0x8, 0x0, 0x5, 0x10001, 0x8001, 0x5, 0x9, 0x0, 0x1ff, 0x7, 0xfffffff7, 0x401, 0x6, 0x5, 0x9, 0xc68, 0x6, 0x8, 0x0, 0x6, 0x0, 0x3, 0xfffff6a8, 0x9, 0x1, 0xffffffff, 0x6, 0x401, 0x4, 0x2, 0x1, 0x5, 0x1, 0x2, 0x7, 0x6, 0x3, 0x2, 0x5, 0x81, 0xc1, 0x5, 0x1, 0x10, 0x6, 0x5, 0xad, 0xf72b, 0x2, 0x8000, 0x7, 0x3, 0xfffffffc, 0x9, 0xfffffcb9, 0xa2f, 0x7fffffff, 0x9, 0xffff, 0x3, 0x10, 0x7fffffff, 0x9, 0x80, 0x9, 0xa, 0x6, 0x9, 0x7f, 0x5, 0x4, 0xfff, 0x30000000, 0x6, 0x6c4, 0x80, 0x7, 0xfffffff5, 0x8, 0x6, 0x5, 0x3, 0xe79b, 0x5, 0x7, 0x74b, 0x5, 0x3, 0x7, 0x3, 0x7, 0x4, 0x40, 0x8292, 0xffffffff, 0x7, 0x8, 0xfffff107, 0x0, 0x6, 0x4, 0x8, 0x9, 0x400, 0x80, 0x80000001, 0x31de, 0x3, 0x6, 0x81, 0x4, 0x7, 0x0, 0x8b1, 0xea5a, 0xfff, 0x7, 0xa62c00, 0x80000000, 0x4, 0x2, 0x4, 0x400, 0x1, 0x3, 0xd, 0x80, 0x4, 0xb, 0x8, 0x0, 0x3, 0xfffffffe, 0x3, 0x8, 0x7660, 0xd90f, 0x0, 0x9, 0x6013c9e0, 0x3, 0x1ff, 0xe, 0x3ff, 0x80, 0x2, 0x9, 0x7fff, 0x89c, 0xa, 0x5, 0xff, 0x7, 0x4, 0x80, 0x532faa9f, 0x2, 0x6, 0x7f, 0x7, 0x0, 0x8, 0x359c000, 0x0, 0x9, 0xb4a, 0x9, 0x2, 0x9, 0x5, 0x87, 0xf, 0x4, 0x1, 0x9, 0x401, 0x9, 0xa, 0x62, 0xff, 0x2, 0x100, 0x8, 0x7, 0x0, 0x101, 0x1, 0xa6, 0x6, 0xfffffff7, 0x53071c7a, 0xc6, 0x430, 0xb, 0x80000000, 0x5c356399, 0x8001, 0xf8, 0x6, 0xd, 0x4, 0x8, 0x1, 0x9, 0x7f, 0x0, 0x2, 0x7, 0x3, 0x8, 0xfffffff7, 0x800, 0x6, 0x1, 0xffffadc5, 0x2035, 0x7, 0x5, 0x10001, 0x9, 0xfffffffb, 0x4, 0xec38, 0xb, 0x78, 0x0, 0x2, 0x3, 0x6, 0x1ff, 0x8, 0x7d, 0xbb, 0xfffffff7, 0x202, 0x6, 0x6, 0x4df, 0x6, 0x9, 0x8000, 0x300000, 0x0, 0x8c01, 0x0, 0x2, 0x7, 0x5, 0x868, 0x69, 0x9, 0x5, 0xfffffff9, 0x3, 0x1, 0xfffffff8, 0x4, 0x2, 0x0, 0x40, 0x9, 0x0, 0x992, 0x5, 0xe65, 0x2, 0xd3, 0x4, 0x5, 0xf1, 0x3, 0x7e5, 0x15, 0x8001, 0x434, 0x7, 0xe84e, 0x10, 0x7, 0x81, 0xca7c, 0x9c, 0x7ff, 0x7, 0x7f, 0x2, 0x6, 0x9, 0x6, 0x9, 0x1, 0x5, 0x400000, 0x10, 0x1, 0xc, 0x4, 0x1000000, 0x6, 0x8, 0x7aee80c7, 0x1, 0xffffff37, 0x5, 0x83a1, 0xff, 0x100, 0xd, 0x0, 0x400, 0x2, 0xffffffff, 0x2, 0x8, 0x1ff, 0x10001, 0x8, 0x8, 0x1, 0x8, 0x50d, 0x9, 0x400, 0x3ac, 0x22, 0xfa, 0x6, 0x0, 0x1, 0xf, 0x2, 0x5, 0x4, 0x101, 0x9a, 0x0, 0x5, 0x6, 0x5, 0x7fffffff, 0x101, 0x2, 0x5, 0xf337, 0x5, 0x8001, 0x4, 0x44, 0x10, 0x4, 0x9, 0x9, 0x80000000, 0x3, 0x90, 0x7, 0xc17, 0x7, 0x86b8, 0x8001, 0x7, 0x0, 0x9, 0x1, 0xfe000000, 0x100, 0x101, 0xb68, 0x7, 0x2, 0x8, 0x800, 0x6, 0x9, 0xf278, 0x2, 0xc, 0x2, 0x6, 0x2, 0x7a85, 0xf38d, 0x800000, 0x7, 0x8, 0x6, 0x18b5, 0x3, 0x1, 0x10000000, 0x0, 0x7, 0x8, 0xe3a2, 0x71, 0x4, 0x7, 0xd, 0x6, 0x81, 0x2, 0xc6, 0x8, 0x800, 0x4, 0x10001, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x3, 0x0, 0x0, 0x10, 0xffffffff, 0x4, 0x0, 0xd2, 0x0, 0x8, 0x2, 0x8, 0x571d, 0x800, 0x4, 0x9, 0x25de, 0xff, 0x8, 0x2, 0x3, 0x6d, 0x26d, 0xc1b, 0x2, 0x5, 0xf, 0xfffffffd, 0x6, 0x8001, 0x0, 0x3, 0x81, 0x6, 0x100, 0x7fffffff, 0x2, 0x7, 0x1, 0x8, 0xffffffff, 0xd7, 0x22e, 0x1, 0x4, 0x4, 0x1, 0x6, 0x0, 0xff, 0xd, 0x4, 0x0, 0x750e, 0xfffffff7, 0x2, 0xd, 0x1000, 0x4, 0x4, 0x28, 0x0, 0x9, 0x8001, 0x10, 0x8, 0x6, 0x10000, 0x4, 0x83, 0xa49, 0x2, 0x0, 0x4, 0xfffffff8, 0xfffffffb, 0x8, 0x6, 0x0, 0x1, 0x2, 0x5, 0xfffffffe, 0x3e, 0x7, 0x2, 0x14e9, 0xffffffff, 0x8, 0x8, 0x8, 0x5, 0x9, 0x4, 0x3, 0x0, 0x40, 0x7ff, 0x800, 0x9b, 0x6, 0x9, 0x6, 0x5, 0x36b, 0x7, 0x7, 0x7ff, 0x80000000, 0x1, 0x5, 0x0, 0x4, 0x5, 0xaa09, 0x7, 0x3, 0x63, 0x5409, 0xfffffffd, 0x66, 0x0, 0x0, 0x35, 0x7c000000, 0x7, 0xf58, 0x8, 0xff, 0xfffffffa, 0x0, 0x3, 0x4, 0x20, 0x80000000, 0x5, 0x40, 0x7, 0x10000, 0x0, 0x100, 0x1, 0x7, 0x0, 0x2, 0xaa, 0x944, 0xfff, 0xe6, 0x9, 0x7, 0x200, 0x7fffffff, 0x4e9eb4c, 0x3, 0x3, 0x200, 0x101, 0x8c, 0x7fff, 0x8, 0x2, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1000, 0x5, 0x5, 0x80000001, 0x4, 0xfffffff9, 0x2, 0xffffffff, 0x400, 0x9b7e, 0x7, 0x7, 0x5, 0x7cf01ff9, 0x9, 0x3, 0x80000000, 0x7, 0xff9, 0xfffffffb, 0x2d6400, 0x7fff, 0xfff, 0xa, 0x2, 0x80000000, 0xffffffb6, 0x996, 0x200, 0xd330, 0x5, 0x9, 0xd9, 0x2, 0xfffffff8, 0x6d, 0x3, 0x5, 0xe63, 0x1, 0x54b, 0xf, 0x8efa, 0x3ff, 0x390eccbb, 0x9, 0x1ff, 0x3000000, 0x1, 0x0, 0x2, 0x8001, 0x7ff, 0x5, 0xfffffff9, 0x0, 0x7, 0x8, 0x8, 0x3, 0x9, 0x9, 0x8, 0x5, 0x400, 0x4, 0xfffffff8, 0xfff, 0xc, 0x6, 0x101, 0xfff, 0x6, 0x40, 0x6, 0x7, 0x3ff, 0x6, 0xd15, 0x7, 0x1, 0x7, 0x2, 0x9, 0xd, 0xe, 0x81, 0x6, 0x8001, 0x238, 0xfffffffc, 0x0, 0x1, 0x2, 0x7, 0x81, 0x477b, 0x6, 0x784, 0xf0, 0x0, 0x7, 0x80000000, 0x0, 0x5, 0x1, 0x8165, 0x1, 0x8, 0x4, 0x86c, 0xe, 0xfffff86f, 0x5, 0x10001, 0x3, 0x4, 0x4, 0x0, 0x3fbc, 0x401, 0x9, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0x4, 0x5, 0x8, 0x9d36, 0x8001, 0x4, 0x1, 0x7f, 0x7fff, 0x3, 0x0, 0x4, 0xca4, 0x2, 0xc, 0x80000000, 0x0, 0x7b0, 0x7ff, 0x1, 0x401, 0x0, 0x25a15bb2, 0x80, 0xa, 0x0, 0xfff, 0x0, 0x1, 0x5921, 0x0, 0x1, 0x2, 0x8c, 0x8, 0x0, 0x27, 0x200, 0x9, 0x5, 0x6, 0xf, 0xfffff304, 0xf8, 0x5, 0x9, 0x400, 0x5, 0x1, 0x4, 0xd, 0x100, 0x6, 0x1, 0x9, 0x6, 0x6, 0x4, 0x6bf, 0x7, 0x0, 0x8, 0x5, 0x0, 0xc, 0x8001, 0x6, 0x0, 0x7, 0x0, 0xfffffff9, 0x40, 0x6, 0x1, 0x3, 0x6, 0x5, 0x3, 0xb, 0x9, 0x2, 0x0, 0x7ff, 0xb, 0x1f, 0x6, 0x0, 0x81, 0x9, 0x7fff, 0x9, 0x5, 0x7, 0x8, 0x3, 0x7, 0x6, 0xfff, 0xffffffff, 0x1, 0x8, 0xf, 0x3, 0x4, 0x10, 0x5, 0x12a, 0x1, 0x7, 0x6, 0x7fffffff, 0xfffffffa, 0x0, 0x2, 0x7, 0x1, 0x7f, 0x5, 0x4, 0x9, 0x10000, 0x0, 0x96, 0x1, 0x0, 0x200, 0x0, 0x1, 0x80000001, 0x1cbb754b, 0x1, 0x3, 0x5, 0x9, 0x80000000, 0x1, 0x145baf5, 0x4, 0x0, 0x2, 0x7fffffff, 0x0, 0x401, 0x6, 0x9, 0x2, 0x8, 0x40, 0x7, 0x5, 0xef, 0x4, 0x936, 0x7fffffff, 0x40, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x2, 0x5, 0x2, 0x6, 0x1, 0x80, 0x12844375, 0x7, 0x7, 0x0, 0x6, 0x4, 0x3, 0x6, 0x5, 0x1, 0x800, 0x1, 0x4, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x5c4, 0x2, 0x1, 0x5, 0x30da, 0x300, 0x7a4, 0x3dc97190, 0x4, 0x5, 0x80000001, 0x8, 0x0, 0x5, 0xf, 0x4, 0x8, 0x7, 0x7, 0x0, 0x4, 0x4, 0xb462, 0x2000000, 0x8001, 0x4, 0x2, 0x5, 0x0, 0x9, 0xbdd, 0x0, 0x4, 0x80000001, 0x7, 0x0, 0x2, 0x9, 0x19a18b8f, 0x0, 0x5, 0x2, 0x8, 0x1000, 0x4f6, 0x0, 0x7, 0x2, 0xe, 0x7, 0x1, 0x6, 0x401, 0xa63, 0xe, 0x9, 0x5, 0x5, 0x7148, 0xefac, 0xbe, 0x2, 0x3, 0x0, 0x8, 0x7, 0xb8aa, 0x4, 0x7, 0x3, 0x5, 0x1, 0x2, 0x4, 0x101, 0xfffffffd, 0x5, 0xfffff4db, 0x0, 0xb, 0xa9c, 0x8, 0x7, 0x5, 0xd, 0xe, 0x3, 0x9, 0x0, 0x9, 0xd, 0x0, 0x4, 0x9, 0x6, 0x2, 0x4, 0xfff, 0x17a9, 0x8000, 0x7, 0x1, 0xffff4c1c, 0x3, 0x1, 0x14, 0x8, 0x3, 0x7, 0x69, 0x2, 0x7f, 0x9, 0x3, 0xe547, 0x0, 0x5, 0x4, 0x4, 0x4, 0xc6, 0x8001, 0x7, 0xff, 0x9, 0x1, 0xfffffffb, 0x6, 0x7, 0x2000, 0x9, 0x4, 0x8, 0x3, 0x2, 0x0, 0x6, 0x2, 0x7, 0x9, 0x8000, 0x4, 0xd, 0x17b6, 0xf, 0xf, 0x7, 0x7, 0x6, 0x8001, 0x0, 0x7, 0x9, 0x9, 0x9, 0x9, 0x3, 0x1ff, 0x1, 0xfff, 0x4, 0x9, 0x9, 0x7, 0x80000001, 0xfff, 0x5, 0x0, 0x3, 0x20cf, 0x4, 0x10001, 0x0, 0xe9, 0x0, 0x6, 0x2, 0x1200, 0x1f, 0x3, 0x7fff, 0x146b, 0x1, 0x3, 0x80000000, 0xffffffff, 0x4, 0x200, 0x80000001, 0x1, 0xfaa, 0x8, 0x0, 0x8, 0x5, 0x4, 0x8, 0x8ac6, 0xcacc, 0xfffffff7, 0xffff5f65, 0x1, 0x9, 0xc, 0x400, 0x3966c9f8, 0x4, 0x1, 0x2, 0x2, 0x0, 0xa, 0xffff8402, 0x0, 0xfffff593, 0x3, 0x2, 0x10, 0x6, 0x81, 0x6, 0x6, 0xd7, 0x2, 0xd4, 0xb69c, 0x7, 0x9, 0x400, 0x6, 0x9, 0xfff, 0x7, 0x6, 0x8, 0x2, 0x6, 0xffffb9a3, 0x7, 0x81, 0x0, 0x4, 0x2, 0x73, 0x6, 0x2, 0x0, 0x5f45, 0x9, 0x10001, 0xc, 0x0, 0x8, 0x3, 0x200, 0x6, 0x3, 0x7, 0xffffffff, 0x40, 0xe6, 0x10000, 0xe20, 0x8, 0xffff, 0x6, 0x400, 0x4, 0x3, 0xb323, 0x1, 0x101, 0xe, 0x8, 0xff, 0xfffffff9, 0x0, 0x0, 0x3, 0x9512, 0x6, 0x50, 0x7, 0x8001, 0x9, 0xfd2, 0x5, 0x9, 0x8124, 0x7, 0x10001, 0x6, 0x0, 0x152f, 0x1, 0x4, 0x4, 0xffffff00, 0x9, 0x66c2, 0x4000000, 0x7fffffff, 0x6, 0x3, 0x5, 0x4, 0xfffffff5, 0xc00, 0x4, 0x10000, 0x6, 0xe47, 0xffffb653, 0x10000, 0x80000001, 0x3, 0x9, 0xffffffff, 0x1, 0x5, 0x3, 0x3, 0x0, 0x2, 0x80000000, 0x7, 0x8, 0x8000, 0x2, 0x2, 0x8000, 0x44c5, 0x3, 0x8, 0x6, 0xfffffffe, 0x8000, 0x957, 0x1000, 0x5, 0x5, 0x200, 0x10, 0x9, 0x3, 0x1, 0x3, 0x2, 0x0, 0x3, 0x101, 0x2, 0x9, 0x77b, 0xc7, 0x3, 0xc96, 0x7, 0x8001, 0x9, 0x2, 0x100, 0x551aafd1, 0x3ff, 0x8, 0xb, 0xe, 0x4, 0x1f18000, 0x9, 0x4, 0xfffffffa, 0x8, 0x800, 0x2, 0x8, 0x8, 0x2, 0x7fffffff, 0x9, 0x466c, 0xfffffff8, 0x5dbd, 0x4, 0x4, 0x7fffffff, 0x200, 0x0, 0x73e, 0xe6, 0xfff, 0x3, 0xffff8001, 0x7fffffff, 0x2, 0x81, 0x10000, 0x771, 0x9, 0x8, 0x7f, 0x1, 0xc, 0x0, 0x3, 0xf, 0x9, 0x5, 0x5, 0x3ff, 0x1, 0xd, 0x80, 0x3, 0x6, 0x0, 0x8, 0x100, 0x2, 0x7c, 0x8001, 0x7, 0x3, 0xfffeffff, 0x3, 0x400, 0x0, 0x1, 0x7, 0xc, 0x3, 0x7fffffff, 0x3, 0x9, 0x101, 0x5, 0xffffffff, 0x7, 0x411, 0xd9b, 0xf, 0xfffffc88, 0x1ff, 0x3, 0x7, 0x2, 0x1d0254fd, 0x3, 0x2, 0x5, 0x3, 0xe63f, 0x7, 0x0, 0x9, 0x0, 0x1812fde9, 0xfffffffb, 0x4, 0x0, 0x4, 0x2a, 0x6, 0x8, 0x7, 0xffffffff, 0x4, 0x5, 0x8000, 0xfff, 0xd4d, 0xa, 0x93, 0x40000000, 0x9, 0x101, 0xb, 0x5, 0xff, 0x3, 0x1, 0x1, 0x6, 0x10, 0x2, 0x409facbf, 0x0, 0x753, 0xffff, 0x462, 0xcc, 0xfffffffd, 0x6, 0xc, 0x5, 0x8000, 0x2, 0x7, 0xfffff307, 0xe9, 0x0, 0x7f, 0x8, 0x5, 0xffffffff, 0x3, 0xfffffc00, 0xe, 0x5, 0xfffffff9, 0x3f6f24c9, 0x80000001, 0x8, 0x4, 0x0, 0x6665, 0xfee, 0x7ff, 0x7, 0x7fff, 0x7, 0x464, 0x4, 0x400, 0x3, 0x3, 0x8, 0x8, 0x4, 0x40, 0x2, 0x0, 0x542, 0x2, 0x4, 0x8, 0x4, 0x4, 0x17, 0x4, 0x2, 0x2e4c, 0x9, 0x1, 0x8e6b, 0x4800, 0x101, 0x4, 0xab25, 0x5, 0x5, 0x0, 0x2, 0x0, 0x1ff, 0x1d28, 0xffff, 0x10001, 0x3, 0x2, 0xe6f, 0x2, 0x1ff, 0x5, 0x10, 0x80000001, 0xc, 0x4, 0xcae, 0x10, 0x6, 0x5, 0x40, 0x7f, 0x5, 0xed58, 0x0, 0x3ff, 0x0, 0x3, 0x8, 0x8, 0xffffffff, 0xd, 0x4, 0x3, 0x1, 0x5, 0xcb, 0x10001, 0x7fff, 0x6, 0xc, 0x2, 0x8, 0x7b9, 0x8, 0x3, 0x6d2, 0xb6, 0x5, 0x9, 0x4, 0xa, 0xc8a9, 0x0, 0x54b56790, 0xa01, 0xd, 0x0, 0x101, 0x63a00000, 0x5, 0x14, 0x1, 0xd28b, 0x9, 0xac, 0xf, 0x100, 0x8, 0x4, 0x6, 0x0, 0x1000, 0xc00, 0x6, 0x9, 0xfffffff9, 0x6, 0x7, 0x9, 0x7ff, 0x6, 0x2, 0x2, 0x7fffffff, 0xfffffffa, 0xd47, 0x9, 0x0, 0x2, 0x7, 0xfffffffa, 0x2, 0x8f75, 0x2d1d, 0x3ff, 0xc9e4, 0x4, 0x7, 0x2213, 0x2, 0x2, 0x0, 0x8001, 0x0, 0x75, 0x7, 0x0, 0x80000001, 0x1ff, 0x6, 0xd2e, 0xc, 0x3, 0x144, 0x8, 0x1, 0xa, 0x6, 0x7, 0x9, 0x9, 0x2, 0x9, 0x7, 0xc4b5, 0x5, 0x23, 0x4, 0x4, 0x2, 0x4, 0x9, 0x3e7, 0x9, 0x6, 0x6, 0x4, 0x3, 0x8, 0xffffffff, 0x9, 0x6, 0x7, 0x1, 0x0, 0x1ff, 0x8, 0x2, 0x2, 0x5d61, 0x52b3, 0x9, 0x6, 0x0, 0xa, 0x1, 0xfffffff8, 0x456a, 0x3, 0x7fff, 0x6, 0x5, 0x4, 0x4, 0xca73, 0x1, 0x8, 0x7fffffff, 0x4, 0x3, 0x8, 0x2, 0x2, 0x100, 0x1, 0x7, 0xfffffffb, 0x1, 0xf0, 0x8, 0x400, 0x9d, 0x1, 0x7fff, 0x5, 0x81, 0x1, 0x4, 0x1, 0x6, 0x690, 0xe, 0xb, 0xa, 0x42f8, 0x0, 0x2, 0x3, 0x1, 0x5040, 0x5d, 0x2, 0x6941, 0x400, 0xd, 0x60ea, 0xbb, 0x101, 0x5, 0x3, 0x80, 0xfffffffd, 0x0, 0x3ff, 0x7, 0x7, 0xf, 0x10001, 0x5, 0x4800000, 0xfffff3cd, 0x8, 0x6, 0x2, 0x7ff, 0xfffffff8, 0x6, 0x800, 0x9, 0x4, 0xb, 0x5, 0x547dfa33, 0x8, 0x2, 0x8, 0x1, 0x8001, 0x6, 0xc, 0x6bc4, 0x7, 0x6, 0x7, 0x5, 0x3, 0x8, 0x4, 0x9, 0x304e, 0x10, 0x7ff, 0xfae, 0x1, 0x3, 0x7, 0x4, 0x1, 0x7, 0x6, 0xffffffff, 0x0, 0x80000000, 0xd7, 0xfffffe00, 0x3, 0x1ff, 0x2227, 0xffff8a4a, 0x8, 0x3, 0x6, 0x0, 0x3ff, 0x2, 0x7, 0x7, 0x4, 0x2, 0x9, 0x9, 0x8, 0x3, 0x80000000, 0x3, 0x10000, 0x6, 0x7, 0x1bf, 0x100, 0x800, 0x3ff, 0x0, 0x99b, 0x100, 0xfff, 0x6, 0xfffffffe, 0x982, 0x6, 0x401, 0x7, 0x1, 0x4, 0x2, 0x7fff, 0x7, 0x3, 0x9, 0x5, 0x896c, 0x1, 0xffffffff, 0x7, 0x559b, 0x4, 0x9, 0x4, 0x0, 0x7448e8e6, 0x80, 0x80, 0x10001, 0xffffff71, 0x1e, 0x3, 0xff800000, 0x4, 0x7287, 0xf750, 0x3, 0x24, 0x9, 0x10, 0xb, 0x94, 0x3, 0xd75, 0x9, 0x1, 0x6, 0x8, 0x0, 0xf6bd, 0x1, 0x4, 0x85, 0x3, 0x6d, 0x3, 0xfff, 0x0, 0x0, 0x3, 0x3, 0x7, 0xfff, 0x6, 0x401, 0x6, 0x3, 0x3, 0x8, 0x2, 0x9, 0x8000, 0x6, 0x1000, 0x540a, 0xffffffff, 0x0, 0x2, 0xfff, 0xc8b, 0x7, 0x6, 0x3, 0x8, 0xfffffffd, 0x7, 0x80000001, 0x4ceb, 0x2, 0x2, 0x6, 0xf82, 0x7, 0x40, 0x1, 0x5, 0xc75, 0x8, 0xfff, 0xb38, 0x0, 0xff, 0x8001, 0xa, 0xaa, 0x1, 0x5, 0x3, 0x2, 0x7, 0x6, 0x1, 0x0, 0x4, 0xe, 0x7, 0x23, 0x8, 0x10001, 0x4, 0x2, 0xfff, 0x5ba3, 0x2, 0xf5f, 0x8, 0xc, 0x4fb9cab0, 0x0, 0x0, 0x5, 0x63f4fcdc, 0x8, 0x3, 0x4, 0x0, 0x0, 0x1, 0x17742883, 0x3, 0x4, 0xff, 0x1, 0x7fff, 0x10000, 0x5, 0x9, 0x4, 0x5, 0x2, 0x10000, 0x8, 0x80000001, 0x1, 0x6, 0xea, 0x1, 0x8, 0x200, 0x2, 0x8, 0xe7ec, 0x5b, 0x2, 0xffffff01, 0x3, 0x8001, 0x4, 0x5, 0x6, 0x6, 0x100, 0x8, 0x5, 0x3, 0x1000, 0x80000000, 0x2, 0x550, 0xa13, 0x401, 0x6, 0xd, 0x8, 0x5, 0x9382, 0x6, 0x7e52, 0x5, 0x1, 0x6, 0x33d7a3af, 0x5, 0xfd, 0x9, 0x1, 0x0, 0x5ea, 0x9, 0x7, 0x18, 0x9, 0x0, 0xc1f, 0x4, 0x32ab0984, 0x6, 0xd11, 0x2, 0x5, 0x800000, 0x9, 0x14b59b66, 0x7, 0x1, 0x3, 0xeb06, 0x7, 0x3, 0xfec0, 0x6, 0x2, 0x3aa9, 0x9, 0x2, 0x80000001, 0x80, 0x10000, 0x1, 0x2, 0x7, 0x84e4, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x40000, 0x81, 0x3, 0x2000000, 0xffffffff, 0x2, 0xfffffc01, 0x254, 0x9, 0x3, 0x3, 0xd, 0x6, 0x4, 0x8, 0x4, 0xfffffff8, 0x9, 0x4, 0x9, 0x45e, 0x3, 0xe, 0x7, 0x80, 0x6, 0x10001, 0x800, 0x9, 0x1, 0x8, 0x8, 0xad3, 0x2, 0x4, 0x8, 0x2, 0x7fff, 0x5, 0x7, 0x7, 0xa4f, 0x10, 0x7, 0xc, 0x9a3, 0x4, 0x6, 0x80, 0x0, 0xfffffffa, 0x0, 0x5, 0x8, 0x9, 0x2, 0x80, 0x595d3b89, 0xf, 0x0, 0x0, 0x81, 0xb23e, 0x80000001, 0xfffffffe, 0x7, 0x7fffffff, 0x6, 0x7ff, 0x40, 0x7f, 0x4, 0x1, 0x4, 0x7, 0xa, 0xfffffe01, 0xfffffffa, 0x0, 0xffffffff, 0xffffff28, 0x3, 0xd, 0x7fffffff, 0x4, 0x3, 0x7, 0xd, 0x1, 0xc, 0x1, 0x5, 0x18, 0x1, 0x2d0, 0x1ff, 0x3, 0x4, 0x9, 0x52b, 0x2, 0x1, 0x6, 0x2, 0x6, 0x5, 0xcf80, 0x0, 0x9, 0x8, 0x1, 0x7, 0x3, 0xc75e, 0x8, 0x8, 0x101, 0x7fffffff, 0x0, 0x5, 0x8, 0x0, 0x54bf, 0x38, 0x6, 0x58d, 0x10, 0xffff, 0xffff, 0x1, 0xfff, 0x7fffffff, 0x1, 0xbad, 0xffffffff, 0x0, 0x0, 0x6, 0x7, 0x80000000, 0x6, 0xd195, 0x1, 0x4, 0x0, 0x9, 0x1, 0xffffffff, 0x39c5, 0x3, 0x9, 0x8, 0x7, 0x6, 0x7dd, 0x3, 0xffffffff, 0x5, 0x4, 0x5, 0x480, 0x7, 0x6, 0x4, 0x4, 0x0, 0xfffffff9, 0xffff, 0x1, 0x3, 0x1000, 0x800, 0x1, 0x1, 0xc, 0x1, 0x4, 0x80, 0xfffffffe, 0x0, 0x8000, 0x2, 0x8, 0x6, 0xfff, 0x8, 0x4, 0xc, 0x4dff, 0x8, 0x5, 0x19e3, 0xf0000000, 0x2, 0x2, 0xfffffffd, 0x5, 0xa0c, 0x1000, 0xa98, 0x40, 0x7, 0x3, 0x7, 0xd, 0x2, 0x9, 0x7, 0x0, 0x800, 0x7, 0x1, 0x6, 0x80, 0x9309, 0x8, 0x8, 0x1097d6de, 0x3, 0x400, 0x8, 0xb11, 0x3, 0x5dc7, 0x634, 0x5, 0x1, 0xffffffff, 0xfffffffd, 0x81, 0x1, 0x400, 0x901c, 0x7fff, 0x7, 0x0, 0x8, 0x10001, 0x5, 0x6, 0x5, 0x424, 0xc320, 0x7, 0xfffffaa7, 0x2, 0x4, 0x10, 0x10, 0x7, 0x4, 0x8, 0x7, 0xe, 0x2, 0x0, 0x8, 0x1, 0x1, 0x0, 0x6, 0x400, 0x3, 0x1, 0x9, 0xd97, 0x8, 0xbb1, 0x81, 0x8, 0x2, 0x5, 0x0, 0x100, 0xffffffff, 0xffff3b52, 0x9017, 0x7, 0x9, 0x9db, 0x7, 0x1, 0x95d, 0x6, 0x3, 0x7, 0xfdc3, 0x942, 0x6, 0x80, 0x10000, 0x7, 0x4000, 0xa, 0x1, 0x131, 0x2, 0x3, 0xdbe9, 0x3, 0xa, 0x0, 0x5, 0x8, 0x3, 0x10000, 0x2, 0x5, 0xcacb, 0x1, 0x5, 0x2, 0x9, 0x0, 0x8, 0x9, 0x1, 0x3, 0xd, 0x2, 0xfffffeff, 0x9, 0x0, 0x9, 0xf, 0x80000000, 0xffffffff, 0x53280000, 0xfffffffd, 0x8, 0x0, 0x80000001, 0x94000000, 0x9, 0x6, 0x5, 0x2992, 0x0, 0x2, 0x5f0, 0x5, 0x1, 0xe0da, 0x9625, 0x86, 0x1, 0x6, 0x1ff, 0x2, 0x2, 0x7f, 0x6520, 0x7, 0x0, 0xffff, 0x4, 0x8e, 0x3, 0x37, 0xffffff23, 0xfffffff9, 0x2, 0x8, 0x8, 0x1ff, 0x6, 0x3, 0x5, 0x6, 0x2, 0x9, 0x6, 0x4, 0xd, 0x5, 0xd, 0x9, 0x7ff, 0x30, 0x4, 0x10000, 0x100, 0x8, 0xffff, 0x3, 0xff, 0x0, 0x7, 0x8, 0xa, 0x2, 0x11, 0x4, 0x2, 0x8001, 0x80, 0x2, 0xc, 0x9, 0xfffff5b0, 0x8, 0x7, 0x5, 0x80, 0x2, 0x7, 0x0, 0x7f, 0x1, 0x5, 0x6, 0xae, 0x1, 0xa6, 0x5, 0xffff, 0x10, 0x0, 0x9, 0x9, 0x800, 0x1, 0x10ba2aa4, 0x7f, 0xe, 0xff, 0x1000, 0x400, 0x3, 0xffffffff, 0x3, 0x5, 0x10000, 0x8, 0x6, 0x7, 0x927, 0xffff, 0x3, 0x5, 0x3, 0x8, 0xf, 0x8, 0xffffff31, 0x3, 0x1000, 0xfc000000, 0x7, 0x3, 0x3, 0x9, 0x9, 0xe19, 0x334, 0x2, 0x1, 0x1, 0x78, 0x7, 0x9, 0x1ff, 0xb, 0x5, 0x0, 0x39e2, 0x80000001, 0x2, 0xffff8000, 0x4, 0x7, 0x3, 0x0, 0x7bb3, 0x1, 0x3, 0x4, 0x8000, 0x9, 0x0, 0x100, 0x7, 0x1, 0xdb6, 0xfffffffd, 0x2, 0x1, 0x9, 0x43c, 0x1000, 0xee, 0xc, 0x7, 0x8, 0x8, 0x1, 0x7a9a, 0xfffffc01, 0x0, 0x3, 0x4, 0x897, 0x8, 0x2, 0x6, 0x2, 0x9, 0x1, 0x5, 0x2, 0x400, 0xad32, 0x400000, 0x0, 0x93, 0x6, 0x1, 0x9, 0xf, 0x6, 0xa, 0x81, 0x401, 0x3, 0x5, 0x34, 0x0, 0x6, 0x9, 0x3, 0x6, 0x8, 0x7, 0x4, 0x3, 0xa17a, 0x9, 0xe, 0xb, 0x6e20, 0x0, 0x80000001, 0x1, 0x7, 0xee, 0x5, 0x3, 0xb, 0x15d3, 0x4, 0x8000, 0x3, 0x4, 0xffffffc0, 0x7fffffff, 0x3, 0x1, 0x2, 0x0, 0x8, 0xffff, 0x1, 0x100, 0x3, 0x4, 0x9, 0x7, 0x9, 0x7, 0x0, 0x800, 0x7, 0x17e17fc3, 0x6, 0x2084, 0x800, 0x81, 0x7ff, 0x8, 0x7ff, 0x9, 0x1, 0x7, 0x0, 0xd346, 0x3, 0x80, 0x80, 0x7, 0x10001, 0xfffffffa, 0x4, 0x0, 0x0, 0x5, 0x7, 0x1b28, 0x81, 0xe, 0x6, 0xff, 0x2, 0x5, 0x2, 0x699, 0x10000, 0xfc, 0x8, 0x5, 0x5a8e, 0xbaa, 0xa7eb, 0x4, 0x1, 0xc, 0x3, 0x7, 0x1, 0x7, 0x19f, 0x8, 0xbb6, 0x26ab, 0x8000, 0x7fffffff, 0xd79, 0x7b, 0x80, 0xc81, 0x9, 0x5a6, 0x7, 0x3, 0x5, 0x7fffffff, 0x800, 0x8, 0x80, 0x7, 0x1, 0xb3b7, 0x1400, 0x9, 0x0, 0x3, 0x91, 0x8001, 0x9a, 0xd4ee, 0x101, 0xa3b, 0x0, 0x81, 0x10, 0x1, 0x4, 0x7ff, 0xf9, 0xf, 0x4, 0x5, 0x5, 0x4, 0x5, 0x2, 0x1, 0x5, 0x2, 0x9, 0x5718, 0x5472, 0x200, 0xfff, 0xff, 0x1, 0x3e, 0x7, 0x3ff, 0x6, 0x2, 0x7, 0x60bccf10, 0x400, 0xd, 0x0, 0x1, 0x1, 0x1600000, 0x6, 0x5, 0x8f3f, 0xffffffff, 0x0, 0x8, 0x7, 0x0, 0xfffffff9, 0x8, 0x6, 0x3, 0x5, 0x6, 0x4, 0xfffffffa, 0xffffc657, 0x9, 0x8, 0x7fffffff, 0x80000000, 0x80000001, 0x0, 0x9, 0x3, 0x4, 0x7ce0, 0x3, 0x1, 0x2, 0x5, 0xff, 0x47d1, 0x6, 0x2, 0x1, 0x1, 0x0, 0x1, 0x4, 0x1, 0x32, 0xffff, 0x6, 0x2, 0x35000000, 0xc1a, 0x0, 0x6, 0x81, 0x8, 0x7, 0x4, 0x800, 0x1, 0x3f66, 0xb8d, 0x2, 0x100, 0x9, 0xa601, 0x101, 0x40, 0xfffff001, 0x0, 0xfff, 0x9, 0x0, 0x6, 0x4, 0x5, 0xff, 0x3, 0x5, 0x42c, 0x7, 0x10000, 0x8, 0x825, 0x5, 0xff, 0x6, 0x10001, 0x1, 0x7, 0x9, 0x4, 0x2c, 0x97bd, 0x6, 0x9, 0x200, 0x40, 0x74, 0x5, 0x5, 0xd, 0x7, 0x6, 0x7, 0x8001, 0x1, 0x2, 0x2f1, 0xb, 0x200, 0x8000, 0x3, 0x7f, 0x8, 0x0, 0x3, 0x1000, 0x4, 0x7fffffff, 0x5, 0xfffffff9, 0x2, 0x6, 0x6, 0x1, 0x33d, 0x3, 0x2, 0x82, 0x6, 0x6a2, 0x7f, 0x6, 0x80000000, 0x80000001, 0x1, 0x400, 0xfffffffa, 0x7ff, 0x8, 0x9, 0x9, 0xd468, 0x1dc, 0x6f, 0x4, 0x8, 0x71, 0x9, 0xffffffff, 0x2, 0x40, 0x7fff, 0x9, 0x6, 0xba, 0x6, 0x1, 0x8, 0x1000, 0x4, 0x8, 0x9, 0x7, 0xe, 0x6ab, 0x180000, 0xe, 0x4, 0x5, 0xc38a, 0x1ff, 0x3, 0xff, 0x3, 0xfff, 0x7fff, 0x7ff, 0xd, 0x4, 0x1, 0x7, 0x6, 0xe6a, 0x7, 0x81, 0x8, 0x2, 0x9f, 0x8, 0x3, 0x0, 0x12, 0x10, 0x1, 0x1, 0xa, 0x80, 0x7, 0x9, 0xd, 0x80000001, 0x5, 0x80000001, 0x2, 0xfffffe00, 0x0, 0x9, 0x1, 0x5, 0xbd, 0x12000000, 0x1, 0xb3, 0x3, 0x5, 0x3, 0x8001, 0xb, 0x8, 0x5, 0xe1, 0x9, 0x0, 0x9651, 0x4, 0x2, 0x782, 0xfffffe01, 0x88, 0xffff8000, 0x401, 0x2, 0x0, 0x3, 0x8, 0x94, 0x101, 0x2cb, 0x5, 0x4, 0x2, 0x1, 0x9, 0x0, 0x9, 0x2, 0x6, 0x6, 0x232000, 0x5, 0xfb87, 0x7, 0x4, 0x3c, 0x2, 0x5, 0x8, 0x5, 0xffff8bed, 0x3, 0x8, 0x7, 0x3, 0xffff17ff, 0x1, 0x10, 0x0, 0x9, 0x200, 0xffffffff, 0x8001, 0x4, 0x401, 0x4, 0x7, 0x6, 0x3, 0x335f, 0xfff, 0x8001, 0x9, 0x3, 0xfff, 0x8, 0x3, 0x5, 0xb3, 0x7, 0x8000, 0x5, 0x3, 0x3, 0x0, 0x4, 0x2, 0x81, 0xec2, 0x4, 0x7, 0x7, 0x4, 0x7, 0x8, 0xfff, 0x9, 0x4908, 0xe775, 0x9, 0x9, 0x1, 0x401, 0xc, 0x80, 0x1d7, 0xfdf3, 0x3, 0xffff2fb8, 0x7f, 0x2, 0x4, 0x3, 0x5, 0x3, 0x2, 0xe, 0x0, 0xd, 0x2, 0x80, 0x711, 0x9, 0x0, 0x80000000, 0xb39, 0x8, 0x8, 0x8a38, 0x870, 0x3ff, 0xb72, 0x6, 0x9, 0xf, 0x1ff, 0xffffffff, 0x5, 0x8, 0x4, 0x101, 0x8000, 0x6, 0x2, 0x4, 0x80000000, 0x3, 0x7, 0x100, 0x800, 0x12000, 0x5, 0x8, 0x2, 0x80000000, 0x4, 0x9, 0x4, 0x7, 0x4, 0xb4a, 0x10001, 0xffffffff, 0x6, 0x1, 0x1, 0x5, 0x3ff, 0x2, 0x3, 0x4, 0x0, 0x3, 0x81, 0x9, 0x7, 0x2, 0x2, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0xfffffffb, 0x1, 0x6, 0x8000, 0x85, 0x3, 0x7fffffff, 0x5b04, 0x4, 0x4, 0xff000000, 0x7fff, 0xe09, 0x101, 0x200, 0x401, 0x1ff, 0x5, 0x3, 0x8, 0x1, 0x4, 0x8, 0x8, 0x6, 0x101, 0x1, 0x5, 0x8, 0xffff, 0x4, 0x4, 0xf, 0x2, 0x5, 0x8, 0x1, 0x9, 0x80000001, 0x6, 0x101, 0x100, 0x8, 0x7, 0x5, 0x84, 0x3, 0xffffffff, 0xfff, 0x96, 0x8, 0x0, 0x21, 0x3, 0xe54, 0xfff, 0x6, 0x0, 0x7, 0x2, 0x4, 0x5, 0xfff, 0x6, 0xc, 0x9, 0x2, 0x6, 0x100, 0x6, 0x1, 0x1, 0x2, 0x60c3, 0x4c0, 0x71, 0x1, 0xc48, 0x3, 0x9, 0x1, 0xa, 0x6, 0x0, 0x400000, 0x8, 0xfffffff8, 0x1, 0xfffffffe, 0x6, 0x6, 0xc, 0x9, 0x9, 0x8a3, 0x5, 0x7, 0xff, 0xf, 0x6a4b, 0x8, 0xffffffff, 0xfffffff9, 0x7, 0x7, 0xccbb, 0x5, 0x7ff, 0xf3, 0x5, 0x5, 0x9566, 0x8, 0x80, 0x80000001, 0x7, 0x1, 0x7, 0x5, 0x10001, 0xfffffff7, 0x7ff, 0x7, 0x80000001, 0x6, 0x2, 0x6, 0x1, 0x1, 0x8, 0x1, 0xffffffff, 0x1ff, 0x5, 0x6, 0x4, 0x10001, 0x1757, 0x7, 0x141, 0x40, 0xff, 0x7, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x10000000, 0x2, 0x6, 0x6, 0x94, 0xc9, 0x2, 0x5, 0x5, 0xd35f, 0x1000, 0xc, 0x847, 0x5, 0x9, 0x4, 0xffffb352, 0x5, 0x5, 0x7, 0x9, 0x3ff, 0x400, 0x100, 0xffffffff, 0x2, 0x8, 0x4, 0x7, 0x0, 0x100, 0x0, 0xde8, 0x8, 0x7, 0x8, 0x4, 0xffffffff, 0x400, 0x1, 0x7c8, 0x0, 0x3, 0x7, 0xffffffff, 0x5, 0xfffffffb, 0x2, 0x7fffffff, 0x4, 0x3, 0x845, 0xffffff20, 0x1, 0x9364, 0x10000, 0x954, 0x400, 0xd2, 0x10000, 0x1, 0x5, 0x9, 0x2, 0x3, 0x81], 0x0, 0x4}) 1.982655949s ago: executing program 7 (id=7419): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x3c67, r3, 0x80000}) open_tree(r5, &(0x7f00000003c0)='./file0\x00', 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000000000000000000000dd3b8e2a725816e88cc6aaece99098f9e038e611a82fca77a7591058731a218e5e87805a1074494b673b9e9c6d3b0609059b2dbd5ac5666d096ad8b853bd7376ac155172445e12e3b57464389e11fdb71c3b40db7c81280ef8750d2ede4ff97b3a9dcde8f0ba6f8ae518629fc7a7746714989f5457d7b98774e61e73e3134d"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) socket$inet(0x2, 0x3, 0x6) close(0x3) socket(0x10, 0x3, 0x0) 1.300901496s ago: executing program 4 (id=7420): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 1.119264403s ago: executing program 8 (id=7421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000200000009"], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4a21, @rand_addr=0x64010102}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r2, 0xe, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fbff7fff000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000108500000086000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) fcntl$setflags(r3, 0x2, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0xfffffffc, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000600)={0x18, &(0x7f0000000380)={0x40, 0xa, 0x2, "b074"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0xd7d814dbf2d9918, 0xc, 0xf, "87e15b7d1018a844f87eea98be8b44"}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x82, 0x1, '\x00'}, &(0x7f0000000480)={0x20, 0x83, 0x1, '*'}, 0x0, 0x0}) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "200e"}]}}}}}}}}, 0x0) 750.668841ms ago: executing program 7 (id=7422): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000000000000000000000dd3b8e2a725816e88cc6aaece99098f9e038e611a82fca77a7591058731a218e5e87805a1074494b673b9e9c6d3b0609059b2dbd5ac5666d096ad8b853bd7376ac155172445e12e3b57464389e11fdb71c3b40db7c81280ef8750d2ede4ff97b3a9dcde8f0ba6f8ae518629fc7a7746714989f5457d7b98774e61e73e3134d"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) socket$inet(0x2, 0x3, 0x6) close(0x3) socket(0x10, 0x3, 0x0) 168.81729ms ago: executing program 4 (id=7423): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x0, 0x10c) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) creat(0x0, 0xdafbe5d6891b6e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@euid_lt={'euid<', r4}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '*('}}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) listen(r0, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0xca) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043b0affffffffffff2ffc0cde"], 0xd) dup2(0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 7 (id=7424): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="3f05a6ca55f5d31a1bc2c8e1b0b3497943cff4267e4b9e0e", 0x0, 0x18) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r1, 0x0, 0x10, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000040)="3eab380ca375743e7a049fbfe873e8ea0677466364ec66fe", 0x0, 0x18) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="7acb88c69ea50f380903c192dbbbb8f2fe3a90a100ea71fbf1534bd58bbf02c7a09138975b3f50c0f67c141217711af89109d2fb7a96c4d356fe37d3628157fb61895eed67abc027", 0x0, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x8000) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x8, 0x72}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000200)={0x2710, 0x2, 0x40000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x3, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xdf, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x700, 0x8000, 0xfffffffa, 0x400, {{0x16, 0x4, 0x3, 0x3c, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@cipso={0x86, 0x40, 0x3, [{0x8, 0xa, "e2be1ee411bfe872"}, {0x6, 0x10, "e0f0ae04c0dddc68c92b07d4d074"}, {0x6, 0xf, "8593879c14d1c07fc1470af2ac"}, {0x5, 0x11, "ce5c69f887b56017b0cb4fae211635"}]}, @end]}}}}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000680)={0x2, 0x0, 0xf000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, r8, 0x100, 0x6f9, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9d}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0xf0}}, 0x20000000) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f00000008c0)='.pending_reads\x00', 0x22042, 0x1e1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@cgroup, 0x2b, 0x0, 0x8, &(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0}, 0x40) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x12, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@jmp={0x5, 0x0, 0xa, 0x5, 0x9, 0xfffffffffffffff8, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x2, 0x0, 0x9, 0xa, 0xfffffffffffffff0}, @alu={0x0, 0x1, 0xc, 0x0, 0xa, 0x50}, @generic={0x81, 0x5, 0x4, 0xd52, 0xc2a2}, @generic={0xff, 0x3, 0x1, 0x7, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000b40)='GPL\x00', 0x400, 0x99, &(0x7f0000000b80)=""/153, 0x40f00, 0x90, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x1, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x5, 0x10, 0xc}], 0x10, 0x7f}, 0x94) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={r4, r9, 0x35, 0x0, @val=@netkit={@void, @value=r11, @void, @void, r10}}, 0x1c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000e00)={0x801, r12}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000e40)={0x0, 0x2}, &(0x7f0000000e80)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000ec0)=r13, 0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000f00), 0x400000, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000000f40)={0x5000, 0x4, 0x8, 0x4, 0x5}) fsmount(r9, 0x0, 0xc2) kernel console output (not intermixed with test programs): 3072,1024B). Runtime 600 seconds [ 2329.848359][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2329.905141][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.785652][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.825040][T11779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.847730][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.868647][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.074790][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.117337][T20440] Bluetooth: hci1: unexpected event for opcode 0x200f [ 2331.441995][T21504] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2332.185129][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.211528][T21520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7025'. [ 2332.567177][T21527] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7026'. [ 2332.579787][T21526] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7026'. [ 2333.241717][T21533] smb3: Unknown parameter 'opcxÏ' [ 2333.861798][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2333.906578][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.841328][T21555] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 2334.847847][T21555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2334.855543][T21555] vhci_hcd vhci_hcd.0: Device attached [ 2334.875221][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.094754][ T794] usb 51-1: new low-speed USB device number 7 using vhci_hcd [ 2336.157494][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.424741][T19358] usb 10-1: new low-speed USB device number 79 using dummy_hcd [ 2336.546116][ T9961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.554682][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.572695][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2336.732683][ T29] audit: type=1400 audit(2000001014.628:3009): avc: denied { mounton } for pid=21578 comm="syz.4.7033" path="/proc/699/cgroup" dev="proc" ino=144353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2336.778430][T21583] hfs: can't find a HFS filesystem on dev nullb0 [ 2336.803123][T19358] usb 10-1: config index 0 descriptor too short (expected 8192, got 45) [ 2336.843298][T19358] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.902432][T19358] usb 10-1: config 0 has no interfaces? [ 2336.908272][ T29] audit: type=1400 audit(2000001014.668:3010): avc: denied { mounton } for pid=21578 comm="syz.4.7033" path="/proc/699/cgroup" dev="nsfs" ino=4026535424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2336.941980][T19358] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2336.962792][T19358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.017136][T19358] usb 10-1: config 0 descriptor?? [ 2337.239043][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.308200][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.516987][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 750 seconds [ 2338.527818][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 750 seconds [ 2338.538927][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 750 seconds [ 2338.550316][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 750 seconds [ 2338.804769][ T6509] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2338.943211][T21617] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2339.109103][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.122757][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2339.247530][ T29] audit: type=1400 audit(2000001017.148:3011): avc: denied { watch_mount } for pid=21615 comm="syz.5.7037" path="/502" dev="tmpfs" ino=2772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2339.389416][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2339.414725][ T6509] usb 5-1: Using ep0 maxpacket: 32 [ 2339.423968][ T6509] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2339.451339][ T6509] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2340.024066][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.077643][ T6509] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2340.145216][ T6509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2340.184775][ T6509] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2340.455128][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.553406][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.593798][ T6509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 2340.655445][ T6509] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2340.708880][ T6509] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2340.789629][ T6509] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2340.833487][ T6509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.893005][ T6509] usb 5-1: config 0 descriptor?? [ 2340.950963][T21599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2341.008999][T19358] usb 10-1: string descriptor 0 read error: -71 [ 2341.040213][T21557] vhci_hcd: connection reset by peer [ 2341.059831][ T85] vhci_hcd vhci_hcd.9: stop threads [ 2341.069792][T19358] usb 10-1: USB disconnect, device number 79 [ 2341.084874][ T85] vhci_hcd vhci_hcd.9: release socket [ 2341.091758][ T85] vhci_hcd vhci_hcd.9: disconnect device [ 2341.157454][ T794] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2341.170865][T21599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.216879][T21599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.246195][T20440] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2341.256723][T21599] netlink: 'syz.4.7034': attribute type 1 has an invalid length. [ 2341.264498][T21599] netlink: 'syz.4.7034': attribute type 2 has an invalid length. [ 2341.335366][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2341.335406][T21599] netlink: 'syz.4.7034': attribute type 2 has an invalid length. [ 2341.476840][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2341.518171][ T6509] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2341.558577][ T6509] usb 5-1: USB disconnect, device number 53 [ 2341.566177][T19358] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2341.583642][T21673] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2341.603315][ T6509] usblp0: removed [ 2341.615325][T16664] net_ratelimit: 3 callbacks suppressed [ 2341.615338][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2341.737484][T19358] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2341.764681][T19358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.783690][T19358] usb 10-1: config 0 descriptor?? [ 2341.803649][T19358] cp210x 10-1:0.0: cp210x converter detected [ 2343.073577][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.081724][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.090364][T19358] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2343.109682][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 750 seconds [ 2344.057462][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 750 seconds [ 2344.069030][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 750 seconds [ 2344.080530][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 750 seconds [ 2344.115035][T19358] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2344.146287][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.181198][ T47] usb 10-1: USB disconnect, device number 80 [ 2344.233145][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2344.335458][ T47] cp210x 10-1:0.0: device disconnected [ 2345.055795][T21737] FAULT_INJECTION: forcing a failure. [ 2345.055795][T21737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.086473][T21737] CPU: 0 UID: 0 PID: 21737 Comm: syz.7.7052 Tainted: G L syzkaller #0 PREEMPT(full) [ 2345.086501][T21737] Tainted: [L]=SOFTLOCKUP [ 2345.086508][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2345.086518][T21737] Call Trace: [ 2345.086524][T21737] [ 2345.086531][T21737] dump_stack_lvl+0x100/0x190 [ 2345.086562][T21737] should_fail_ex.cold+0x5/0xa [ 2345.086584][T21737] _copy_to_user+0x32/0xd0 [ 2345.086605][T21737] simple_read_from_buffer+0xcb/0x170 [ 2345.086625][T21737] proc_fail_nth_read+0x1af/0x230 [ 2345.086650][T21737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.086676][T21737] ? rw_verify_area+0xce/0x6d0 [ 2345.086700][T21737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.086725][T21737] vfs_read+0x1e4/0xb30 [ 2345.086743][T21737] ? __pfx_vfs_read+0x10/0x10 [ 2345.086759][T21737] ? __fget_files+0x215/0x3d0 [ 2345.086784][T21737] ? __fget_files+0x21f/0x3d0 [ 2345.086818][T21737] ksys_read+0x12a/0x250 [ 2345.086834][T21737] ? __pfx_ksys_read+0x10/0x10 [ 2345.086860][T21737] do_syscall_64+0x106/0xf80 [ 2345.086878][T21737] ? clear_bhb_loop+0x40/0x90 [ 2345.086901][T21737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.086920][T21737] RIP: 0033:0x7f859d95d04e [ 2345.086935][T21737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2345.086951][T21737] RSP: 002b:00007f859e8a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2345.086968][T21737] RAX: ffffffffffffffda RBX: 00007f859e8a16c0 RCX: 00007f859d95d04e [ 2345.086979][T21737] RDX: 000000000000000f RSI: 00007f859e8a10a0 RDI: 0000000000000004 [ 2345.086990][T21737] RBP: 00007f859e8a1090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.087000][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.087010][T21737] R13: 00007f859dc16038 R14: 00007f859dc15fa0 R15: 00007ffdd7888578 [ 2345.087035][T21737] [ 2345.186443][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2346.623201][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2346.676570][T21759] x_tables: duplicate underflow at hook 1 [ 2346.740323][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2346.771607][T21761] vlan0: entered allmulticast mode [ 2346.776839][T21761] macsec0: entered allmulticast mode [ 2346.782148][T21761] veth1_macvtap: entered allmulticast mode [ 2347.810253][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.846655][T21790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.868057][T21790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2348.074707][ T4518] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2348.139013][ T29] audit: type=1800 audit(2000001026.038:3012): pid=21778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.7057" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2348.236225][ T4518] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2348.247683][ T4518] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2348.259173][ T4518] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2348.268699][ T4518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2348.278652][ T4518] usb 9-1: SerialNumber: syz [ 2348.498941][ T4518] usb 9-1: invalid UAC_HEADER (v1) [ 2349.417045][ T4518] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2349.472042][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2349.510971][ T4518] usb 9-1: USB disconnect, device number 88 [ 2349.568619][ T7388] udevd[7388]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2349.755022][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2349.816758][T21834] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2349.864927][ T794] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2349.987204][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2350.049176][ T794] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2350.058689][ T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.067799][ T794] usb 10-1: Product: syz [ 2350.072113][ T794] usb 10-1: Manufacturer: syz [ 2350.077347][ T794] usb 10-1: SerialNumber: syz [ 2350.088007][ T794] usb 10-1: config 0 descriptor?? [ 2350.097528][ T794] hub 10-1:0.0: bad descriptor, ignoring hub [ 2350.113648][ T794] hub 10-1:0.0: probe with driver hub failed with error -5 [ 2350.205139][T19358] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2350.318907][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2350.340649][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2350.351864][ T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2350.360739][T19358] usb 6-1: Using ep0 maxpacket: 16 [ 2350.369539][ T794] usb 10-1: media controller created [ 2350.376931][T19358] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2350.397509][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2350.406199][T19358] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2350.414629][T19358] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2350.425607][T19358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2350.452356][T19358] usb 6-1: config 0 descriptor?? [ 2350.536328][ T794] DVB: Unable to find symbol dib7000p_attach() [ 2350.549843][ T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2350.549961][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2351.226035][ T794] rc_core: IR keymap rc-dib0700-rc5 not found [ 2351.246236][ T794] Registered IR keymap rc-empty [ 2351.267471][ T794] dvb-usb: could not initialize remote control. [ 2351.273882][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2351.426709][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2351.758301][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2351.827910][T21867] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2351.836044][T19358] hid_parser_main: 28 callbacks suppressed [ 2351.836063][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.864895][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.888354][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.907557][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.947568][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.977242][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2351.993898][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2352.011356][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2352.320340][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2352.346443][T19358] greenasia 0003:0E8F:0012.0057: unknown main item tag 0x0 [ 2352.400098][T19358] greenasia 0003:0E8F:0012.0057: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 2352.574422][T19358] greenasia 0003:0E8F:0012.0057: no inputs found [ 2352.600743][T21878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7067'. [ 2352.714289][ T794] usb 10-1: USB disconnect, device number 81 [ 2352.785071][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2352.793194][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2352.849033][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2353.825209][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2354.188306][T21921] smb3: Unknown parameter 'opcxÏ' [ 2354.802426][T18236] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 630 seconds [ 2355.701346][T18236] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 630 seconds [ 2355.712679][T11856] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 690 seconds [ 2355.725019][T18236] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 630 seconds [ 2355.738258][T11856] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 690 seconds [ 2355.749950][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2355.754117][T18236] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 630 seconds [ 2355.774717][T11856] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 690 seconds [ 2355.786860][T11856] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 690 seconds [ 2355.830054][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2355.904992][ T3823] Bluetooth: hci2: command 0x0c1a tx timeout [ 2355.930317][ T3332] usb 6-1: USB disconnect, device number 93 [ 2356.837104][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2356.909794][T21949] Device name cannot be null; rc = [-22] [ 2357.614854][ T3332] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2357.779197][T21965] Device name cannot be null; rc = [-22] [ 2357.905901][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2357.985097][ T3332] usb 6-1: Using ep0 maxpacket: 16 [ 2358.025195][ T3332] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2358.044930][ T3332] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2358.098313][ T3332] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2358.148848][ T3332] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2358.168151][ T3332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.193869][ T3332] usb 6-1: config 0 descriptor?? [ 2358.634806][T16664] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2358.865185][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2358.926619][T16664] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2359.587408][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2360.224957][T11856] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 630 seconds [ 2360.235747][T11856] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 630 seconds [ 2360.246779][T11856] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 630 seconds [ 2360.258364][T11856] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 630 seconds [ 2360.515165][T16664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.525791][T16664] usb 5-1: config 0 descriptor?? [ 2360.533351][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2360.543850][T16664] cp210x 5-1:0.0: cp210x converter detected [ 2360.671928][T21993] tmpfs: Bad value for 'mpol' [ 2361.004850][ T3332] usbhid 6-1:0.0: can't add hid device: -71 [ 2361.010810][ T3332] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2361.131017][ T3332] usb 6-1: USB disconnect, device number 94 [ 2361.225454][T16664] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2361.474971][T16664] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2361.585813][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.607069][ T85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.615804][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.624920][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.662031][T19358] usb 5-1: USB disconnect, device number 54 [ 2361.787865][T19358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2361.878484][T22029] /dev/nullb0: Can't open blockdev [ 2362.216579][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2362.226217][T19358] cp210x 5-1:0.0: device disconnected [ 2362.684198][T22043] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7089'. [ 2363.306788][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2364.199474][T22053] tmpfs: Bad value for 'mpol' [ 2364.588420][T22055] smb3: Unknown parameter 'opcxÏ' [ 2365.201321][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2365.265437][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2365.713667][T19358] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2365.888907][T19358] usb 10-1: Using ep0 maxpacket: 16 [ 2365.905359][T19358] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.930896][T19358] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2365.984203][T19358] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2365.990881][T19358] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2366.118998][T19358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.811403][T22072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7092'. [ 2367.134303][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.190839][T19358] usb 10-1: config 0 descriptor?? [ 2367.273529][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.282256][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.291345][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.592761][T22083] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 2367.672773][T19358] usbhid 10-1:0.0: can't add hid device: -71 [ 2367.679683][T19358] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2367.693301][T19358] usb 10-1: USB disconnect, device number 82 [ 2368.303586][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.311699][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.747481][T22116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7101'. [ 2369.316919][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 780 seconds [ 2369.322925][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2369.328871][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 780 seconds [ 2369.365816][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2369.374806][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 780 seconds [ 2369.393018][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 780 seconds [ 2370.533775][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.967214][ T29] audit: type=1400 audit(2000001048.850:3013): avc: denied { setopt } for pid=22139 comm="syz.7.7106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2371.977163][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.018827][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.327884][T22160] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2372.419056][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.427917][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.437094][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.472861][T19358] usb 10-1: new low-speed USB device number 83 using dummy_hcd [ 2372.654597][T19358] usb 10-1: config index 0 descriptor too short (expected 8192, got 45) [ 2372.703402][T19358] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.744512][T19358] usb 10-1: config 0 has no interfaces? [ 2372.750058][T19358] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2372.842956][T19358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.883383][T19358] usb 10-1: config 0 descriptor?? [ 2373.502949][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2373.593147][ T1562] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2373.722435][ T1562] usb 6-1: device descriptor read/64, error -71 [ 2374.002493][ T1562] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2374.162556][ T1562] usb 6-1: device descriptor read/64, error -71 [ 2374.293077][ T1562] usb usb6-port1: attempt power cycle [ 2374.315603][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 780 seconds [ 2374.326759][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 780 seconds [ 2374.337888][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 780 seconds [ 2374.352380][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 780 seconds [ 2374.543247][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2374.932261][ T1562] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2374.989542][ T1562] usb 6-1: device descriptor read/8, error -71 [ 2375.024598][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.137848][T22209] FAULT_INJECTION: forcing a failure. [ 2375.137848][T22209] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.151376][T22209] CPU: 0 UID: 0 PID: 22209 Comm: syz.8.7113 Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.151402][T22209] Tainted: [L]=SOFTLOCKUP [ 2375.151408][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2375.151416][T22209] Call Trace: [ 2375.151421][T22209] [ 2375.151426][T22209] dump_stack_lvl+0x100/0x190 [ 2375.151448][T22209] should_fail_ex.cold+0x5/0xa [ 2375.151464][T22209] should_failslab+0xc2/0x120 [ 2375.151480][T22209] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2375.151497][T22209] ? dst_alloc+0x99/0x1a0 [ 2375.151514][T22209] dst_alloc+0x99/0x1a0 [ 2375.151530][T22209] rt_dst_alloc+0x35/0x3a0 [ 2375.151549][T22209] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 2375.151568][T22209] ip_route_output_key_hash+0x118/0x2b0 [ 2375.151583][T22209] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2375.151598][T22209] ? irqentry_exit+0x180/0x670 [ 2375.151616][T22209] ip_route_output_flow+0x27/0x150 [ 2375.151632][T22209] udp_sendmsg+0x1a77/0x2890 [ 2375.151651][T22209] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2375.151671][T22209] ? __pfx_udp_sendmsg+0x10/0x10 [ 2375.151696][T22209] ? irqentry_exit+0x180/0x670 [ 2375.151706][T22209] ? lockdep_hardirqs_on+0x78/0x100 [ 2375.151725][T22209] ? irqentry_exit+0x180/0x670 [ 2375.151741][T22209] ? inet_sendmsg+0x18/0x140 [ 2375.151755][T22209] ? inet_send_prepare+0xf/0x540 [ 2375.151768][T22209] ? __pfx_udp_sendmsg+0x10/0x10 [ 2375.151787][T22209] inet_sendmsg+0x105/0x140 [ 2375.151800][T22209] ____sys_sendmsg+0x98d/0xb70 [ 2375.151813][T22209] ? __pfx_inet_sendmsg+0x10/0x10 [ 2375.151827][T22209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2375.151843][T22209] ? ___sys_sendmsg+0x118/0x1e0 [ 2375.151858][T22209] ___sys_sendmsg+0x190/0x1e0 [ 2375.151872][T22209] ? __pfx____sys_sendmsg+0x10/0x10 [ 2375.151885][T22209] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 2375.151905][T22209] ? native_queued_spin_lock_slowpath+0x900/0x9c0 [ 2375.151929][T22209] ? find_held_lock+0x2b/0x80 [ 2375.151954][T22209] __sys_sendmmsg+0x205/0x430 [ 2375.151973][T22209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2375.152007][T22209] __x64_sys_sendmmsg+0x9c/0x100 [ 2375.152025][T22209] do_syscall_64+0x106/0xf80 [ 2375.152036][T22209] ? clear_bhb_loop+0x40/0x90 [ 2375.152050][T22209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.152062][T22209] RIP: 0033:0x7f2ccbf9c819 [ 2375.152072][T22209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2375.152083][T22209] RSP: 002b:00007f2ccce3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2375.152100][T22209] RAX: ffffffffffffffda RBX: 00007f2ccc216090 RCX: 00007f2ccbf9c819 [ 2375.152112][T22209] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 2375.152123][T22209] RBP: 00007f2ccce3a090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.152133][T22209] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 2375.152144][T22209] R13: 00007f2ccc216128 R14: 00007f2ccc216090 R15: 00007ffeb52be1e8 [ 2375.152168][T22209] [ 2375.553472][T19358] usb 10-1: string descriptor 0 read error: -71 [ 2375.697387][ T1562] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2375.733565][T19358] usb 10-1: USB disconnect, device number 83 [ 2375.740901][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.754609][ T1562] usb 6-1: device descriptor read/8, error -71 [ 2375.872772][ T1562] usb usb6-port1: unable to enumerate USB device [ 2376.014866][T22235] Device name cannot be null; rc = [-22] [ 2376.152154][ T2150] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2377.291546][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2377.299869][ T2150] usb 9-1: Using ep0 maxpacket: 8 [ 2377.338684][ T2150] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2377.368866][ T2150] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2377.383678][ T2150] usb 9-1: config 0 descriptor?? [ 2377.404637][ T2150] gm12u320 9-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 2377.405083][T22245] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2377.493758][T22252] x_tables: duplicate underflow at hook 1 [ 2377.507822][ T2150] gm12u320 9-1:0.0: probe with driver gm12u320 failed with error -5 [ 2377.541735][ T2150] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2377.578846][ T2150] usb-storage 9-1:0.0: device ignored [ 2377.971997][ T2150] usb 9-1: USB disconnect, device number 89 [ 2378.027937][T22218] nvme_fabrics: missing parameter 'transport=%s' [ 2378.035393][T22218] nvme_fabrics: missing parameter 'nqn=%s' [ 2378.062137][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2378.152250][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2378.161317][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2378.171049][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2378.243079][ T1562] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2378.432118][ T1562] usb 5-1: Using ep0 maxpacket: 16 [ 2378.438856][ T1562] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2378.453573][ T1562] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2378.460256][ T1562] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2378.474075][ T1562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.486587][ T1562] usb 5-1: config 0 descriptor?? [ 2378.803073][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2379.099514][ T1562] hid_parser_main: 28 callbacks suppressed [ 2379.099534][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.125372][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.160116][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.182117][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2379.193510][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.221005][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.296854][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.311983][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.330461][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.346173][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.367308][ T1562] greenasia 0003:0E8F:0012.0058: unknown main item tag 0x0 [ 2379.391808][ T4518] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2379.415003][ T1562] greenasia 0003:0E8F:0012.0058: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 2379.460059][ T1562] greenasia 0003:0E8F:0012.0058: no inputs found [ 2379.555782][ T4518] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2379.587505][ T4518] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.609157][ T4518] usb 9-1: Product: syz [ 2379.618853][ T4518] usb 9-1: Manufacturer: syz [ 2379.637521][ T4518] usb 9-1: SerialNumber: syz [ 2379.692107][ T4518] usb 9-1: config 0 descriptor?? [ 2379.715348][ T4518] hub 9-1:0.0: bad descriptor, ignoring hub [ 2379.728503][ T4518] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2379.919105][ T4518] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2379.943293][ T4518] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2379.963384][ T4518] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2379.981189][ T4518] usb 9-1: media controller created [ 2380.004993][ T4518] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2380.062894][ T4518] DVB: Unable to find symbol dib7000p_attach() [ 2380.069103][ T4518] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2380.133722][ T4518] rc_core: IR keymap rc-dib0700-rc5 not found [ 2380.139866][ T4518] Registered IR keymap rc-empty [ 2380.146239][ T4518] dvb-usb: could not initialize remote control. [ 2380.155611][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2380.227257][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2380.784237][ T794] usb 5-1: USB disconnect, device number 55 [ 2381.104983][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2381.364592][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2382.362125][ T4518] usb 9-1: USB disconnect, device number 90 [ 2382.428896][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2382.599360][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2382.915072][T22386] loop9: detected capacity change from 0 to 8 [ 2382.943078][ T6977] Dev loop9: unable to read RDB block 8 [ 2382.957844][ T6977] loop9: unable to read partition table [ 2382.988554][ T6977] loop9: partition table beyond EOD, truncated [ 2383.035516][T22386] Dev loop9: unable to read RDB block 8 [ 2383.059550][T11821] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2383.073033][T22386] loop9: unable to read partition table [ 2383.101341][T22386] loop9: partition table beyond EOD, truncated [ 2383.132549][T22386] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 2383.232032][ T4518] usb 10-1: new low-speed USB device number 84 using dummy_hcd [ 2383.301293][T11779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2383.310680][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2383.356966][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2383.440342][T22397] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2383.504971][ T4518] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.535297][ T4518] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2383.576182][ T4518] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2383.631030][ T4518] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 2383.685515][ T4518] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2383.745244][ T4518] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.779445][T22390] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2383.847298][ T4518] hub 10-1:1.0: bad descriptor, ignoring hub [ 2383.871634][ T4518] hub 10-1:1.0: probe with driver hub failed with error -5 [ 2383.911265][ T4518] cdc_wdm 10-1:1.0: skipping garbage [ 2383.930877][ T4518] cdc_wdm 10-1:1.0: skipping garbage [ 2383.948495][ T4518] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2384.142003][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2384.231674][ T1562] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2384.382484][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2384.591635][ T1562] usb 6-1: Using ep0 maxpacket: 16 [ 2384.613316][ T1562] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2384.672399][T16664] usb 10-1: USB disconnect, device number 84 [ 2384.708151][ T1562] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2384.738988][ T1562] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2384.771283][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.789596][ T1562] usb 6-1: config 0 descriptor?? [ 2384.941850][ T4518] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2385.192175][T11856] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 660 seconds [ 2385.347306][ T4518] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2385.356460][ T4518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.364609][ T4518] usb 5-1: Product: syz [ 2385.371760][ T4518] usb 5-1: Manufacturer: syz [ 2385.376371][ T4518] usb 5-1: SerialNumber: syz [ 2385.392867][ T4518] usb 5-1: config 0 descriptor?? [ 2385.415985][ T1562] hid_parser_main: 28 callbacks suppressed [ 2385.416004][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.429432][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2385.455537][ T4518] hub 5-1:0.0: bad descriptor, ignoring hub [ 2385.465319][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.481023][ T4518] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2385.492564][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.510329][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.520576][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.528458][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.539078][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.548689][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.558937][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2385.569212][ T1562] greenasia 0003:0E8F:0012.0059: unknown main item tag 0x0 [ 2386.463414][T18236] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 720 seconds [ 2386.472490][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2386.474347][T11856] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 660 seconds [ 2386.493438][T18236] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 720 seconds [ 2386.504581][T18236] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 720 seconds [ 2386.515764][T11856] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 660 seconds [ 2386.527018][T18236] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 720 seconds [ 2386.539492][T11856] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 660 seconds [ 2386.571967][ T4518] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2386.601789][ T1562] greenasia 0003:0E8F:0012.0059: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 2386.614893][ T4518] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2386.616140][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7144'. [ 2386.633114][ T1562] greenasia 0003:0E8F:0012.0059: no inputs found [ 2386.636681][ T4518] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2386.646476][T22462] lo speed is unknown, defaulting to 1000 [ 2386.650315][ T4518] usb 5-1: media controller created [ 2386.670298][ T4518] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2386.703608][T22462] wg1 speed is unknown, defaulting to 1000 [ 2386.719724][ T4518] DVB: Unable to find symbol dib7000p_attach() [ 2386.727255][T22462] virt_wifi0 speed is unknown, defaulting to 1000 [ 2386.727567][ T4518] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2387.326096][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2387.415161][ T4518] rc_core: IR keymap rc-dib0700-rc5 not found [ 2387.507179][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2387.514905][ T4518] Registered IR keymap rc-empty [ 2387.521993][ T4518] dvb-usb: could not initialize remote control. [ 2387.771702][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2388.160403][ T5859] usb 6-1: USB disconnect, device number 99 [ 2388.306010][ T4518] usb 5-1: USB disconnect, device number 56 [ 2388.369288][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2388.391832][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2388.530278][ T9961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2388.540954][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2388.550059][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2389.637976][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2390.441397][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2390.449606][T11856] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 660 seconds [ 2390.461072][T11856] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 660 seconds [ 2390.472342][T11856] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 660 seconds [ 2390.483592][T11856] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 660 seconds [ 2391.490222][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2392.141551][ T3823] Bluetooth: hci2: command 0x0c1a tx timeout [ 2392.184000][ T5179] udevd[5179]: worker [6972] /devices/virtual/block/nbd0 timeout; kill it [ 2392.986929][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.051789][ T5179] udevd[5179]: seq 33885 '/devices/virtual/block/nbd0' killed [ 2393.059276][ T5179] udevd[5179]: worker [22414] /devices/virtual/block/nbd1 timeout; kill it [ 2393.201585][ T5179] udevd[5179]: seq 33930 '/devices/virtual/block/nbd1' killed [ 2393.796951][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.819556][ T5179] udevd[5179]: worker [5798] /devices/virtual/block/nbd2 timeout; kill it [ 2393.840171][ T5179] udevd[5179]: seq 35510 '/devices/virtual/block/nbd2' killed [ 2393.868249][ T5179] udevd[5179]: worker [15413] /devices/virtual/block/nbd3 timeout; kill it [ 2393.905794][ T5179] udevd[5179]: seq 35861 '/devices/virtual/block/nbd3' killed [ 2393.948582][ T5179] udevd[5179]: worker [5796] /devices/virtual/block/nbd4 timeout; kill it [ 2393.975438][ T5179] udevd[5179]: seq 35888 '/devices/virtual/block/nbd4' killed [ 2394.101202][ T2150] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2394.119443][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2394.284106][ T2150] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2394.322233][ T2150] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.229130][ T9961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.251242][ T2150] usb 9-1: Product: syz [ 2395.255411][ T2150] usb 9-1: Manufacturer: syz [ 2395.290376][ T2150] usb 9-1: SerialNumber: syz [ 2395.303618][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.311919][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.336561][ T2150] usb 9-1: config 0 descriptor?? [ 2395.346519][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.376851][ T2150] hub 9-1:0.0: bad descriptor, ignoring hub [ 2395.402528][ T2150] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2395.578363][ T2150] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2395.623409][ T2150] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2395.685065][ T2150] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2395.786705][ T2150] usb 9-1: media controller created [ 2395.840063][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2396.385810][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2396.434873][T22604] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2396.442780][ T2150] DVB: Unable to find symbol dib7000p_attach() [ 2396.462922][ T2150] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2396.713247][ T2150] rc_core: IR keymap rc-dib0700-rc5 not found [ 2396.720469][ T2150] Registered IR keymap rc-empty [ 2396.727091][ T2150] dvb-usb: could not initialize remote control. [ 2396.734998][ T2150] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2396.855928][T22621] Device name cannot be null; rc = [-22] [ 2396.943506][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2397.398446][ T2150] usb 9-1: USB disconnect, device number 91 [ 2397.468301][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2397.942647][ T2150] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2397.982221][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2399.368700][T22658] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2399.581856][ T2150] net_ratelimit: 1 callbacks suppressed [ 2399.581873][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2400.643683][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2400.651815][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2400.652795][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2400.681240][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2400.687748][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 810 seconds [ 2400.701691][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 810 seconds [ 2400.715654][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 810 seconds [ 2400.726749][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 810 seconds [ 2401.662111][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2403.653644][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2403.671415][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2403.951243][ T4518] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2404.133395][ T4518] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2405.091822][ T4518] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.099845][ T4518] usb 6-1: Product: syz [ 2405.110310][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 810 seconds [ 2405.111707][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2405.121320][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 810 seconds [ 2405.140068][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 810 seconds [ 2405.344783][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 810 seconds [ 2405.355868][ T4518] usb 6-1: Manufacturer: syz [ 2405.360613][ T4518] usb 6-1: SerialNumber: syz [ 2405.376152][ T4518] usb 6-1: config 0 descriptor?? [ 2405.413995][ T4518] hub 6-1:0.0: bad descriptor, ignoring hub [ 2405.419911][ T4518] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2405.625259][ T4518] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2405.766169][T22718] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2406.733104][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.876860][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.931307][ T4518] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2406.951505][ T4518] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2406.960026][ T4518] usb 6-1: media controller created [ 2406.974417][ T4518] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2408.133213][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2408.172090][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2408.325080][ T1562] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2408.621940][ T4518] DVB: Unable to find symbol dib7000p_attach() [ 2409.077662][ T4518] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2409.121107][ T1562] usb 10-1: Using ep0 maxpacket: 16 [ 2409.138205][ T1562] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.179578][ T1562] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2409.191082][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2409.225396][ T1562] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2409.274403][ T1562] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2409.284010][ T4518] rc_core: IR keymap rc-dib0700-rc5 not found [ 2409.291178][ T4518] Registered IR keymap rc-empty [ 2409.296109][ T4518] dvb-usb: could not initialize remote control. [ 2409.311954][ T1562] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.330218][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2409.342230][ T1562] usb 10-1: config 0 descriptor?? [ 2409.370077][ T4518] usb 6-1: USB disconnect, device number 100 [ 2409.463014][ T4518] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2409.723511][ T1562] usbhid 10-1:0.0: can't add hid device: -71 [ 2409.729592][ T1562] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2409.732850][T22780] xt_hashlimit: size too large, truncated to 1048576 [ 2409.772384][ T1562] usb 10-1: USB disconnect, device number 85 [ 2409.821504][ T4518] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 2409.851365][T22792] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2410.823444][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2410.831564][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2410.903520][ T4518] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.931990][ T4518] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2410.962355][ T4518] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2410.991406][ T4518] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2411.031926][ T4518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2411.039929][ T4518] usb 6-1: SerialNumber: syz [ 2411.063920][ T4518] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 2411.083016][ T4518] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 2411.089565][ T4518] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 2411.252947][ T4518] usb 6-1: USB disconnect, device number 101 [ 2411.387952][T22813] kAFS: unable to lookup cell 'Þ({^ú@' [ 2411.944431][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2413.065803][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2413.201295][T22835] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2413.212442][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7192'. [ 2413.221567][T22830] bridge0: port 3(batadv0) entered disabled state [ 2413.240990][T22830] bridge_slave_1: left allmulticast mode [ 2413.246608][T22830] bridge_slave_1: left promiscuous mode [ 2413.252364][T22830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2413.469933][T22830] bridge_slave_0: left allmulticast mode [ 2413.476282][T22830] bridge_slave_0: left promiscuous mode [ 2413.481934][T22830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2413.606646][T22845] x_tables: duplicate underflow at hook 1 [ 2413.676654][T22849] vlan3: entered allmulticast mode [ 2413.682025][T22849] macsec0: entered allmulticast mode [ 2413.911023][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2414.082310][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2414.142404][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2414.376165][T22872] Device name cannot be null; rc = [-22] [ 2414.522006][ T5859] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2414.747020][ T5859] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2415.245146][T22878] smb3: Unknown parameter 'opcxÏ' [ 2415.797768][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.816108][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2415.826220][T11856] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 690 seconds [ 2415.837151][ T5859] usb 5-1: Product: syz [ 2415.847670][ T5859] usb 5-1: Manufacturer: syz [ 2415.852317][ T5859] usb 5-1: SerialNumber: syz [ 2416.093707][ T5859] usb 5-1: config 0 descriptor?? [ 2416.112179][ T5859] hub 5-1:0.0: bad descriptor, ignoring hub [ 2416.120062][ T5859] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2417.231256][ T1562] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2417.241606][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2417.249693][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2417.257768][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2417.268012][T18236] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 690 seconds [ 2417.279048][T18236] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 690 seconds [ 2417.291569][T11856] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 750 seconds [ 2417.305004][T18236] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 690 seconds [ 2417.316053][T11856] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 750 seconds [ 2417.327606][T11856] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 750 seconds [ 2417.339015][T11856] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 750 seconds [ 2417.352115][ T5859] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 2417.367501][ T5859] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2417.375580][ T5859] dib0700: firmware download failed at 7 with -22 [ 2417.401657][ T5859] usb 5-1: USB disconnect, device number 57 [ 2417.521168][ T1562] usb 6-1: Using ep0 maxpacket: 16 [ 2417.527480][ T1562] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.539476][ T1562] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2417.555332][ T1562] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2417.565274][ T1562] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2417.574581][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.585306][ T1562] usb 6-1: config 0 descriptor?? [ 2418.707874][ T3823] Bluetooth: hci2: command 0x0c1a tx timeout [ 2418.755889][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2419.013227][ T1562] usbhid 6-1:0.0: can't add hid device: -71 [ 2419.019236][ T1562] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2419.051301][ T1562] usb 6-1: USB disconnect, device number 102 [ 2419.828921][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2420.808236][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2421.028343][T11856] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 690 seconds [ 2421.030173][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2421.039330][T11856] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 690 seconds [ 2421.059275][T11856] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 690 seconds [ 2421.146373][T11856] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 690 seconds [ 2421.227838][T22968] netlink: 'syz.4.7210': attribute type 1 has an invalid length. [ 2421.923230][T22992] smb3: Unknown parameter 'opcxÏ' [ 2422.558552][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2422.691135][ T5859] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 2422.934858][ T5859] usb 5-1: device descriptor read/all, error -71 [ 2423.100915][ T1562] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2423.230347][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 2423.251408][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 2423.268574][ T1562] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2423.279649][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 2423.288728][ T1562] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2423.304421][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 2423.316301][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7219'. [ 2423.325517][ T1562] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2423.335923][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.355764][ T1562] usb 6-1: config 0 descriptor?? [ 2423.369517][ T1562] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2423.421964][ T2150] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2423.623384][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2423.702114][ T2150] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 2423.712427][ T2150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2423.724083][ T2150] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.781374][ T2150] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2423.795692][ T2150] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2423.809612][ T2150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.827002][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2423.874655][ T2150] usb 10-1: config 0 descriptor?? [ 2424.047265][ T6509] usb 6-1: USB disconnect, device number 103 [ 2424.293873][ T2150] plantronics 0003:047F:FFFF.005A: reserved main item tag 0xd [ 2424.306728][ T2150] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2424.431606][ T1562] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2424.593337][ T1562] usb 9-1: Using ep0 maxpacket: 16 [ 2424.672625][ T1562] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2424.684449][ T1562] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2424.707649][ T1562] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2424.711820][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2424.740899][ T3332] usb 10-1: USB disconnect, device number 86 [ 2424.763466][ T1562] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2424.797691][ T1562] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.908190][ T1562] usb 9-1: config 0 descriptor?? [ 2424.924147][T23087] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7225'. [ 2424.962391][T23087] syz_tun: entered allmulticast mode [ 2425.062826][ T2150] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2425.590123][ T2150] usb 6-1: Using ep0 maxpacket: 8 [ 2425.609910][ T2150] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2425.638647][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.665299][ T2150] usb 6-1: config 0 descriptor?? [ 2425.684197][ T2150] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 2425.727163][ T2150] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 2425.738445][ T2150] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2425.747738][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2425.759359][ T2150] usb-storage 6-1:0.0: device ignored [ 2425.853324][ T1562] usbhid 9-1:0.0: can't add hid device: -71 [ 2425.861539][ T1562] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2425.871899][ T1562] usb 9-1: USB disconnect, device number 92 [ 2425.901864][ T2150] usb 6-1: USB disconnect, device number 104 [ 2426.051458][T23125] netlink: 'syz.4.7228': attribute type 1 has an invalid length. [ 2426.442190][ T9] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 2426.933709][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2427.693690][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2427.702953][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2427.735407][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.750888][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2428.551554][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2428.600618][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2428.629327][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2428.661907][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2428.674890][ T9] usb 5-1: SerialNumber: syz [ 2428.707818][ T3823] Bluetooth: hci2: command 0x0c1a tx timeout [ 2428.723459][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2429.089865][ T9] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 2429.107558][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 2430.239981][ T5879] usb 5-1: USB disconnect, device number 60 [ 2430.283313][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2430.631080][ T2150] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2430.659265][ T29] audit: type=1326 audit(2000001876.562:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2430.702817][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2430.781423][ T2150] usb 6-1: Using ep0 maxpacket: 16 [ 2430.795786][ T29] audit: type=1326 audit(2000001876.562:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2430.832104][ T2150] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2430.862700][ T2150] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2430.880891][ T29] audit: type=1326 audit(2000001876.562:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2430.911353][ T2150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2430.928579][ T2150] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2430.946763][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.954786][ T29] audit: type=1326 audit(2000001876.562:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.010181][ T29] audit: type=1326 audit(2000001876.562:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.053259][ T29] audit: type=1326 audit(2000001876.562:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.115135][ T29] audit: type=1326 audit(2000001876.562:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.152805][ T2150] usb 6-1: config 0 descriptor?? [ 2431.171040][ T29] audit: type=1326 audit(2000001876.562:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.208724][ T29] audit: type=1326 audit(2000001876.562:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.250850][ T29] audit: type=1326 audit(2000001876.562:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23305 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3bcfd9c819 code=0x7ffc0000 [ 2431.290868][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 840 seconds [ 2431.306235][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 840 seconds [ 2431.317708][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 840 seconds [ 2431.329538][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 840 seconds [ 2431.341412][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2432.734691][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2432.808606][ T2150] usbhid 6-1:0.0: can't add hid device: -71 [ 2432.923746][ T2150] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2432.954624][ T2150] usb 6-1: USB disconnect, device number 105 [ 2433.741436][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2433.908523][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2434.252584][T23337] kAFS: unable to lookup cell 'Þ({^ú@' [ 2434.648515][T23342] Bluetooth: hci5: Frame reassembly failed (-84) [ 2434.674956][T11773] Bluetooth: hci5: Frame reassembly failed (-84) [ 2434.781472][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2434.923921][ T2150] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 2434.944107][ T9] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2435.080968][ T2150] usb 6-1: device descriptor read/64, error -71 [ 2435.233333][ T9] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 2435.242404][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2435.253728][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2435.263729][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2435.277497][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2435.288774][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.302367][ T9] usb 9-1: config 0 descriptor?? [ 2435.631831][ T2150] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 2435.741285][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 840 seconds [ 2435.752297][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 840 seconds [ 2435.763448][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 840 seconds [ 2435.774805][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 840 seconds [ 2435.821373][ T2150] usb 6-1: device descriptor read/64, error -71 [ 2435.828890][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2435.868446][ T9] plantronics 0003:047F:FFFF.005B: reserved main item tag 0xd [ 2435.893519][ T9] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2435.931156][ T2150] usb usb6-port1: attempt power cycle [ 2435.996723][T23389] netlink: 'syz.9.7248': attribute type 1 has an invalid length. [ 2436.040100][T23389] bond1: entered promiscuous mode [ 2436.046634][T23389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2436.075108][T23389] vlan3: entered allmulticast mode [ 2436.080283][T23389] bond1: entered allmulticast mode [ 2436.136537][ T5879] usb 9-1: USB disconnect, device number 93 [ 2436.274429][ T2150] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 2436.311248][ T2150] usb 6-1: device descriptor read/8, error -71 [ 2436.550859][ T2150] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 2436.571278][ T2150] usb 6-1: device descriptor read/8, error -71 [ 2436.681732][ T2150] usb usb6-port1: unable to enumerate USB device [ 2436.701483][ T3823] Bluetooth: hci5: command 0x1003 tx timeout [ 2436.709335][T20440] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2436.953805][ T9] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2436.964318][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2436.981266][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2437.032128][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2437.422546][T23454] overlay: Unknown parameter 'euid<00000000000000000000' [ 2438.040537][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 2438.051857][ T9] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2438.061421][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2438.063930][ T9] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2438.730914][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2438.738488][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2438.768006][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.801138][T23470] kAFS: unable to lookup cell 'Þ({^ú@' [ 2438.979257][ T9] usb 9-1: config 0 descriptor?? [ 2439.111299][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2439.182464][T23477] kAFS: unable to lookup cell 'Þ({^ú@' [ 2440.004805][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.141894][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.843504][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 2440.850471][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2440.861607][ T9] usb 9-1: USB disconnect, device number 94 [ 2441.100592][T23505] kAFS: unable to lookup cell 'Þ({^ú@' [ 2441.181818][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2442.252705][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2442.464298][T23535] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2442.714582][T23543] kAFS: unable to lookup cell 'Þ({^ú@' [ 2443.031237][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2443.271667][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2443.581524][T23548] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2443.751933][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2444.004097][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.057514][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2444.106678][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2444.146493][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2444.177785][ T9] usb 5-1: config 0 descriptor?? [ 2444.210319][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2444.301663][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2444.680905][ T4518] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2444.855286][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7276'. [ 2444.864369][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7276'. [ 2445.091114][ T4518] usb 9-1: Using ep0 maxpacket: 16 [ 2445.124974][ T4518] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2445.141024][T16664] usb 5-1: USB disconnect, device number 61 [ 2445.158907][ T4518] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2445.187058][ T4518] usb 9-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 2445.211833][ T4518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.230870][ T4518] usb 9-1: config 0 descriptor?? [ 2445.329964][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 2445.329979][ T29] audit: type=1400 audit(2000001891.232:3136): avc: denied { execute_no_trans } for pid=23601 comm="syz.9.7277" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=151325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2445.367335][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2445.994798][T23624] smb3: Unknown parameter 'opcxÏ' [ 2446.145727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2446.161249][T11856] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 720 seconds [ 2446.243498][T11821] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2446.374178][ T4518] usbhid 9-1:0.0: can't add hid device: -71 [ 2446.386464][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2446.392906][ T4518] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2446.429858][ T4518] usb 9-1: USB disconnect, device number 95 [ 2446.837016][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2447.040695][T23661] binder: 23659:23661 ioctl c0306201 200000000080 returned -22 [ 2447.101728][T16664] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2447.199413][T23665] syzkaller0: entered allmulticast mode [ 2447.263398][T16664] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2447.276786][T16664] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2447.287911][T16664] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.298357][T16664] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2447.319247][T16664] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2447.331108][T16664] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2447.339483][T16664] usb 9-1: Manufacturer: syz [ 2447.350130][T16664] usb 9-1: config 0 descriptor?? [ 2447.350907][T11856] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 720 seconds [ 2447.366765][T11856] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 720 seconds [ 2447.378122][T11856] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 720 seconds [ 2447.421804][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2447.791248][T16664] hid_parser_main: 28 callbacks suppressed [ 2447.791262][T16664] appleir 0003:05AC:8243.005C: unknown main item tag 0x0 [ 2447.823185][T16664] appleir 0003:05AC:8243.005C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2447.905615][T11856] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 780 seconds [ 2447.916763][T11856] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 780 seconds [ 2447.927837][T11856] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 780 seconds [ 2447.938995][T11856] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 780 seconds [ 2448.271851][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.281463][ C1] buffer_io_error: 138 callbacks suppressed [ 2448.281476][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2448.295244][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.304814][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 2448.312669][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.322225][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 2448.330035][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.339565][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 2448.347373][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.356910][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 2448.364723][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.374256][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 2448.382060][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.391592][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 2448.411393][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.411469][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.420979][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2448.430479][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 2448.438333][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2448.446092][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 2448.469076][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2448.518255][ T5179] ldm_validate_partition_table(): Disk read failed. [ 2448.529365][ T5179] Dev loop6: unable to read RDB block 0 [ 2448.597142][ T5179] loop6: unable to read partition table [ 2448.603288][ T5179] loop6: partition table beyond EOD, truncated [ 2448.767260][ T2150] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 2448.928141][ T2150] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2449.212834][ T2150] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.223702][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.236487][ T2150] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2449.250718][ T2150] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2449.260051][ T2150] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2449.269464][ T2150] usb 10-1: Manufacturer: syz [ 2449.282101][ T2150] usb 10-1: config 0 descriptor?? [ 2449.292632][ T2150] igorplugusb 10-1:0.0: incorrect number of endpoints [ 2449.491891][T23689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.507906][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.520525][T23689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.561005][ T1562] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2449.712553][ T1562] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.725446][ T1562] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2449.738945][ T1562] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2449.760222][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.782176][ T1562] usb 6-1: config 0 descriptor?? [ 2449.788393][T23718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.795637][ T1562] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2449.806164][T23718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.886149][T16664] usb 9-1: USB disconnect, device number 96 [ 2450.381442][T23713] overlayfs: statfs failed on './file0' [ 2450.437837][T23754] tmpfs: Bad value for 'mpol' [ 2450.551403][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2450.789420][ T2150] usb 6-1: USB disconnect, device number 110 [ 2451.186340][T11856] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 720 seconds [ 2451.197716][T11856] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 720 seconds [ 2451.208968][T11856] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 720 seconds [ 2451.220043][T11856] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 720 seconds [ 2451.245968][T23780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7300'. [ 2451.715683][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2451.808819][T23784] kAFS: unable to lookup cell 'Þ({^ú@' [ 2452.218650][ T5859] usb 10-1: USB disconnect, device number 87 [ 2452.312322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2452.417607][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7306'. [ 2452.444455][T23812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2452.458691][T23812] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7306'. [ 2452.512137][ T4518] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2452.520145][ T1562] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2452.661055][ T5859] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2452.680874][ T1562] usb 6-1: Using ep0 maxpacket: 8 [ 2452.688240][ T4518] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 2452.696800][ T4518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2452.710393][ T1562] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2452.719490][ T4518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2452.729244][ T1562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.737461][ T4518] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2452.753172][ T1562] usb 6-1: config 0 descriptor?? [ 2452.758576][ T4518] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2452.771131][ T1562] gm12u320 6-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 2452.782378][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2452.782695][ T4518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.799989][ T1562] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 2452.809750][ T4518] usb 9-1: config 0 descriptor?? [ 2452.817258][ T1562] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2452.829278][ T1562] usb-storage 6-1:0.0: device ignored [ 2452.835445][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 2452.842175][ T5859] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2452.853724][ T5859] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2452.883701][ T5859] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2452.890355][ T5859] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2452.900927][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.912727][ T5859] usb 5-1: config 0 descriptor?? [ 2452.966287][ T1562] usb 6-1: USB disconnect, device number 111 [ 2453.667037][ T4518] usbhid 9-1:0.0: can't add hid device: -71 [ 2453.823497][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.425626][T23888] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7311'. [ 2454.577344][T23888] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7311'. [ 2454.971415][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2455.165372][ T4518] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2455.195779][ T4518] usb 9-1: USB disconnect, device number 97 [ 2455.240372][ T5859] usbhid 5-1:0.0: can't add hid device: -71 [ 2455.269501][ T5859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2455.325828][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7315'. [ 2455.342413][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2455.355585][ T5859] usb 5-1: USB disconnect, device number 62 [ 2455.953793][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7313'. [ 2455.977438][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7313'. [ 2455.986867][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2456.231232][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2456.368668][T23934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7318'. [ 2456.382657][T23934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7318'. [ 2456.401893][T23939] overlayfs: failed to resolve './file0': -2 [ 2457.022231][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2458.542247][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2458.551507][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2458.607719][ T514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2458.617037][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2459.613358][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2459.623510][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2460.144266][T23970] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2460.190783][ T5879] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2460.499246][ T5859] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 2460.513295][ T5879] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2460.521615][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2461.073435][T23972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7326'. [ 2461.564539][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2461.587479][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 870 seconds [ 2461.598987][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 870 seconds [ 2461.619385][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 870 seconds [ 2461.630544][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 870 seconds [ 2461.651153][ T5859] usb 10-1: Using ep0 maxpacket: 8 [ 2461.651670][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2461.688584][ T5859] usb 10-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2461.708997][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2461.722326][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.730794][ T5879] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2461.750059][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.755792][ T5859] usb 10-1: config 0 descriptor?? [ 2461.779705][ T5879] usb 5-1: config 0 descriptor?? [ 2461.797670][ T5859] gm12u320 10-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 2461.839624][ T5859] gm12u320 10-1:0.0: probe with driver gm12u320 failed with error -5 [ 2461.856169][ T5859] usb-storage 10-1:0.0: USB Mass Storage device detected [ 2461.867947][ T5859] usb-storage 10-1:0.0: device ignored [ 2461.985921][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2461.992429][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2462.008217][ T5859] usb 10-1: USB disconnect, device number 88 [ 2462.368096][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 2462.432025][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2462.466515][ T5879] usb 5-1: USB disconnect, device number 63 [ 2462.622824][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2462.711083][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2462.910849][ T3332] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 2463.071021][ T3332] usb 10-1: Using ep0 maxpacket: 16 [ 2463.081503][ T3332] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2463.096003][ T3332] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2463.110689][ T3332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2463.120860][ T3332] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2463.121362][ T4518] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2463.130073][ T3332] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.166378][ T3332] usb 10-1: config 0 descriptor?? [ 2463.260890][T19358] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2463.302931][ T4518] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2463.312143][ T4518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.322384][ T4518] usb 9-1: config 0 descriptor?? [ 2463.329844][ T4518] cp210x 9-1:0.0: cp210x converter detected [ 2463.410966][T19358] usb 5-1: Using ep0 maxpacket: 32 [ 2463.417715][T19358] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2463.426933][T19358] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2463.445717][T19358] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2463.455768][T19358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2463.464730][T19358] usb 5-1: Product: syz [ 2463.470989][T19358] usb 5-1: Manufacturer: syz [ 2463.475604][T19358] usb 5-1: SerialNumber: syz [ 2463.662599][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2463.712204][T19358] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2463.730861][T19358] usb 5-1: found format II with max.bitrate = 13, frame size=0 [ 2463.738757][ T4518] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2463.748334][T19358] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2463.795975][T19358] usb 5-1: USB disconnect, device number 64 [ 2463.846122][ T7388] udevd[7388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2464.001465][ T4518] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2464.188021][T24077] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2464.531652][T19358] usb 9-1: USB disconnect, device number 98 [ 2464.543257][T19358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2464.557165][T19358] cp210x 9-1:0.0: device disconnected [ 2464.702251][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2465.361609][T24100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7339'. [ 2466.354660][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.364017][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.382128][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.393150][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 870 seconds [ 2466.403895][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 870 seconds [ 2466.415701][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 870 seconds [ 2466.423862][ T514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.429242][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 870 seconds [ 2466.481778][ T3332] usbhid 10-1:0.0: can't add hid device: -71 [ 2466.521348][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.530136][ T3332] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2466.541163][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2466.721724][ T3332] usb 10-1: USB disconnect, device number 89 [ 2467.751090][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2467.939249][ T4518] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2468.372563][ T4518] usb 5-1: Using ep0 maxpacket: 16 [ 2468.389724][ T4518] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2468.417141][ T4518] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2468.450804][ T4518] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2468.458669][ T4518] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2468.480824][ T4518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.511552][ T4518] usb 5-1: config 0 descriptor?? [ 2468.858947][T24149] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2469.361140][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2469.583038][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2470.969901][T24159] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7352'. [ 2471.144376][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2471.232578][ T4518] usbhid 5-1:0.0: can't add hid device: -71 [ 2471.259710][ T4518] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2471.289776][T24171] random: crng reseeded on system resumption [ 2471.450822][ T9] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 2471.526017][ T4518] usb 5-1: USB disconnect, device number 65 [ 2471.633637][T24188] tmpfs: Bad value for 'mpol' [ 2471.748150][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 2471.801297][ T9] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2471.977417][ T9] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2471.991111][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2471.997803][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2472.028493][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.097748][ T9] usb 10-1: config 0 descriptor?? [ 2472.210203][T24195] kAFS: unable to lookup cell 'Þ({^ú@' [ 2472.345979][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2472.620934][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2473.460963][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2473.907566][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 2473.931174][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2473.973327][ T9] usb 10-1: USB disconnect, device number 90 [ 2474.032692][T24208] fuse: Bad value for 'fd' [ 2474.631112][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2474.776428][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2474.891272][T24220] kAFS: unable to lookup cell 'Þ({^ú@' [ 2475.045358][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 2475.203569][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2475.257894][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2475.267495][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2475.276421][T24224] xt_l2tp: v2 tid > 0xffff: 134217728 [ 2475.282326][ T9] usb 6-1: Product: syz [ 2475.575937][T24230] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2475.931931][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2475.940058][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2476.061872][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2476.101866][ T9] usb 6-1: SerialNumber: syz [ 2476.177158][ T9] usb 6-1: config 0 descriptor?? [ 2476.582594][T24243] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7363'. [ 2477.242930][T11856] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 750 seconds [ 2477.254774][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.329808][ T9] usb 6-1: USB disconnect, device number 112 [ 2477.359826][T24233] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2477.371709][T11856] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 750 seconds [ 2477.382855][T11856] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 750 seconds [ 2477.996546][T18236] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 810 seconds [ 2478.007588][T11856] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 750 seconds [ 2478.014586][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2478.018608][T18236] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 810 seconds [ 2478.039985][T18236] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 810 seconds [ 2478.050815][T24233] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2478.052139][T18236] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 810 seconds [ 2478.904700][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2478.908542][T19358] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 2478.949067][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2478.994347][T24233] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2479.070808][T24233] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.121524][T19358] usb 10-1: Using ep0 maxpacket: 16 [ 2480.071150][ T3823] Bluetooth: hci2: command 0x0c1a tx timeout [ 2480.082018][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2480.157503][T19358] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2480.193275][T24233] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2480.195003][T19358] usb 10-1: can't read configurations, error -71 [ 2480.243314][T24233] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.404263][T24233] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2480.441086][T24233] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.566456][ T13] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.580979][ T13] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.633377][ T13] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.645872][ T13] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.651397][T19358] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 2480.672310][T15023] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.680450][T15023] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.730861][T15023] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.739010][T15023] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.844505][T19358] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2480.861306][T19358] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.878421][T24302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7373'. [ 2480.910460][T19358] usb 10-1: config 0 descriptor?? [ 2480.923119][T24304] tmpfs: Bad value for 'mpol' [ 2481.089862][T19358] cp210x 10-1:0.0: cp210x converter detected [ 2481.253675][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.432879][T24315] fuse: Bad value for 'fd' [ 2481.513702][T19358] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2481.631089][ T2150] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2481.760107][T19358] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2481.812754][ T2150] usb 9-1: Using ep0 maxpacket: 16 [ 2481.822220][T18236] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 750 seconds [ 2481.833531][T18236] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 750 seconds [ 2481.844715][T18236] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 750 seconds [ 2481.855878][T18236] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 750 seconds [ 2481.870404][ T2150] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2481.890822][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2481.981059][T19358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2482.003405][ T2150] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2482.026895][ T2150] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2482.040823][ T2150] usb 9-1: Product: syz [ 2482.044983][ T2150] usb 9-1: SerialNumber: syz [ 2482.302275][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2482.458297][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2482.479329][ T9] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2482.495847][ T9] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2482.509333][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2482.515935][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2482.524953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.536090][ T9] usb 5-1: config 0 descriptor?? [ 2482.546508][ T5859] usb 10-1: USB disconnect, device number 92 [ 2482.566223][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2482.583536][ T2150] usb 9-1: config 0 descriptor?? [ 2482.593805][ T5859] cp210x 10-1:0.0: device disconnected [ 2483.341339][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2484.525449][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2484.592644][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 2484.610185][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2484.629576][ T9] usb 5-1: USB disconnect, device number 66 [ 2484.821036][ T5859] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 2485.037979][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2485.049105][ T5859] usb 10-1: device descriptor read/64, error -71 [ 2485.301138][ T5859] usb 10-1: new full-speed USB device number 94 using dummy_hcd [ 2485.440838][ T2150] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2485.440862][ T5859] usb 10-1: device descriptor read/64, error -71 [ 2485.546063][ T5879] usb 9-1: USB disconnect, device number 99 [ 2485.585207][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2485.603358][ T5859] usb usb10-port1: attempt power cycle [ 2485.708681][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2485.718758][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 2485.739909][ T2150] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2486.191699][ T2150] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2486.222054][ T2150] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2486.241947][ T2150] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2486.260564][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2486.282437][ T2150] usb 5-1: config 0 descriptor?? [ 2486.450895][ T5859] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 2486.635235][ T5859] usb 10-1: device descriptor read/8, error -71 [ 2486.956529][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2487.011964][ T5859] usb 10-1: new full-speed USB device number 96 using dummy_hcd [ 2487.042303][ T5859] usb 10-1: device descriptor read/8, error -71 [ 2487.108246][T24412] x_tables: duplicate underflow at hook 1 [ 2487.121500][T24412] vlan3: entered allmulticast mode [ 2487.765371][ T5859] usb usb10-port1: unable to enumerate USB device [ 2488.073742][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2488.152180][T24423] fuse: Bad value for 'fd' [ 2488.213595][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2488.412413][ T2150] usbhid 5-1:0.0: can't add hid device: -71 [ 2488.421215][ T2150] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2488.520257][ T2150] usb 5-1: USB disconnect, device number 67 [ 2488.624684][T24438] FAULT_INJECTION: forcing a failure. [ 2488.624684][T24438] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.637749][T24438] CPU: 1 UID: 0 PID: 24438 Comm: syz.9.7386 Tainted: G L syzkaller #0 PREEMPT(full) [ 2488.637775][T24438] Tainted: [L]=SOFTLOCKUP [ 2488.637782][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2488.637792][T24438] Call Trace: [ 2488.637798][T24438] [ 2488.637805][T24438] dump_stack_lvl+0x100/0x190 [ 2488.637839][T24438] should_fail_ex.cold+0x5/0xa [ 2488.637864][T24438] should_failslab+0xc2/0x120 [ 2488.637883][T24438] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2488.637908][T24438] ? anon_vma_clone+0x2ba/0xcd0 [ 2488.637934][T24438] anon_vma_clone+0x2ba/0xcd0 [ 2488.637964][T24438] __split_vma+0x51f/0xd90 [ 2488.637991][T24438] ? __pfx___split_vma+0x10/0x10 [ 2488.638030][T24438] vms_gather_munmap_vmas+0x1c6/0x1500 [ 2488.638061][T24438] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2488.638090][T24438] ? mas_walk+0x6ef/0x9b0 [ 2488.638125][T24438] __mmap_region+0x492/0x2a50 [ 2488.638154][T24438] ? __pfx___mmap_region+0x10/0x10 [ 2488.638181][T24438] ? find_lock_lowest_rq+0x4f/0x750 [ 2488.638205][T24438] ? find_held_lock+0x2b/0x80 [ 2488.638236][T24438] ? finish_task_switch.isra.0+0x205/0xb80 [ 2488.638263][T24438] ? rcu_is_watching+0x12/0xc0 [ 2488.638289][T24438] ? __lock_acquire+0x4a5/0x2630 [ 2488.638327][T24438] ? find_lowest_rq+0x17d/0x6f0 [ 2488.638382][T24438] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 2488.638408][T24438] mmap_region+0x30a/0x3e0 [ 2488.638439][T24438] do_mmap+0xc63/0x12f0 [ 2488.638464][T24438] ? __pfx_do_mmap+0x10/0x10 [ 2488.638484][T24438] ? __pfx_down_write_killable+0x10/0x10 [ 2488.638509][T24438] vm_mmap_pgoff+0x29e/0x470 [ 2488.638535][T24438] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2488.638555][T24438] ? __rcu_read_unlock+0x27f/0x5e0 [ 2488.638576][T24438] ? __fget_files+0x21f/0x3d0 [ 2488.638602][T24438] ksys_mmap_pgoff+0x3c8/0x650 [ 2488.638624][T24438] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2488.638642][T24438] ? fput+0x79/0x100 [ 2488.638668][T24438] ? ksys_write+0x1ac/0x250 [ 2488.638685][T24438] ? __pfx_ksys_write+0x10/0x10 [ 2488.638705][T24438] __x64_sys_mmap+0x125/0x190 [ 2488.638728][T24438] do_syscall_64+0x106/0xf80 [ 2488.638744][T24438] ? clear_bhb_loop+0x40/0x90 [ 2488.638767][T24438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.638785][T24438] RIP: 0033:0x7f65cb99c819 [ 2488.638800][T24438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2488.638817][T24438] RSP: 002b:00007f65cc8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2488.638834][T24438] RAX: ffffffffffffffda RBX: 00007f65cbc16180 RCX: 00007f65cb99c819 [ 2488.638846][T24438] RDX: 0000000000000000 RSI: 0000000000060002 RDI: 0000200000fa2000 [ 2488.638857][T24438] RBP: 00007f65cc8b4090 R08: 0000000000000007 R09: 0000000000000000 [ 2488.638867][T24438] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2488.638878][T24438] R13: 00007f65cbc16218 R14: 00007f65cbc16180 R15: 00007ffc6c5fad48 [ 2488.638902][T24438] [ 2489.139220][T24446] kAFS: unable to lookup cell 'Þ({^ú@' [ 2489.265746][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2489.282785][ T2150] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2489.441532][ T2150] usb 5-1: Using ep0 maxpacket: 8 [ 2489.469526][ T2150] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 2489.495054][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.517035][ T2150] usb 5-1: config 0 descriptor?? [ 2489.529269][ T2150] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 2489.544287][ T2150] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 2489.671614][ T2150] usb-storage 5-1:0.0: USB Mass Storage device detected [ 2489.683955][ T2150] usb-storage 5-1:0.0: device ignored [ 2490.213974][ T2150] usb 5-1: USB disconnect, device number 68 [ 2490.221399][ T47] usb 10-1: new full-speed USB device number 97 using dummy_hcd [ 2490.301794][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2490.382906][ T47] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.393491][ T47] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2490.405632][ T47] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2490.419771][ T47] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2490.428923][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2490.437571][ T47] usb 10-1: SerialNumber: syz [ 2490.449541][ T47] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 2490.457689][ T47] cdc_acm 10-1:1.0: This needs exactly 3 endpoints [ 2490.464637][ T47] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 2490.501500][ T5859] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2490.674428][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 2490.682679][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.694152][ T5859] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2490.703355][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2490.730318][ T5859] usb 6-1: Product: syz [ 2490.734593][ T5859] usb 6-1: SerialNumber: syz [ 2490.744189][ T5859] usb 6-1: config 0 descriptor?? [ 2491.520344][ T5859] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2491.525330][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2491.553775][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2491.752541][ T5859] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 2491.768839][ T5859] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2491.777968][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.786652][ T5859] usb 5-1: Product: syz [ 2491.790943][ T5859] usb 5-1: Manufacturer: syz [ 2491.795672][ T5859] usb 5-1: SerialNumber: syz [ 2491.812776][ T5859] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2491.836048][ T4518] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2492.061881][T11748] block nbd0: Possible stuck request ffff888028058000: control (read@0,1024B). Runtime 900 seconds [ 2492.073144][T11748] block nbd0: Possible stuck request ffff888028058200: control (read@1024,1024B). Runtime 900 seconds [ 2492.073905][T24490] random: crng reseeded on system resumption [ 2492.090796][T11748] block nbd0: Possible stuck request ffff888028058400: control (read@2048,1024B). Runtime 900 seconds [ 2492.102233][T11748] block nbd0: Possible stuck request ffff888028058600: control (read@3072,1024B). Runtime 900 seconds [ 2492.133820][ T3332] usb 5-1: USB disconnect, device number 69 [ 2492.542426][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2492.568089][ T5879] usb 10-1: USB disconnect, device number 97 [ 2493.130563][T24535] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2493.836841][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2493.840804][ T4518] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2493.861111][ T4518] ath9k_htc: Failed to initialize the device [ 2493.870073][ T3332] usb 5-1: ath9k_htc: USB layer deinitialized [ 2493.886879][ T5879] usb 6-1: USB disconnect, device number 113 [ 2494.488890][ T3332] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2494.679716][ T47] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 2494.711089][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2494.770811][ T3332] usb 5-1: Using ep0 maxpacket: 16 [ 2495.188901][ T2150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2495.202897][ T3332] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.222328][ T3332] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2495.248958][ T3332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2495.259723][ T47] usb 10-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 2495.270881][ T3332] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2495.271356][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2495.279944][ T47] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2495.297956][ T3332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.318955][ T3332] usb 5-1: config 0 descriptor?? [ 2495.327797][ T47] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2495.349334][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2495.367750][ T47] usb 10-1: SerialNumber: syz [ 2495.613692][ T47] usb 10-1: 0:2 : does not exist [ 2495.652316][ T47] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2496.223561][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2496.611638][T11856] block nbd1: Possible stuck request ffff8880280c8000: control (read@0,1024B). Runtime 900 seconds [ 2496.652233][T11856] block nbd1: Possible stuck request ffff8880280c8200: control (read@1024,1024B). Runtime 900 seconds [ 2496.678454][ T47] usb 10-1: USB disconnect, device number 98 [ 2496.699992][T11856] block nbd1: Possible stuck request ffff8880280c8400: control (read@2048,1024B). Runtime 900 seconds [ 2496.745342][T11856] block nbd1: Possible stuck request ffff8880280c8600: control (read@3072,1024B). Runtime 900 seconds [ 2497.295579][ T7388] udevd[7388]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2497.312391][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2497.403187][ T3332] usbhid 5-1:0.0: can't add hid device: -71 [ 2497.409183][ T3332] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2497.447706][ T3332] usb 5-1: USB disconnect, device number 70 [ 2497.746496][ T5859] usb 9-1: new full-speed USB device number 100 using dummy_hcd [ 2497.762082][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2498.234766][ T47] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 2498.273554][ T5859] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.284768][ T5859] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2498.297408][ T5859] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2498.319813][ T5859] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2498.331024][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2498.339062][ T5859] usb 9-1: SerialNumber: syz [ 2498.360161][ T5859] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 2498.372774][ T5859] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 2498.379357][ T5859] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 2498.390074][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2498.422135][ T47] usb 10-1: Using ep0 maxpacket: 16 [ 2498.440876][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2498.480280][ T47] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 2498.572857][ T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.599638][ T47] usb 10-1: Product: syz [ 2498.613278][ T47] usb 10-1: Manufacturer: syz [ 2498.640106][ T47] usb 10-1: SerialNumber: syz [ 2498.661176][ T47] usb 10-1: config 0 descriptor?? [ 2498.679685][ T47] hub 10-1:0.0: bad descriptor, ignoring hub [ 2498.686739][ T47] hub 10-1:0.0: probe with driver hub failed with error -5 [ 2498.705735][ T47] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2499.381295][T24675] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2499.697144][ T47] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2499.716969][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2499.848328][ T5859] usb 9-1: USB disconnect, device number 100 [ 2499.870869][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 2499.877248][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2499.889367][ T47] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2499.898995][ T47] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2499.908714][ T47] usb 6-1: Product: syz [ 2499.913303][ T47] usb 6-1: SerialNumber: syz [ 2499.923012][ T47] usb 6-1: config 0 descriptor?? [ 2501.185765][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2501.193890][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2501.580315][T24696] vlan2: entered allmulticast mode [ 2501.585762][T24696] macsec0: entered allmulticast mode [ 2501.591494][T24696] veth1_macvtap: entered allmulticast mode [ 2502.229444][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2502.262050][ T4518] usb 10-1: USB disconnect, device number 99 [ 2502.924410][T24732] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 2503.261787][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.647288][ T47] usb 6-1: USB disconnect, device number 114 [ 2504.061001][ T47] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2504.530877][ T4518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2504.565670][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2504.730829][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 2504.808879][ T47] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2504.840063][ T47] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2504.861887][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2504.869941][ T47] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2504.886348][ T47] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2504.905168][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.959618][ T47] usb 6-1: config 0 descriptor?? [ 2505.210074][ T4518] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2505.612420][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2505.782274][ T4518] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2505.867345][T24773] [ 2505.869681][T24773] ============================================ [ 2505.875811][T24773] WARNING: possible recursive locking detected [ 2505.881937][T24773] syzkaller #0 Tainted: G L [ 2505.887907][T24773] -------------------------------------------- [ 2505.894039][T24773] syz.5.7417/24773 is trying to acquire lock: [ 2505.900076][T24773] ffffffff8f7ad038 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.910315][T24773] [ 2505.910315][T24773] but task is already holding lock: [ 2505.917650][T24773] ffffffff8f7ad038 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.927892][T24773] [ 2505.927892][T24773] other info that might help us debug this: [ 2505.935925][T24773] Possible unsafe locking scenario: [ 2505.935925][T24773] [ 2505.943349][T24773] CPU0 [ 2505.946609][T24773] ---- [ 2505.949859][T24773] lock(qp_broker_list.mutex); [ 2505.954684][T24773] lock(qp_broker_list.mutex); [ 2505.959514][T24773] [ 2505.959514][T24773] *** DEADLOCK *** [ 2505.959514][T24773] [ 2505.967633][T24773] May be due to missing lock nesting notation [ 2505.967633][T24773] [ 2505.975927][T24773] 1 lock held by syz.5.7417/24773: [ 2505.981012][T24773] #0: ffffffff8f7ad038 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.991697][T24773] [ 2505.991697][T24773] stack backtrace: [ 2505.997565][T24773] CPU: 0 UID: 0 PID: 24773 Comm: syz.5.7417 Tainted: G L syzkaller #0 PREEMPT(full) [ 2505.997585][T24773] Tainted: [L]=SOFTLOCKUP [ 2505.997591][T24773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2505.997599][T24773] Call Trace: [ 2505.997604][T24773] [ 2505.997610][T24773] dump_stack_lvl+0x100/0x190 [ 2505.997636][T24773] print_deadlock_bug.cold+0xbd/0xca [ 2505.997658][T24773] __lock_acquire+0x12bb/0x2630 [ 2505.997677][T24773] ? mark_held_locks+0x40/0x70 [ 2505.997692][T24773] lock_acquire+0x1cf/0x380 [ 2505.997706][T24773] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.997722][T24773] ? __pfx___might_resched+0x10/0x10 [ 2505.997739][T24773] ? ctx_free_ctx+0x4bd/0xda0 [ 2505.997756][T24773] __mutex_lock+0x1a2/0x1b90 [ 2505.997770][T24773] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.997785][T24773] ? qp_notify_peer+0x1a6/0x230 [ 2505.997797][T24773] ? ctx_free_ctx+0x517/0xda0 [ 2505.997812][T24773] ? vmci_ctx_destroy+0x150/0x1c0 [ 2505.997827][T24773] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.997842][T24773] ? task_work_run+0x150/0x240 [ 2505.997856][T24773] ? exit_to_user_mode_loop+0x100/0x4a0 [ 2505.997870][T24773] ? do_syscall_64+0x67c/0xf80 [ 2505.997883][T24773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.997899][T24773] ? __pfx___mutex_lock+0x10/0x10 [ 2505.997920][T24773] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.997936][T24773] ? ctx_free_ctx+0x4bd/0xda0 [ 2505.997952][T24773] vmci_qp_broker_detach+0x14c/0x11e0 [ 2505.997969][T24773] ? kasan_quarantine_put+0x104/0x240 [ 2505.997989][T24773] ? lockdep_hardirqs_on+0x78/0x100 [ 2505.998011][T24773] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2505.998026][T24773] ? ctx_free_ctx+0x4bd/0xda0 [ 2505.998041][T24773] ? kfree+0x1f6/0x6b0 [ 2505.998057][T24773] ? ctx_free_ctx+0x39f/0xda0 [ 2505.998074][T24773] ctx_free_ctx+0x517/0xda0 [ 2505.998091][T24773] ? __pfx___schedule+0x10/0x10 [ 2505.998111][T24773] ? __pfx_ctx_free_ctx+0x10/0x10 [ 2505.998127][T24773] ? preempt_schedule_thunk+0x16/0x30 [ 2505.998147][T24773] ? preempt_schedule_common+0x42/0xc0 [ 2505.998168][T24773] ? preempt_schedule_thunk+0x16/0x30 [ 2505.998190][T24773] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 2505.998209][T24773] vmci_datagram_dispatch+0x3db/0xc60 [ 2505.998228][T24773] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 2505.998247][T24773] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 2505.998262][T24773] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 2505.998278][T24773] qp_notify_peer+0x1a6/0x230 [ 2505.998291][T24773] ? __pfx_qp_notify_peer+0x10/0x10 [ 2505.998314][T24773] vmci_qp_broker_detach+0xa20/0x11e0 [ 2505.998331][T24773] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2505.998346][T24773] ? ctx_free_ctx+0x4bd/0xda0 [ 2505.998361][T24773] ? kfree+0x1f6/0x6b0 [ 2505.998376][T24773] ? ctx_free_ctx+0x39f/0xda0 [ 2505.998394][T24773] ctx_free_ctx+0x517/0xda0 [ 2505.998412][T24773] ? synchronize_rcu_expedited+0x3c3/0x450 [ 2505.998428][T24773] ? __pfx_ctx_free_ctx+0x10/0x10 [ 2505.998445][T24773] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2505.998471][T24773] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 2505.998488][T24773] vmci_ctx_destroy+0x150/0x1c0 [ 2505.998507][T24773] vmci_host_close+0x115/0x1a0 [ 2505.998528][T24773] ? __pfx_vmci_host_close+0x10/0x10 [ 2505.998549][T24773] __fput+0x3ff/0xb40 [ 2505.998568][T24773] task_work_run+0x150/0x240 [ 2505.998583][T24773] ? __pfx_task_work_run+0x10/0x10 [ 2505.998600][T24773] exit_to_user_mode_loop+0x100/0x4a0 [ 2505.998615][T24773] do_syscall_64+0x67c/0xf80 [ 2505.998628][T24773] ? clear_bhb_loop+0x40/0x90 [ 2505.998644][T24773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.998658][T24773] RIP: 0033:0x7f86bef9c819 [ 2505.998669][T24773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.998683][T24773] RSP: 002b:00007f86bfdf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2505.998696][T24773] RAX: 0000000000000000 RBX: 00007f86bf216090 RCX: 00007f86bef9c819 [ 2505.998706][T24773] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 2505.998714][T24773] RBP: 00007f86bf032c91 R08: 0000000000000000 R09: 0000000000000000 [ 2505.998723][T24773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2505.998730][T24773] R13: 00007f86bf216128 R14: 00007f86bf216090 R15: 00007fffe27ffa08 [ 2505.998744][T24773] [ 2506.414490][ T4518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.473032][T24779] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 2506.622390][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2506.749203][ T4518] usb 9-1: config 0 descriptor?? [ 2506.766019][ T4518] cp210x 9-1:0.0: cp210x converter detected [ 2507.157294][ T4518] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2507.371181][ T4518] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2507.421387][T18236] block nbd3: Possible stuck request ffff888028198000: control (read@0,1024B). Runtime 780 seconds [ 2507.432158][T18236] block nbd3: Possible stuck request ffff888028198200: control (read@1024,1024B). Runtime 780 seconds [ 2507.443259][T18236] block nbd3: Possible stuck request ffff888028198400: control (read@2048,1024B). Runtime 780 seconds [ 2507.568941][ T3332] usb 9-1: USB disconnect, device number 101 [ 2507.576829][ T3332] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2507.591120][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2507.612470][ T3332] cp210x 9-1:0.0: device disconnected [ 2507.661865][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2508.040845][T18236] block nbd3: Possible stuck request ffff888028198600: control (read@3072,1024B). Runtime 780 seconds [ 2508.061277][T18236] block nbd2: Possible stuck request ffff88802813a000: control (read@0,1024B). Runtime 840 seconds [ 2508.071981][T18236] block nbd2: Possible stuck request ffff88802813a200: control (read@1024,1024B). Runtime 840 seconds [ 2508.082927][T18236] block nbd2: Possible stuck request ffff88802813a400: control (read@2048,1024B). Runtime 840 seconds [ 2508.100846][T18236] block nbd2: Possible stuck request ffff88802813a600: control (read@3072,1024B). Runtime 840 seconds [ 2508.701122][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2509.741011][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2510.062351][ T47] usbhid 6-1:0.0: can't add hid device: -32 [ 2510.068307][ T47] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 2510.621567][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2510.747159][T11773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2510.781157][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2511.820976][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2511.902492][T18236] block nbd4: Possible stuck request ffff8880281f8000: control (read@0,1024B). Runtime 780 seconds [ 2511.913384][T18236] block nbd4: Possible stuck request ffff8880281f8200: control (read@1024,1024B). Runtime 780 seconds [ 2511.924342][T18236] block nbd4: Possible stuck request ffff8880281f8400: control (read@2048,1024B). Runtime 780 seconds [ 2511.935403][T18236] block nbd4: Possible stuck request ffff8880281f8600: control (read@3072,1024B). Runtime 780 seconds [ 2512.861262][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2513.661318][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2513.900952][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2514.461673][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2514.941955][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog